Play interactive tour

Edit tour

Analysis Report Covid-19 Payroll Tax Adjustment.docx

Overview

General Information

Sample Name:	Covid-19 Payroll Tax Adjustment.docx
Analysis ID:	392737
MD5:	f78e1a17152954d2c56e3de7f889065f
SHA1:	9ad2cffb62540c6ad60eee087c97cc756949adfd
SHA256:	606e7c0165678adb36211ad727f8d128577a06584034ee39402b9a931f457b06
Infos:
Most interesting Screenshot:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Contains an external reference to another document

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Classification

Startup

System is w7x64

WINWORD.EXE (PID: 2436 cmdline: 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding MD5: 95C38D04597050285A18F66039EDB456)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 18.211.24.111:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.211.24.111:443 -> 192.168.2.22:49168 version: TLS 1.2

Source: global traffic

DNS query: name: admin.phishproof.com

Source: global traffic

TCP traffic: 192.168.2.22:49167 -> 18.211.24.111:443

Source: global traffic

TCP traffic: 192.168.2.22:49167 -> 18.211.24.111:443

Source: Joe Sandbox View

IP Address: 18.211.24.111 18.211.24.111

Source: Joe Sandbox View

ASN Name: AMAZON-AESUS AMAZON-AESUS

Source: Joe Sandbox View

JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BF840B3-025D-4403-9DBE-B492A11253DC}.tmp

Jump to behavior

Source: unknown

DNS traffic detected: queries for: admin.phishproof.com

Source: E0968A1E3A40D2582E7FD463BAEB59CD0.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 77EC63BDA74BD0D0E0426DC8F8008506.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: E0968A1E3A40D2582E7FD463BAEB59CD0.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: ~WRS{A70475F6-E366-40C3-B2E6-22C3DC55A9E1}.tmp.0.dr	String found in binary or memory: https://admin.phishproof.com/af-Dbh8nMk.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443

Source: unknown	HTTPS traffic detected: 18.211.24.111:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.211.24.111:443 -> 192.168.2.22:49168 version: TLS 1.2

Source: classification engine

Classification label: mal48.evad.winDOCX@1/16@1/1

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\Desktop\~$vid-19 Payroll Tax Adjustment.docx

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRC1A9.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Persistence and Installation Behavior:

Contains an external reference to another document

Show sources

Source: document.xml.rels

Binary or memory string: <Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships"><Relationship Id="rId3" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/webSettings" Target="webSettings.xml"/><Relationship Id="rId2" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/settings" Target="settings.xml"/><Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles" Target="styles.xml"/><Relationship Id="rId6" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/theme" Target="theme/theme1.xml"/><Relationship Id="rId5" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/fontTable" Target="fontTable.xml"/><Relationship Id="rId4" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/image" Target="https://admin.phishproof.com/af-Dbh8nMk.png" TargetMode="External"/></Relationships>

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Exploitation for Client Execution3	Path Interception	Path Interception	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	System Information Discovery2	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
admin.phishproof.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://admin.phishproof.com/af-Dbh8nMk.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
admin.phishproof.com	18.211.24.111	true	true	0%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://admin.phishproof.com/af-Dbh8nMk.png	~WRS{A70475F6-E366-40C3-B2E6-22C3DC55A9E1}.tmp.0.dr	true	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
18.211.24.111	admin.phishproof.com	United States		14618	AMAZON-AESUS	true

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	392737
Start date:	19.04.2021
Start time:	20:41:36
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Covid-19 Payroll Tax Adjustment.docx
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	3
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.evad.winDOCX@1/16@1/1
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe Excluded IPs from analysis (whitelisted): 91.199.212.52, 13.107.4.50 Excluded domains from analysis (whitelisted): au.au-msedge.net, crt.usertrust.com, audownload.windowsupdate.nsatc.net, ctldl.windowsupdate.com, c-0001.c-msedge.net, Edge-Prod-FRA.env.au.au-msedge.net, au.c-0001.c-msedge.net, elasticShed.au.au-msedge.net, au-bg-shim.trafficmanager.net, afdap.au.au-msedge.net Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
18.211.24.111	annualreport.xlsx	Get hash	malicious	Browse
	annualreport.xlsx	Get hash	malicious	Browse
	action_items.xlsm	Get hash	malicious	Browse
	action_items.xlsm	Get hash	malicious	Browse
	action_items.xlsm	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
admin.phishproof.com	annualreport.xlsx	Get hash	malicious	Browse	18.211.24.111
	annualreport.xlsx	Get hash	malicious	Browse	18.211.24.111
	action_items.xlsm	Get hash	malicious	Browse	18.211.24.111
	action_items.xlsm	Get hash	malicious	Browse	18.211.24.111
	action_items.xlsm	Get hash	malicious	Browse	18.211.24.111
	Love_you_201.doc	Get hash	malicious	Browse	18.233.242.165
	Love_you_201.doc	Get hash	malicious	Browse	18.233.242.165
	Love_you_201.doc	Get hash	malicious	Browse	18.233.242.165

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AMAZON-AESUS	VoicePlayback (0195) for turnerrd pellamw .html	Get hash	malicious	Browse	50.16.177.212
	Monday, April 19th, 2021, 20210419111136.68B7C9F20FAF4F3F@classactsautobody.com.htm	Get hash	malicious	Browse	50.16.177.212
	SA-NQAW12n-NC9W03-pdf.exe	Get hash	malicious	Browse	52.71.133.130
	bxJIU2nFC5.exe	Get hash	malicious	Browse	54.243.121.36
	KoF2fbpF8X.exe	Get hash	malicious	Browse	23.21.48.44
	RFQ.xlsx	Get hash	malicious	Browse	52.5.157.71
	GE3hVNHtrK.exe	Get hash	malicious	Browse	3.232.116.190
	preggo.apk	Get hash	malicious	Browse	54.86.40.118
	preggo.apk	Get hash	malicious	Browse	54.208.246.209
	q7uNNDJUI2.exe	Get hash	malicious	Browse	23.23.85.1
	BQGxKexU78.exe	Get hash	malicious	Browse	23.21.74.8
	oddMyFn53m.exe	Get hash	malicious	Browse	54.225.155.255
	kBB0LJe6UO.exe	Get hash	malicious	Browse	54.235.175.90
	078y61cSKy.exe	Get hash	malicious	Browse	50.19.242.215
	svchost.exe	Get hash	malicious	Browse	54.225.144.221
	Ficker.exe	Get hash	malicious	Browse	54.225.222.160
	H7YgdxkWKW.exe	Get hash	malicious	Browse	107.22.233.72
	JSChk2v3o9.exe	Get hash	malicious	Browse	54.225.144.221
	K7is14GW1m.exe	Get hash	malicious	Browse	54.235.83.248

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
7dcce5b76c8b17472d024758970a406b	xEkyQl1Yn2.rtf	Get hash	malicious	Browse	18.211.24.111
	catalog-1763942449.xlsm	Get hash	malicious	Browse	18.211.24.111
	159789-04192021.xls	Get hash	malicious	Browse	18.211.24.111
	494328_04192021.xls	Get hash	malicious	Browse	18.211.24.111
	369290.xls	Get hash	malicious	Browse	18.211.24.111
	369290.xls	Get hash	malicious	Browse	18.211.24.111
	RFQ.xlsx	Get hash	malicious	Browse	18.211.24.111
	catalog-232888535.xlsm	Get hash	malicious	Browse	18.211.24.111
	Fox04-09-15-47-23.xlsx	Get hash	malicious	Browse	18.211.24.111
	PO_31403.xlsx	Get hash	malicious	Browse	18.211.24.111
	Arrival Notice 1.xlsx	Get hash	malicious	Browse	18.211.24.111
	catalog-1180297109.xlsm	Get hash	malicious	Browse	18.211.24.111
	IINVOICE AND CORRECT BANKING DETAILS FOR YOUR REFERENCE.xlsx	Get hash	malicious	Browse	18.211.24.111
	APRemittanceAdvice.xlsx	Get hash	malicious	Browse	18.211.24.111
	ChineseRussian_2.xlsx	Get hash	malicious	Browse	18.211.24.111
	presupuesto.xlsx	Get hash	malicious	Browse	18.211.24.111
	INVOICE AND CORRECT BANKING DETAILS FOR YOUR REFERENCE.xlsx	Get hash	malicious	Browse	18.211.24.111
	a.docx	Get hash	malicious	Browse	18.211.24.111
	catalog-1204608778.xlsm	Get hash	malicious	Browse	18.211.24.111
	Order Confirmation_SA-NQAW12,NC9W03.xlsx	Get hash	malicious	Browse	18.211.24.111

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1413
Entropy (8bit):	7.480496427934893
Encrypted:	false
SSDEEP:	24:yYvJm3RW857Ij3kTteTuQRFjGgZLE5XBy9+JYSE19rVAVsGnyI3SKB7:PL854TTuQL/ZoXQ9+mrGVrb3R
MD5:	285EC909C4AB0D2D57F5086B225799AA
SHA1:	D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA-256:	68B9C761219A5B1F0131784474665DB61BBDB109E00F05CA9F74244EE5F5F52B
SHA-512:	4CF305B95F94C7A9504C53C7F2DC8068E647A326D95976B7F4D80433B2284506FC5E3BB9A80A4E9A9889540BBF92908DD39EE4EB25F2566FE9AB37B4DC9A7C09
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	0...0..i.......9rD:.".Q..l..15.0....H........0{1.0...U....GB1.0...U....Greater Manchester1.0...U....Salford1.0...U....Comodo CA Limited1!0...U....AAA Certificate Services0...190312000000Z..281231235959Z0..1.0...U....US1.0...U....New Jersey1.0...U....Jersey City1.0...U....The USERTRUST Network1.0,..U...%USERTrust RSA Certification Authority0.."0....H.............0..........e.6......W.v..'.L.P.a. M.-d.....=.........{7(.+G.9.:.._..}..cB.v.;+...o... ..>..t.....bd......j."<......{......Q..gF.Q..T?.3.~l......Q.5..f.rg.!f..x..P:.....L....5.WZ....=.,..T....:M.L..\... =.."4.~;hf.D..NFS.3`...S7.sC.2.S...tNi.k.`.......2..;Qx.g..=V...i....%&k3m.nG.sC.~..f.)\|2.cU.....T0....}7..]:l5\.A...I......b..f.%....?.9......L.\|.k..^...g.....[..L..[...s.#;-..5Ut.I.IX...6.Q...&}.M....C&.A_@.DD...W..P.WT.>.tc/.Pe..XB.C.L..%GY.....&FJP...x..g...W...c..b.._U..\.(..%9..+..L...?.R.../..........0..0...U.#..0......#>.....)...0..0...U......Sy.Z.+J.T.......f.0...U...........0...U.......0....0...U

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.116981173650867
Encrypted:	false
SSDEEP:	6:kKBcwTJ0N+SkQlPlEGYRMY9z+4KlDA3RUe0ht:5cwTJrkPlE99SNxAhUe0ht
MD5:	D2B4EF7A6D90C3C69AA1D3EB9C0B904B
SHA1:	2380579533EA63CD738EB72CF77E9DCA17773013
SHA-256:	2330AEA57BC61B62200381E07826FCF5DA353706DDCC025DBFFFF8C4357C448D
SHA-512:	0F63FF12DF1CA24EB02E6BDD6048D4E8D22DF0FAE525C73F18524E3F008BAF974547B80304077B78AC402B73FCABDBE363ACF8A921ECAF578DCF4DBFD45ADCE4
Malicious:	false
Reputation:	low
Preview:	p...... ..........v5.5..(....................................................... ...................$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.8.f.4.f.3.f.6.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	250
Entropy (8bit):	2.9333015258354003
Encrypted:	false
SSDEEP:	3:kkFklNloQblXfllXlE/lQcjT18tlwiANjpU+plgh3VEkax3QbaLU15lqErtd9lyt:kK6IQAbjMulgokaWbLOW+n
MD5:	2B8FBBFB0FF5231B0D2F0FD6B1B35229
SHA1:	9531B9CCAEB59AC01D358AAD91EDCDA011776F3C
SHA-256:	B512A4C620916F6DF27976B8634F39C802CDB6C590A3A94C03A636F6B87B441E
SHA-512:	049F3D453FA465E598F11F3F00D05B15B78A13937278311AD7F9E00ED38B93A9D6760CB475967D1D1BE5F161DDD3F79C541975F5CCDBD0991C6A41C4C74FE2DC
Malicious:	false
Reputation:	low
Preview:	p...... ....h.....35.5..(....................................................... .........(.f...@8..................h.t.t.p.:././.c.r.t...u.s.e.r.t.r.u.s.t...c.o.m./.U.S.E.R.T.r.u.s.t.R.S.A.A.d.d.T.r.u.s.t.C.A...c.r.t...".5.c.8.6.f.6.8.0.-.5.8.5."...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\af-Dbh8nMk[1].png Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	PNG image data, 848 x 1184, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	719675
Entropy (8bit):	7.996898300210567
Encrypted:	true
SSDEEP:	12288:khSdZ8li0/LgtMVUv+NjBl0Q5x56AMIRJqNSrna5eoC9hgO6oWb/N8kJCXgsE/:kMdmVzQMOvSBl0Q536fGJa5RC9+O6eF4
MD5:	167730B067E677A65BAAA3E1C317392B
SHA1:	29ABFFFB01422F8CF9679ACCC4DF31891B79CE3E
SHA-256:	0023C3DA70CDE56DBBADAD0C6A872A90D025A38B3AC1E66BC48120A1478B9008
SHA-512:	928D6336F7911D9022576AF3F5196DEC9FF2FB1FD70C59ABF9E3603F09EE637E6D0322E7637A94CE0DA592D41AE041A499D30CBB8C5E82F0477426620C69AAE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://admin.phishproof.com/af-Dbh8nMk.png
Preview:	.PNG........IHDR...P................KiCCPICC Profile..H..W.TSI.[RIh..H...R.K..E....I ...D....]D@].U.E...ZQ.(v.(...............3w......;..N.O.Eu.....#BX.R.X.N@...9.-._.e..E.(.....u.(.+.J...._....\|..8.3.r~.....K.RY>.D...../U.I...`..K.8K.K.8C.+U6....w.@..x.,.....U..<.7!v.....t....E<..........8d\|../.!N./k..sQ.9T,...f........a..M$..W...v3gZ... .d..B...;.@e.1J.)"....)_.5.L.]...(.M!....Dk....p..p....\|n.f.".<,A.Y#...;.3e..fn.O..?..Ibk.o...A..E...u...@....6.LyNB....).qb.md.xe.6...%.!j~lJ.,<^c/...-...1.\./J......T..A.,....y........a..KBI.&_.C......R...........bSyA.f............%...3.yc..... .p@(`..l.`.......K=..x@.....h4.3RT#..L.E.o..@>4/D5..P.iH.~..L.h.jF.x.q.....B5K2.-.<...w..0.\.c...P...(.yY:...0b(1..Nt.M.@.....`..q..w0./..G.v...5B...Tq..\|X`....59g\|.3n.Y=..<..Cn.....\|4....oO..h"Wf.-..r....;.+.....S......9.....R.1TW....9_UZ...o-.E.>.4v.;.....;.5c...J<....V..xU<9.G..?....r.z.n..\|a.r...i.2q.(..;....G.`...........WL...a...+..C....../............_p/

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\af-Dbh8nMk[1].png Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	PNG image data, 848 x 1184, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	719675
Entropy (8bit):	7.996898300210567
Encrypted:	true
SSDEEP:	12288:khSdZ8li0/LgtMVUv+NjBl0Q5x56AMIRJqNSrna5eoC9hgO6oWb/N8kJCXgsE/:kMdmVzQMOvSBl0Q536fGJa5RC9+O6eF4
MD5:	167730B067E677A65BAAA3E1C317392B
SHA1:	29ABFFFB01422F8CF9679ACCC4DF31891B79CE3E
SHA-256:	0023C3DA70CDE56DBBADAD0C6A872A90D025A38B3AC1E66BC48120A1478B9008
SHA-512:	928D6336F7911D9022576AF3F5196DEC9FF2FB1FD70C59ABF9E3603F09EE637E6D0322E7637A94CE0DA592D41AE041A499D30CBB8C5E82F0477426620C69AAE7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P................KiCCPICC Profile..H..W.TSI.[RIh..H...R.K..E....I ...D....]D@].U.E...ZQ.(v.(...............3w......;..N.O.Eu.....#BX.R.X.N@...9.-._.e..E.(.....u.(.+.J...._....\|..8.3.r~.....K.RY>.D...../U.I...`..K.8K.K.8C.+U6....w.@..x.,.....U..<.7!v.....t....E<..........8d\|../.!N./k..sQ.9T,...f........a..M$..W...v3gZ... .d..B...;.@e.1J.)"....)_.5.L.]...(.M!....Dk....p..p....\|n.f.".<,A.Y#...;.3e..fn.O..?..Ibk.o...A..E...u...@....6.LyNB....).qb.md.xe.6...%.!j~lJ.,<^c/...-...1.\./J......T..A.,....y........a..KBI.&_.C......R...........bSyA.f............%...3.yc..... .p@(`..l.`.......K=..x@.....h4.3RT#..L.E.o..@>4/D5..P.iH.~..L.h.jF.x.q.....B5K2.-.<...w..0.\.c...P...(.yY:...0b(1..Nt.M.@.....`..q..w0./..G.v...5B...Tq..\|X`....59g\|.3n.Y=..<..Cn.....\|4....oO..h"Wf.-..r....;.+.....S......9.....R.1TW....9_UZ...o-.E.>.4v.;.....;.5c...J<....V..xU<9.G..?....r.z.n..\|a.r...i.2q.(..;....G.`...........WL...a...+..C....../............_p/

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\102272C3.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	PNG image data, 848 x 1184, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	719675
Entropy (8bit):	7.996898300210567
Encrypted:	true
SSDEEP:	12288:khSdZ8li0/LgtMVUv+NjBl0Q5x56AMIRJqNSrna5eoC9hgO6oWb/N8kJCXgsE/:kMdmVzQMOvSBl0Q536fGJa5RC9+O6eF4
MD5:	167730B067E677A65BAAA3E1C317392B
SHA1:	29ABFFFB01422F8CF9679ACCC4DF31891B79CE3E
SHA-256:	0023C3DA70CDE56DBBADAD0C6A872A90D025A38B3AC1E66BC48120A1478B9008
SHA-512:	928D6336F7911D9022576AF3F5196DEC9FF2FB1FD70C59ABF9E3603F09EE637E6D0322E7637A94CE0DA592D41AE041A499D30CBB8C5E82F0477426620C69AAE7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P................KiCCPICC Profile..H..W.TSI.[RIh..H...R.K..E....I ...D....]D@].U.E...ZQ.(v.(...............3w......;..N.O.Eu.....#BX.R.X.N@...9.-._.e..E.(.....u.(.+.J...._....\|..8.3.r~.....K.RY>.D...../U.I...`..K.8K.K.8C.+U6....w.@..x.,.....U..<.7!v.....t....E<..........8d\|../.!N./k..sQ.9T,...f........a..M$..W...v3gZ... .d..B...;.@e.1J.)"....)_.5.L.]...(.M!....Dk....p..p....\|n.f.".<,A.Y#...;.3e..fn.O..?..Ibk.o...A..E...u...@....6.LyNB....).qb.md.xe.6...%.!j~lJ.,<^c/...-...1.\./J......T..A.,....y........a..KBI.&_.C......R...........bSyA.f............%...3.yc..... .p@(`..l.`.......K=..x@.....h4.3RT#..L.E.o..@>4/D5..P.iH.~..L.h.jF.x.q.....B5K2.-.<...w..0.\.c...P...(.yY:...0b(1..Nt.M.@.....`..q..w0./..G.v...5B...Tq..\|X`....59g\|.3n.Y=..<..Cn.....\|4....oO..h"Wf.-..r....;.+.....S......9.....R.1TW....9_UZ...o-.E.>.4v.;.....;.5c...J<....V..xU<9.G..?....r.z.n..\|a.r...i.2q.(..;....G.`...........WL...a...+..C....../............_p/

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1BF840B3-025D-4403-9DBE-B492A11253DC}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.05390218305374581
Encrypted:	false
SSDEEP:	3:ol3lYdn:4Wn
MD5:	5D4D94EE7E06BBB0AF9584119797B23A
SHA1:	DBB111419C704F116EFA8E72471DD83E86E49677
SHA-256:	4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
SHA-512:	95F83AE84CAFCCED5EAF504546725C34D5F9710E5CA2D11761486970F2FBECCB25F9CF50BBFC272BD75E1A66A18B7783F09E1C1454AFDA519624BC2BB2F28BA4
Malicious:	false
Reputation:	high, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A70475F6-E366-40C3-B2E6-22C3DC55A9E1}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	1.2969066424008302
Encrypted:	false
SSDEEP:	3:glXMKYHlLlP8EP3+KZfolYxRknr2gt95w7ggE7ZSMl6ljtll5l/HZllNPThv51lJ:glXMKYjUbKvRknqgHuMZlwjHltq7ZUtp
MD5:	99BCB4A045A3CEE7CC68A8B6C228438E
SHA1:	B28A208799EA7AFCB1E9DFAB671D55F3C290E1FE
SHA-256:	A26D31E0D9186E67792B2D59108F4603646084D60FB6B80FDFF882812F75E66D
SHA-512:	78420EC8A3A41AEBFD814FE56E9F0DC986A2C8D413038D257FE409423C8B408260B378B317614EE2E94EE998C2F48603CE401088942E1318B303F1B4764FAD07
Malicious:	false
Preview:	.... . ...".h.t.t.p.s.:././.a.d.m.i.n...p.h.i.s.h.p.r.o.o.f...c.o.m./.a.f.-.D.b.h.8.n.M.k...p.n.g.". .\.*. .M.E.R.G.E.F.O.R.M.A.T. .\.d.I.N.C.L.U.D.E.P.I.C.T.U.R.E. .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................hfT.....j.....hfT..U....j.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E42C9A4D-C73B-45F3-859A-E103BFD96442}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	0.19557280042116507
Encrypted:	false
SSDEEP:	3:lly/nnjM/n/lLClk:WjMvY+
MD5:	D3639E51845151C937FD5D3BBCF24993
SHA1:	40472D691864544B1B85BF33D7DD7B076DF1FF7B
SHA-256:	E95E1E45570B2FFB047C5D9CDBBCD054D00A42A6E27ECBD8B251F4F503C84918
SHA-512:	44CFC72178F39FED4C345F94D8F74DE3886E384BD2752B84A5911C73E2D2D522D2B030C45ACB3FA1212ECF56BF6D48BD42345B6997B7896B4ECBE14BEEFC9336
Malicious:	false
Preview:	../.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CabCF8F.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\Local\Temp\TarCF9F.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	152788
Entropy (8bit):	6.309740459389463
Encrypted:	false
SSDEEP:	1536:TIz6c7xcjgCyrYBZ5pimp4Ydm6Caku2Dnsz0JD8reJgMnl3rlMGGv:TNqccCymfdmoku2DMykMnNGG0
MD5:	4E0487E929ADBBA279FD752E7FB9A5C4
SHA1:	2497E03F42D2CBB4F4989E87E541B5BB27643536
SHA-256:	AE781E4F9625949F7B8A9445B8901958ADECE7E3B95AF344E2FCB24FE989EEB7
SHA-512:	787CBC262570A4FA23FD9C2BA6DA7B0D17609C67C3FD568246F9BEF2A138FA4EBCE2D76D7FD06C3C342B11D6D9BCD875D88C3DC450AE41441B6085B2E5D48C5A
Malicious:	false
Preview:	0..T....H.........T.0..T....1.0...`.H.e......0..D...+.....7.....D.0..D.0...+.....7..........\|h....210303062855Z0...+......0..D.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Covid-19 Payroll Tax Adjustment.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:16 2020, mtime=Wed Aug 26 14:08:16 2020, atime=Tue Apr 20 02:42:34 2021, length=10480, window=hide
Category:	dropped
Size (bytes):	2248
Entropy (8bit):	4.608603007241245
Encrypted:	false
SSDEEP:	48:8ZuW/XT0jFsL9I1YQh2ZuW/XT0jFsL9I1YQ/:8Zr/XojFCsYQh2Zr/XojFCsYQ/
MD5:	A4D482F324A3ECE0C901F5F6B7F7CDFF
SHA1:	60A79C75A0A271616E6BA263FBAA7A7B5AEB103A
SHA-256:	FBE284E82BE740F3780396CE35B2F048C8C0F18D85ABEA8C4D2E8F06F0D076B9
SHA-512:	E2EE10BF0A32D3FF549C96B3776F73493547F8C7F37E6CC68881588DD8001C45C99470B38BBD347EAA47E2986470E5281EC74C408D83FC73322D9B901BDACFAD
Malicious:	false
Preview:	L..................F.... ....(...{...(...{..<..2.5...(...........................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2..(...RR. .COVID-~1.DOC..v.......Q.y.Q.y...8.....................C.o.v.i.d.-.1.9. .P.a.y.r.o.l.l. .T.a.x. .A.d.j.u.s.t.m.e.n.t...d.o.c.x.......................-...8...[............?J......C:\Users\..#...................\\562258\Users.user\Desktop\Covid-19 Payroll Tax Adjustment.docx.;.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.o.v.i.d.-.1.9. .P.a.y.r.o.l.l. .T.a.x. .A.d.j.u.s.t.m.e.n.t...d.o.c.x.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	133
Entropy (8bit):	5.025364841875384
Encrypted:	false
SSDEEP:	3:HtoUc8RLo4RU+x+Uc8RLo4RUmxWtoUc8RLo4RUv:Ht35zRPJ5zRi35zR2
MD5:	1F471215981641DD8581692FE5F525D6
SHA1:	460F7521D2B66EA12562ACABAC72968A4481941A
SHA-256:	7B35DF2136C5CC51ECED3CB1D00D4EDAAE45207E521AC223CC5AB5AC790A1837
SHA-512:	FE959CDCCC822149011B53FF66605460106EDCD65BB14D0C20B755B39FA6AB60D891AAA2FC9DEFAFCCE3B2E59EDAB599B2D36A26B1BA269D9D9BC205F12D80A6
Malicious:	false
Preview:	[misc]..Covid-19 Payroll Tax Adjustment.LNK=0..Covid-19 Payroll Tax Adjustment.LNK=0..[misc]..Covid-19 Payroll Tax Adjustment.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVyokKOg5Gll3GwSKG/f2+1/ln:vdsCkWtW2IlID9l
MD5:	39EB3053A717C25AF84D576F6B2EBDD2
SHA1:	F6157079187E865C1BAADCC2014EF58440D449CA
SHA-256:	CD95C0EA3CEAEC724B510D6F8F43449B26DF97822F25BDA3316F5EAC3541E54A
SHA-512:	5AA3D344F90844D83477E94E0D0E0F3C96324D8C255C643D1A67FA2BB9EEBDF4F6A7447918F371844FCEDFCD6BBAAA4868FC022FDB666E62EB2D1BAB9028919C
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.........w...............w.............P.w..............w.....z.........w.....x...

C:\Users\user\Desktop\~$vid-19 Payroll Tax Adjustment.docx Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVyokKOg5Gll3GwSKG/f2+1/ln:vdsCkWtW2IlID9l
MD5:	39EB3053A717C25AF84D576F6B2EBDD2
SHA1:	F6157079187E865C1BAADCC2014EF58440D449CA
SHA-256:	CD95C0EA3CEAEC724B510D6F8F43449B26DF97822F25BDA3316F5EAC3541E54A
SHA-512:	5AA3D344F90844D83477E94E0D0E0F3C96324D8C255C643D1A67FA2BB9EEBDF4F6A7447918F371844FCEDFCD6BBAAA4868FC022FDB666E62EB2D1BAB9028919C
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.........w...............w.............P.w..............w.....z.........w.....x...

Static File Info

General
File type:	Zip archive data, at least v2.0 to extract
Entropy (8bit):	7.778256600131332
TrID:	Word Microsoft Office Open XML Format document (49504/1) 49.01% Word Microsoft Office Open XML Format document (43504/1) 43.07% ZIP compressed archive (8000/1) 7.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	Covid-19 Payroll Tax Adjustment.docx
File size:	10480
MD5:	f78e1a17152954d2c56e3de7f889065f
SHA1:	9ad2cffb62540c6ad60eee087c97cc756949adfd
SHA256:	606e7c0165678adb36211ad727f8d128577a06584034ee39402b9a931f457b06
SHA512:	05089c96e04be77867cdadafc57a1a0a5f511ebbcae070237bd71302ed84ebb6f0051155ab8692d0ccc3eb639af4cfb58d58fd3f8cd74c08174b5168d0311073
SSDEEP:	192:77t5Z7p6Enlo2QOFipslkaCkMo2rIoVk0ipVH8Lad8NXPEhMHsQO:Vj7p6ElzQJA5yIoGVcLhJPqEnO
File Content Preview:	PK........4..R................docProps/PK........4..R.;q.............docProps/app.xml.S.n.!..W.?....Q.U.&..U9..%o.....QY@0..~}..x.Nz.7.......K....l._..l..&4..V...v.ET..7....8b.7..'.I!b"..b..WbO..Rf......=..!u@....mk......'y9._K\|!..6.q.....@.+..S.....YO.

File Icon


Icon Hash:	e4e6a2a2a4b4b4a4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2021 20:42:25.961451054 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.088267088 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.088479042 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.099739075 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.275042057 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.275063038 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.275078058 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.275085926 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.275105000 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.275250912 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.518917084 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.687149048 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.687175035 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.687361956 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.687403917 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.688298941 CEST	49167	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.690603018 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.814924955 CEST	443	49167	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.817434072 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.817639112 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.818710089 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:26.993246078 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.993275881 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.993288994 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.993297100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.993308067 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:26.993470907 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:27.250313997 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:27.414983034 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:27.415163994 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:28.784806967 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:28.973825932 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068414927 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068451881 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068476915 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068501949 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068526030 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068553925 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068578005 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068600893 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068608999 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068623066 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068624020 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068645954 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068646908 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068671942 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068691015 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068708897 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068711042 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068723917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068733931 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.068736076 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068763018 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.068779945 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.070683956 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195308924 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195338964 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195367098 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195394039 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195446014 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195460081 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195465088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195467949 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195488930 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195503950 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195518017 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195525885 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195545912 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195547104 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195578098 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195588112 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195610046 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195617914 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195638895 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195647001 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195667982 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195677996 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195698023 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195708990 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195725918 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195725918 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195755005 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195764065 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195784092 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195795059 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195812941 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195816994 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195847034 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195854902 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195874929 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195883989 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195903063 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195904016 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195933104 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195941925 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195961952 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.195971012 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.195991039 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.196000099 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196019888 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.196028948 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196048975 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196052074 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.196082115 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.196089983 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196110964 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.196120024 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196139097 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.196224928 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322734118 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322761059 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322774887 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322798014 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322818995 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322839975 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322860003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322886944 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322894096 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322907925 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322918892 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322926998 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322930098 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322946072 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322953939 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322964907 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322976112 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.322982073 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.322997093 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323015928 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323019028 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323030949 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323041916 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323056936 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323066950 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323075056 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323088884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323102951 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323111057 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323122025 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323133945 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323142052 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323153973 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323168993 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323178053 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323187113 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323199034 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323214054 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323220968 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323232889 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323246002 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323251009 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323268890 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323282957 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323290110 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323299885 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323312998 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323326111 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323334932 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323338985 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323354959 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323370934 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323378086 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323389053 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323400974 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323409081 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323426008 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323436975 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323450089 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323461056 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323483944 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323488951 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323508024 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323522091 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323532104 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323537111 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323553085 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323571920 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323577881 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323587894 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323601007 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323612928 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323622942 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323632002 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323646069 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323658943 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323673010 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323695898 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323709011 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323719978 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323721886 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323729992 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323741913 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323750019 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323762894 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323777914 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323786020 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323795080 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323807955 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.323823929 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323841095 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.323920012 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.450426102 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450449944 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450463057 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450479984 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450491905 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450508118 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450524092 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450541019 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450596094 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.450620890 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.450918913 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450937033 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450953960 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450969934 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450969934 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.450984955 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.450989008 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451003075 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451004028 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451019049 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451023102 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451037884 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451040030 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451055050 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451056004 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451072931 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451080084 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451088905 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451096058 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451106071 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451109886 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451121092 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451124907 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451137066 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451143026 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451155901 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451159000 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451169014 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451173067 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451184988 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451196909 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451209068 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451220989 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451231003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451244116 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451258898 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451271057 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451278925 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451287985 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451293945 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451301098 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451309919 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451317072 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451324940 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451334000 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451337099 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451347113 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451354027 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451364040 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451364994 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451379061 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451381922 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451395988 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451399088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451411963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451420069 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451426029 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451427937 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451445103 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451448917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451457024 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451464891 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451473951 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451478004 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451489925 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451491117 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451505899 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451508999 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451523066 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451524019 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.451539040 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.451555967 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.454479933 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.577250957 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577280045 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577291965 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577308893 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577321053 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577337027 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577356100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577375889 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577400923 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577416897 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577421904 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.577433109 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.577446938 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.577450991 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.577462912 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.577605963 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578686953 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578706980 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578718901 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578736067 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578751087 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578756094 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578768015 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578772068 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578773022 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578788996 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578788996 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578804016 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578807116 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578819990 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578824997 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578836918 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578839064 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578852892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578859091 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578869104 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578871965 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578887939 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578906059 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578907013 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578911066 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578919888 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578922987 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578934908 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578949928 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578950882 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578965902 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578969955 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578980923 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.578986883 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.578996897 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579004049 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579020023 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579022884 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579035044 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579035997 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579050064 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579058886 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579066038 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579073906 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579081059 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579088926 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579099894 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579104900 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579118013 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579118967 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579134941 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579137087 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579147100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579154015 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579163074 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579166889 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579181910 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579184055 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579196930 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579200029 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579216003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579224110 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579231977 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579237938 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579246998 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579248905 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579262972 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579267979 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579279900 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579283953 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579294920 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579298973 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579313993 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579314947 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579329014 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579332113 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579344988 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579348087 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579361916 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579363108 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579379082 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579380035 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579394102 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579395056 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579408884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579411983 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579425097 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579428911 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579442978 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579443932 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579457045 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579461098 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579474926 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579476118 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579488039 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.579490900 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579508066 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.579523087 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.581372023 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704266071 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704302073 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704330921 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704356909 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704379082 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704396963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704415083 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704435110 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704456091 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704473972 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704483986 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704509020 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704530001 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704539061 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704555035 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704579115 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704582930 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704603910 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704626083 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704648018 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704649925 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704674006 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704675913 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704699039 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704715967 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704720974 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704739094 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704756021 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704761982 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704787016 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704796076 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704812050 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704835892 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704838037 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704862118 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704884052 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704886913 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704910040 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704924107 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704931974 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704953909 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704961061 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.704973936 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.704996109 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705004930 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705014944 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705039978 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705048084 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705063105 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705082893 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705086946 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705099106 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705116034 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705121994 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705132008 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705147982 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705153942 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705163956 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705182076 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705184937 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705199003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705215931 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705221891 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705230951 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705246925 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705262899 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705269098 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705279112 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705293894 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705302954 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705308914 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705324888 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705341101 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705347061 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705357075 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705373049 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705379009 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705404997 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705405951 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705423117 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705439091 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705451965 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705455065 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705473900 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.705482960 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705514908 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.705743074 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706057072 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706084013 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706105947 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706131935 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706137896 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706156015 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706180096 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706187963 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706201077 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706223965 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706232071 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706248045 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706270933 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706274986 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706294060 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706317902 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706319094 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706341982 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706360102 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706361055 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706378937 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706393957 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706394911 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706410885 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706429005 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706438065 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706444979 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706465006 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706481934 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706492901 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706497908 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706516027 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706532001 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706535101 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706547976 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706564903 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706573009 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706581116 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706600904 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706618071 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706619978 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706636906 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706654072 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706661940 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706671000 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706686974 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706701994 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706705093 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706722021 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706741095 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706748009 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706758976 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706774950 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706788063 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706790924 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706808090 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706824064 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706830978 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706840038 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706856966 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706876040 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706883907 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706895113 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706909895 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706927061 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706929922 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706943035 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706959963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706974030 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.706975937 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.706991911 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707004070 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707015991 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707016945 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707035065 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707052946 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707065105 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707067966 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707081079 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707097054 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707108974 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707110882 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707120895 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707139969 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707158089 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707171917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707173109 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707185030 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707197905 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707212925 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707223892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707223892 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707237005 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707248926 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707271099 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707283974 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707288980 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707304001 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707319975 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707334995 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707336903 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707353115 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707367897 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707377911 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707382917 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707402945 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707420111 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707426071 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707434893 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707447052 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707463980 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707469940 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707482100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707500935 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707513094 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707514048 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707525015 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707536936 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707549095 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707554102 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707561016 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707568884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707586050 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707597971 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707602024 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707609892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707622051 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707634926 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707647085 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707648993 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707659006 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707672119 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707684040 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.707695007 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.707807064 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.722438097 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832067966 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832096100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832117081 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832137108 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832151890 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832154989 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832170963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832171917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832189083 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832197905 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832211018 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832220078 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832232952 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832241058 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832253933 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832262039 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832274914 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832285881 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832292080 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832305908 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832312107 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832333088 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832349062 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832360983 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832361937 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832381010 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832385063 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832401037 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832408905 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832431078 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832432032 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832452059 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832456112 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832479000 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832475901 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832494974 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832501888 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832525015 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832531929 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832550049 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832551003 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832570076 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832572937 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832592010 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832595110 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832613945 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832619905 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832634926 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832643032 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832660913 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832673073 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832684040 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832696915 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832710028 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832719088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832731962 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832732916 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832756042 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832756996 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832777023 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832779884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832803011 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832803011 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832820892 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832825899 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832844973 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832850933 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832875013 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832880020 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832897902 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832904100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832917929 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832927942 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832950115 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832952023 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832974911 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.832973957 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832994938 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.832998037 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833029032 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833029985 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833044052 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833050966 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833070993 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833075047 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833090067 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833097935 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833117962 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833122969 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833133936 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833148003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833163977 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833182096 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833192110 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833204985 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833206892 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833225965 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833228111 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833245039 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833250999 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833267927 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833272934 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833297968 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833297968 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833316088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833319902 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833336115 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833347082 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833352089 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833360910 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833376884 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833376884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833410978 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833414078 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833420038 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833436966 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833457947 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833460093 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833475113 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833481073 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833492041 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833501101 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833523989 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833528042 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833542109 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833550930 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833573103 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833576918 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833591938 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833595037 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833609104 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833641052 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833659887 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833683014 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833693027 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833704948 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833723068 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833744049 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833745003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833762884 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833777905 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833781004 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833798885 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833816051 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833822012 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833838940 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833843946 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833857059 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833868980 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833892107 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833893061 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833910942 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833914995 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833934069 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833944082 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833956003 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833964109 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833973885 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.833982944 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.833997965 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834001064 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834017038 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834033012 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834059954 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834069967 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834083080 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834084034 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834103107 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834108114 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834124088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834130049 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834151983 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834155083 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834167004 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834172010 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834189892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834212065 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834216118 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834230900 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834249973 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834254026 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834269047 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834279060 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834300995 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834311008 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834321976 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834323883 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834341049 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834347963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834368944 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834369898 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834387064 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834397078 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834412098 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834431887 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834451914 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834469080 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834491968 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834503889 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834508896 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834515095 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834537029 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834543943 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834558010 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834558964 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834574938 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834580898 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834594011 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834605932 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834610939 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834628105 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834649086 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834654093 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834671021 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834686995 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834697008 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834711075 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834728003 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834733963 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834752083 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834764957 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834770918 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834779978 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834793091 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834813118 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834815025 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834831953 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834837914 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834860086 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834860086 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834872961 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834882021 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834892035 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834903955 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834919930 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834928036 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834937096 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834950924 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.834968090 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834981918 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.834990025 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835011959 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835028887 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835036039 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835057974 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835058928 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835072041 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835082054 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835103989 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835125923 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835148096 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835158110 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835163116 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835169077 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835170031 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835170984 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835187912 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835202932 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835206985 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835216045 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835223913 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835246086 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835251093 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835262060 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835268021 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835289955 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835294008 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835305929 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835311890 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835326910 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835335016 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835356951 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835361004 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835383892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835391998 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835400105 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835405111 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835417986 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835427999 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835447073 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835449934 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835464001 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835472107 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835493088 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835494041 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835510015 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835515976 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835534096 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835541010 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835550070 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835563898 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835582972 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835586071 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835598946 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835608959 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835628986 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835630894 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835648060 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835668087 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835670948 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835689068 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835711002 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835712910 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835730076 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835746050 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835752964 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835767031 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835791111 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835807085 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835808992 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835839987 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835850954 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835863113 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835882902 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835885048 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835900068 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835906982 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835928917 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835928917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835946083 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835953951 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835963011 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.835975885 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.835998058 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836005926 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836019039 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836020947 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836033106 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836044073 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836062908 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836065054 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836081028 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836087942 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836108923 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836111069 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836127996 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836139917 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836152077 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836152077 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836169004 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836173058 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836184978 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836194992 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836215019 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836218119 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836231947 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836239100 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836257935 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836267948 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836278915 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836282969 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836296082 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836301088 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836318970 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836324930 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836334944 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836345911 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836366892 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836374998 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836383104 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836385012 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:29.836407900 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.836422920 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.838421106 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:29.847918987 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:35.212955952 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:35.212976933 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:35.213016033 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:35.213040113 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.230459929 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.230494022 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.231986046 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.357088089 CEST	443	49168	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.357177973 CEST	49168	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.358696938 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.358830929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.359476089 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.486418009 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.486572027 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.487082958 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.530345917 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.658411026 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695313931 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695337057 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695348978 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695360899 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695379019 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695396900 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695415020 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695430040 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695445061 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.695494890 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.695538998 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.696990967 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.697092056 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.698808908 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.822223902 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822237968 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822257042 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822271109 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822287083 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822304964 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822331905 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822351933 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822367907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822384119 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.822535038 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.822580099 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.822762012 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.823621035 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823647022 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823663950 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823683023 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823700905 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823717117 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823724031 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.823733091 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823750019 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823765039 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823769093 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.823812962 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.823818922 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.823888063 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.828680038 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949265957 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949289083 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949304104 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949320078 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949332952 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949345112 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949362993 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949378014 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949405909 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949424028 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949439049 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949456930 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949454069 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949474096 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949490070 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949491978 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949496031 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949497938 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949506998 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949513912 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949523926 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949531078 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949543953 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949548006 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949559927 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949562073 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949575901 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949578047 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949592113 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.949593067 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949606895 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949631929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.949795008 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952804089 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952824116 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952841997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952853918 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952862024 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952866077 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952883005 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952896118 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952898026 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952912092 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952924967 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952930927 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952941895 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952949047 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952950001 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952965021 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952965975 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952982903 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.952994108 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.952999115 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953010082 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953016043 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953018904 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953032970 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953037024 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953049898 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953053951 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953068972 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953069925 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953083038 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953088045 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953098059 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953108072 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.953126907 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.953141928 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.955818892 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.956979036 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:42:59.957053900 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:42:59.958719969 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076349020 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076380014 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076392889 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076407909 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076423883 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076442957 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076459885 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076476097 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076491117 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076507092 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076519012 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076530933 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076546907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076559067 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076564074 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076580048 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076594114 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076598883 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076601028 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076618910 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076626062 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076634884 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076647043 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076653004 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076668978 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076677084 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076687098 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076700926 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076704025 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076719999 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076730013 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076735973 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076752901 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076755047 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076769114 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076780081 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076785088 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076802015 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.076808929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076826096 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.076838970 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.077003956 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.079807997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079834938 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079847097 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079859018 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079875946 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079891920 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079905033 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079921007 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079922915 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.079936981 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079945087 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.079953909 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079962015 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.079971075 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079977989 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.079987049 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.079992056 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.080008030 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.080008984 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.080024004 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.080027103 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.080044985 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.080048084 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.080068111 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.080084085 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.082434893 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.082459927 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.082479954 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.082498074 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.082530975 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.082556009 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.082561016 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.085144043 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.085161924 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.085287094 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.085361004 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205511093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205528021 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205543995 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205559015 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205575943 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205590963 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205604076 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205616951 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205626965 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205635071 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205655098 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205657005 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205673933 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205689907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205693960 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205707073 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205719948 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205719948 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205739975 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205754042 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205758095 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205775023 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205790043 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205790997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205806971 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205813885 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205822945 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205832958 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205840111 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205856085 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205863953 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205876112 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205888987 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205893993 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205909967 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205910921 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205925941 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205941916 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.205941916 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205974102 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.205997944 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.206197023 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208431959 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208535910 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208662033 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208688974 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208708048 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208717108 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208731890 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208755016 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208777905 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208781958 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208801031 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208816051 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208825111 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.208849907 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208877087 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.208950996 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.210859060 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.210885048 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.210901976 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.210947037 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.210973978 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.212646008 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212671041 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212692022 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212708950 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212726116 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212743998 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212754965 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.212762117 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212779045 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212785959 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.212795019 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212810040 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.212810993 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.212847948 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.212862968 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.214102983 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332601070 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332629919 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332653999 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332674980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332694054 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332714081 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332732916 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332751989 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332766056 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332773924 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332793951 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332799911 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332803965 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332819939 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332820892 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332842112 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332851887 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332860947 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332870007 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332881927 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332882881 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332895994 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332904100 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332915068 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332923889 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332935095 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332942963 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332951069 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.332963943 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.332987070 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333003998 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333009005 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333022118 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333029985 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333034992 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333050966 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333070993 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333089113 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333107948 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333122015 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333127975 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333163023 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333343029 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.333481073 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.333530903 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.335750103 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335771084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335791111 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335809946 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335824966 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335848093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335869074 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335887909 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.335907936 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.335946083 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.336082935 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.336132050 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.336571932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.337515116 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.337541103 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.337575912 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.337599039 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340766907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340789080 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340809107 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340828896 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340847969 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340867043 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340868950 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340888977 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340890884 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340910912 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340914965 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340930939 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340936899 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340950966 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340958118 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340971947 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.340979099 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.340993881 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.341012955 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.343043089 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461338043 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461368084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461400986 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461417913 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461432934 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461452007 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461469889 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461486101 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461503029 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461519003 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461534023 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461549997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461566925 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461568117 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461585999 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461602926 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461606026 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461607933 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461623907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461627960 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461641073 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461648941 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461658955 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461667061 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461675882 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461682081 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461694002 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461695910 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461707115 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461719990 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461728096 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461733103 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461750031 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461756945 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461766005 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461771965 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461783886 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461791992 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461800098 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461807966 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461817980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461819887 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461834908 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461838007 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461849928 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461855888 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461865902 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461874008 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461889029 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461898088 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461901903 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.461914062 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.461930990 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.462105036 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464423895 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464447021 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464462996 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464479923 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464494944 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464514017 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464531898 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464533091 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464548111 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464551926 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464565992 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464570045 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464589119 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464593887 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464598894 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464607000 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464618921 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464622974 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464638948 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464647055 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464658976 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464663982 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464678049 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464680910 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464694023 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464709997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464718103 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464721918 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464728117 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464731932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464744091 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464747906 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464761019 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464770079 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464777946 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464782000 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464797974 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464797974 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464811087 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464817047 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464828968 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464833021 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464845896 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464849949 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464862108 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464867115 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464884043 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464890957 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464900970 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464905977 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464917898 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464926958 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464937925 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464939117 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464951992 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464956045 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464970112 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464972973 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.464987993 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.464991093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465006113 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465008020 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465023041 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465024948 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465044975 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465046883 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465056896 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465065956 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465074062 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465082884 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465107918 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465121031 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465529919 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465548038 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465563059 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465584040 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.465594053 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465656042 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.465662003 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.466522932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469238997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469285011 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469300985 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469316006 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469315052 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469331980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469338894 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469369888 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469371080 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469407082 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469413042 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469425917 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469443083 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469454050 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469459057 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469475031 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469484091 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469491005 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469506979 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469513893 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469523907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469542027 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469542980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469562054 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469566107 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469578028 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469593048 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469594002 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469610929 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469618082 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469626904 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469644070 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469646931 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469660997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.469671965 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.469696999 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.480328083 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588546991 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588568926 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588587046 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588608980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588629961 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588656902 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588684082 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588696003 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588709116 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588726044 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588737011 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588748932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588778973 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588800907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588824987 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588845968 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588850021 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588862896 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588876963 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588884115 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588901997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588920116 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588931084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588934898 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588956118 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588972092 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.588983059 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.588992119 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589009047 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589019060 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589034081 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589040041 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589063883 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589076042 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589090109 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589099884 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589117050 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589134932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589143038 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589152098 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589169025 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589183092 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589195967 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589207888 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589225054 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589240074 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589251041 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589256048 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589277983 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589289904 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589303970 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589314938 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589329958 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589343071 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589354992 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589370012 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589395046 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589395046 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589425087 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589435101 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589449883 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589462042 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589478016 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589479923 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589504004 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589515924 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589528084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589535952 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589554071 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589566946 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589580059 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589585066 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589605093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589618921 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589629889 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589652061 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589657068 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589669943 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589684963 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589685917 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589711905 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589732885 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589736938 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589745998 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589762926 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589786053 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589788914 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589798927 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589814901 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589827061 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589842081 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589854002 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589867115 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589870930 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589895010 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589907885 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589920044 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589921951 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589934111 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589947939 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589958906 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589975119 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.589977026 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.589998960 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590010881 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590023994 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590027094 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590049028 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590060949 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590075970 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590085030 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590104103 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590112925 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590131044 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590142012 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590157032 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590167046 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590182066 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590195894 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590209007 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590212107 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590235949 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.590249062 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.590265989 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591625929 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591654062 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591675997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591691971 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591701984 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591706991 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591736078 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591747999 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591761112 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591768980 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591787100 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591799974 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591814041 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591816902 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591839075 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591850996 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591866970 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591878891 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591892958 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591907978 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591922045 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591931105 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591948986 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591974020 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.591978073 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.591999054 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592000008 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592011929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592026949 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592029095 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592051983 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592066050 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592078924 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592087030 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592103958 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592132092 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592158079 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592163086 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592180014 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592185974 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592195034 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592211962 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592222929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592237949 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592248917 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592264891 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592277050 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592291117 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592295885 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592317104 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592329025 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592345953 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592359066 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592372894 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592386007 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592401028 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592411995 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592426062 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592452049 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592467070 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592472076 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592478037 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592487097 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592504025 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592529058 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592534065 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592555046 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592561960 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592572927 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592582941 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592592955 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592609882 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592622995 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592636108 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592641115 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592660904 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592674971 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592688084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592698097 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592714071 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592726946 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592740059 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592752934 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592768908 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592777967 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592796087 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592807055 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592822075 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592834949 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592850924 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592859983 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592876911 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592892885 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592904091 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592926979 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592930079 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592941999 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592952967 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592962027 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.592982054 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.592991114 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593009949 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593020916 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593035936 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593048096 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593061924 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593064070 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593087912 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593102932 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593113899 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593122959 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593141079 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593153954 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593167067 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593172073 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593195915 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593205929 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593224049 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593233109 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593250036 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593262911 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593276024 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593281984 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593303919 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593314886 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593329906 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593341112 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593357086 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593368053 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593394041 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593400002 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593429089 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593440056 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593451977 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.593465090 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.593481064 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596612930 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596633911 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596649885 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596673012 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596695900 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596697092 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596719027 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596719027 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596741915 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596743107 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596760035 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596772909 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596785069 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596796989 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596810102 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596827030 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596848965 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596854925 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596869946 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596875906 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596898079 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596908092 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596921921 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596931934 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596947908 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596957922 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596965075 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596973896 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.596992016 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.596998930 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597012997 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597023964 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597034931 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597048044 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597068071 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597071886 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597095966 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597096920 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597119093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597124100 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597136974 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597148895 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597171068 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597181082 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597198963 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597214937 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597223997 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597249031 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597271919 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597285986 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597398996 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597419977 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597441912 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597455025 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597466946 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597470999 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597487926 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597491980 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597502947 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597517014 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597541094 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597543955 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597554922 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597592115 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597625017 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597645998 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597668886 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597681999 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597692966 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597702980 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597716093 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597733021 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597737074 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597779989 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597795963 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597815990 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597836971 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597847939 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597862959 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597862959 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597879887 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597887993 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597903013 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597915888 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597939968 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597940922 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597955942 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597965002 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.597980022 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.597980976 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598001957 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598005056 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598020077 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598030090 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598051071 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598059893 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598072052 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598074913 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598088026 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598100901 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598110914 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598125935 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598145008 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598151922 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598166943 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598177910 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598193884 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598201036 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598223925 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598238945 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.598253012 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.598323107 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.605113983 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.718720913 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718750954 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718763113 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718775034 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718791008 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718806982 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718822956 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718838930 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718853951 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718873978 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718887091 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718899012 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718915939 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718933105 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718947887 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718947887 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.718965054 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718982935 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.718986988 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.718991995 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719002962 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719002962 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719021082 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719032049 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719043016 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719053984 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719060898 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719077110 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719089985 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719094038 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719095945 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719110966 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719111919 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719125986 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719137907 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719155073 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719170094 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719196081 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719217062 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719235897 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719252110 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719268084 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719276905 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719284058 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719295025 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719300985 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719320059 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719325066 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719337940 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719343901 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719360113 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719372988 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719382048 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719392061 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719413996 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719434977 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.719526052 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:00.719585896 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:00.724455118 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:06.097183943 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:06.097203016 CEST	443	49171	18.211.24.111	192.168.2.22
Apr 19, 2021 20:43:06.097367048 CEST	49171	443	192.168.2.22	18.211.24.111
Apr 19, 2021 20:43:44.252373934 CEST	49171	443	192.168.2.22	18.211.24.111

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2021 20:42:25.887660980 CEST	52197	53	192.168.2.22	8.8.8.8
Apr 19, 2021 20:42:25.952151060 CEST	53	52197	8.8.8.8	192.168.2.22
Apr 19, 2021 20:42:27.745891094 CEST	53099	53	192.168.2.22	8.8.8.8
Apr 19, 2021 20:42:27.795069933 CEST	53	53099	8.8.8.8	192.168.2.22
Apr 19, 2021 20:42:27.800374985 CEST	52838	53	192.168.2.22	8.8.8.8
Apr 19, 2021 20:42:27.852098942 CEST	53	52838	8.8.8.8	192.168.2.22
Apr 19, 2021 20:42:28.172858953 CEST	61200	53	192.168.2.22	8.8.8.8
Apr 19, 2021 20:42:28.231372118 CEST	53	61200	8.8.8.8	192.168.2.22
Apr 19, 2021 20:42:28.239871025 CEST	49548	53	192.168.2.22	8.8.8.8
Apr 19, 2021 20:42:28.292913914 CEST	53	49548	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 19, 2021 20:42:25.887660980 CEST	192.168.2.22	8.8.8.8	0x15d4	Standard query (0)	admin.phishproof.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 19, 2021 20:42:25.952151060 CEST	8.8.8.8	192.168.2.22	0x15d4	No error (0)	admin.phishproof.com		18.211.24.111	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 19, 2021 20:42:26.275078058 CEST	18.211.24.111	443	192.168.2.22	49167	CN=*.phishproof.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Apr 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018	Fri Apr 08 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 19, 2021 20:42:26.275078058 CEST	18.211.24.111	443	192.168.2.22	49167	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		7dcce5b76c8b17472d024758970a406b
Apr 19, 2021 20:42:26.993288994 CEST	18.211.24.111	443	192.168.2.22	49168	CN=*.phishproof.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Apr 07 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018	Fri Apr 08 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 19, 2021 20:42:26.993288994 CEST	18.211.24.111	443	192.168.2.22	49168	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		7dcce5b76c8b17472d024758970a406b

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: WINWORD.EXE PID: 2436 Parent PID: 584

General

Start time:	20:42:34
Start date:	19/04/2021
Path:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Imagebase:	0x13f0d0000
File size:	1424032 bytes
MD5 hash:	95C38D04597050285A18F66039EDB456
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report Covid-19 Payroll Tax Adjustment.docx

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Software Vulnerabilities:

Networking:

System Summary:

Persistence and Installation Behavior:

Hooking and other Techniques for Hiding and Protection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: WINWORD.EXE PID: 2436 Parent PID: 584

General

Chronological Activities

Disassembly