Edit tour

Windows Analysis Report
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE

Overview

General Information

Sample URL:	https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE
Analysis ID:	1535964
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2356,i,18173129807580164366,9435219555007815731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE/records HTTP/1.1Host: forms.zohopublic.comConnection: keep-aliveContent-Length: 12sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/zoho.forms-v1+jsonContent-Type: application/jsonX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://forms.zohopublic.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196

Source: chromecache_88.2.dr	String found in binary or memory: https://accounts.zoho.com
Source: chromecache_88.2.dr	String found in binary or memory: https://as.zoho.com/cf/checkurl.cf?URL=
Source: chromecache_88.2.dr	String found in binary or memory: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/css/formslive.4541489581c036f067c268383cc864b0.css
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/css/themes/custom.d603ed592e55f07d313b63112b930fbf.css
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/css/themes/media.b20eef0c12d546fd2a56cc4a7809f324.css
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/formsicon.9f2e4a123b5b37ecd1e026b34f590968.png
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/loader.79de1b954774690fff0e7345d82faa25.gif
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/spacer.325472601571f31e1bf00674c368d335.gif
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/images/warning-info.607d397302b1f344f8d8df1258004046.png
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/js/formslive.a52d1c28698e28f4751854660c45525a.js
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js
Source: chromecache_88.2.dr	String found in binary or memory: https://static.zohocdn.com/forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js
Source: chromecache_95.2.dr	String found in binary or memory: https://techpakistano.online/RLp8/
Source: chromecache_88.2.dr	String found in binary or memory: https://us4-files.zohopublic.com
Source: chromecache_88.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/nunitoregular/font.eot
Source: chromecache_88.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/nunitoregular/font.ttf
Source: chromecache_88.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/nunitoregular/font.woff
Source: chromecache_88.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/nunitoregular/font.woff2
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensans/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensansbold/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensansbolditalic/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensansitalic/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensanslight/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensanslightitalic/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensanssemibold/font.woff
Source: chromecache_92.2.dr	String found in binary or memory: https://webfonts.zohowebstatic.com/opensanssemibolditalic/font.woff
Source: chromecache_88.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49784 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/56@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2356,i,18173129807580164366,9435219555007815731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2356,i,18173129807580164366,9435219555007815731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
d28140lin2gosl.cloudfront.net	18.66.102.12	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
h2-stratus.zohocdn.com	89.36.170.147	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
zpublic.zohopublic.com	136.143.182.97	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
trkl-iplk-grtes.us-sea-1.linodeobjects.com	unknown	unknown	false	unknown
forms.zohopublic.com	unknown	unknown	false	unknown
webfonts.zohowebstatic.com	unknown	unknown	false	unknown
static.zohocdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://static.zohocdn.com/forms/images/warning-info.607d397302b1f344f8d8df1258004046.png	false	unknown
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE/records	true	unknown
https://static.zohocdn.com/forms/css/themes/custom.d603ed592e55f07d313b63112b930fbf.css	false	unknown
https://static.zohocdn.com/forms/css/formslive.4541489581c036f067c268383cc864b0.css	false	unknown
https://static.zohocdn.com/forms/images/loader.79de1b954774690fff0e7345d82faa25.gif	false	unknown
https://static.zohocdn.com/forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js	false	unknown
https://static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png	false	unknown
https://static.zohocdn.com/forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico	false	unknown
https://static.zohocdn.com/forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css	false	unknown
https://trkl-iplk-grtes.us-sea-1.linodeobjects.com/antu.html	true	unknown
https://forms.zohopublic.com/formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300	false	unknown
https://static.zohocdn.com/forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js	false	unknown
https://static.zohocdn.com/forms/js/formslive.a52d1c28698e28f4751854660c45525a.js	false	unknown
https://webfonts.zohowebstatic.com/opensans/font.woff	false	unknown
https://static.zohocdn.com/forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css	false	unknown
https://static.zohocdn.com/forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js	false	unknown
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE	true	unknown
https://static.zohocdn.com/forms/css/themes/media.b20eef0c12d546fd2a56cc4a7809f324.css	false	unknown
https://webfonts.zohowebstatic.com/nunitoregular/font.woff2	false	unknown
https://forms.zohopublic.com/infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png	false	unknown
https://forms.zohopublic.com/showerror	false	unknown
https://static.zohocdn.com/forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://webfonts.zohowebstatic.com/nunitoregular/font.ttf	chromecache_88.2.dr	false	unknown
https://static.zohocdn.com/forms/images/formsicon.9f2e4a123b5b37ecd1e026b34f590968.png	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensanssemibold/font.woff	chromecache_92.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensansitalic/font.woff	chromecache_92.2.dr	false	unknown
https://techpakistano.online/RLp8/	chromecache_95.2.dr	false	unknown
https://accounts.zoho.com	chromecache_88.2.dr	false	unknown
https://as.zoho.com/cf/checkurl.cf?URL=	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/nunitoregular/font.eot	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensansbold/font.woff	chromecache_92.2.dr	false	unknown
https://static.zohocdn.com/forms/images/spacer.325472601571f31e1bf00674c368d335.gif	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensanslight/font.woff	chromecache_92.2.dr	false	unknown
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensansbolditalic/font.woff	chromecache_92.2.dr	false	unknown
https://us4-files.zohopublic.com	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/nunitoregular/font.woff	chromecache_88.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensanslightitalic/font.woff	chromecache_92.2.dr	false	unknown
https://webfonts.zohowebstatic.com/opensanssemibolditalic/font.woff	chromecache_92.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
136.143.182.97	zpublic.zohopublic.com	United States	2639	ZOHO-ASUS	false
18.66.102.12	d28140lin2gosl.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
89.36.170.147	h2-stratus.zohocdn.com	Switzerland	41913	COMPUTERLINEComputerlineSchlierbachSwitzerlandCH	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1535964
Start date and time:	2024-10-17 14:26:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/56@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.181.238, 64.233.167.84, 34.104.35.123, 142.250.185.106, 142.250.185.234, 142.250.185.138, 216.58.206.42, 142.250.74.202, 142.250.185.170, 142.250.184.234, 216.58.212.170, 172.217.18.10, 142.250.186.42, 142.250.186.106, 142.250.186.74, 142.250.186.138, 142.250.185.202, 142.250.181.234, 142.250.185.74, 52.149.20.212, 2.16.100.168, 88.221.110.91, 20.3.187.198, 192.229.221.95, 172.232.160.177, 172.232.160.181, 172.232.160.182, 172.232.160.187, 172.232.160.200, 172.232.160.194, 20.242.39.171, 4.245.163.56, 142.250.186.67, 172.202.163.200
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, us-sea-1.linodeobjects.com.akadns.net, clients2.google.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	89265
Entropy (8bit):	5.289321700014546
Encrypted:	false
SSDEEP:	1536:MeExXUhrnxDjoaaZxk2V4c08ksQf46iU3j8cOu6ETO/rBqUxQCifKbc4Q8Qvak3T:MtQfiU3jcDHxzi0hevak3tQ47GK5
MD5:	5598E1E583C1D09FC270B76B7BC87FED
SHA1:	44876173255BCAD92968AA09D26EB7361BD56369
SHA-256:	E26F12C5C9B90FCACCE612148FBBDD171302587188E66FF2511F8D1582D91A6E
SHA-512:	7477B0F707BAC1A59712A1EC7C3C8F2694D66CFDD46C02CAD1B48C35DE7697CEE5F30C391B1D54688C4A5575DE1D9D4BD23042CB24F1083167EDA7B9693FABF0
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 69, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	609
Entropy (8bit):	7.506422050947946
Encrypted:	false
SSDEEP:	12:6v/7ncMEejXzed4aVp4bBmGSUY3VDLMSMlakAHt3+Ypdx5EEePKSZ9:vMled4aCQGUMSMmN3+Yp5sf
MD5:	607D397302B1F344F8D8DF1258004046
SHA1:	BE2F65980DF878CD5448C3069F29165FF839C211
SHA-256:	0015FEA1D81D92A7C847E78F4DC6B997A8FE53DC8CE575662AEA71FFB28E1E4C
SHA-512:	1749DD3E452D969F70A2005AFC3BFA9C05ACA7AF1E84E9F752F2083A2B630FA67B943A86BDF6EA8A18DA6A90284AA3B50C8A0EF20FA5A73829DEC19A6A4588F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...E......d`....0PLTEGpL.U8.\F.\F.\E.]E.]E._?.\E.\E....]C.[C.??.[G.\DPV......tRNS..$P....c..1@....d<.....IDATx... ..s+....v..B.!.q6~...}()8...Ri3.f....1Y7^..........C..i3.A. Z.i..4.$....l.Ed.f...%m.N..p......CH.....{...e.\Z.E.]....7.X.()..\|.O...+{........G.....I}'r.{../x.\|..v.5.H"...,.3....b.P...........3........c....#F..'....M....s..&LZ..".M...U...Z.<U..j........I^/...c .. f~.#z.Y1.Mr~.3..Ia0.7..y.Y.`..p.b ...z.?._o\|.:..z.t...n.....^.[\...!nu..3.~Cz^.z/d9...2.k..N..N0{8..x./...._.@..........7U....^Uz...W........5.v...\|..p....<.(.Q...'&..o~.>.....n..d....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4967
Entropy (8bit):	7.724431163787581
Encrypted:	false
SSDEEP:	96:Q+ubphDsqqcH7feRipqvSZhoiDxPasl4cqDyCEc1jQBC:5shDzqifEspZh/Dl4cqDBEojQBC
MD5:	E44509047A0A79FB604BE98BB10EC5BC
SHA1:	28035D3BBD88F3D3CDDDEB67AB30E542A3D2005C
SHA-256:	59D950A1BF97E8B2436BEFC21924D9883058F04E58D134A211F0ED04480D122D
SHA-512:	15786AF18E7DB288AD27F9DC26A1F5FF97319210D6D52F7355117B43B6C44478918CD28CBC01FAA2DD45FC36FB0AE968E90E486799D8B76DF316F5E8ABCB6DF1
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png
Preview:	.PNG........IHDR.............k.XT....PLTEGpL..L..B..D..D..C..C..C..C..D..C..D..D..C..C..D..C..B.U .F..D..D..C..C..D..C..C..D..D..D!.B .D..D..C..D..D..D..D .E".D..C..C..D..D..?..C..C..D..E$.H..G..D..C..C..D..D..C .A..D..C..D..C!.C!.B..D..D..C".E.....C..C..?..C..C..D..F..C..C..D..E..E..C..D..C..D3.3..D..D$.H..C..C..D..D..C..C..C .D..B..C..K..E..C..C..C..D..D..C$.H!.B..D..D..D..?..C..D..D..B..F..C..D..E..C..D.....D..D..D..D..D..D..A..?..D..C..?..C..D..C..D..C..D..A#.F..C..F..C..E..D..D..D..D..D..D..C..D..C..C..8..D..D..D'.:..D..U..C..C..G..D..D..C..E..D..D..D..C .E..C..C..D..D..C..D..D..D..B..B..C..D..B..D..D..D..?..C..D..D..?".D..D..E..C..E..D..D..D..B..C..C..C..C .C .B..C..D..D .C..C..A..C..D .E..D..D..D..C..F .A..E..C..D..D..D..C..C..C..C..D..C..B..E..D..D..B..B..D..D..C..B..C..D..E..C .C..C..C...1....tRNS..Jdy...........I./Z.......Y.?w....>.[....D..U. s....q.o...&.t.r........3...;M^h.e.....fN...mG2"...L..5.6..-...xA..k....%.<.+....9..i..#..$.QR.)...~.n.p.....\|...8.\V.ajF....{

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	57733
Entropy (8bit):	5.036052681307153
Encrypted:	false
SSDEEP:	384:nOQ8Wvr+vrQvr6dfDJOCBJmhb6fnDyXF69bWYDxmYPbL59iBmGTm:OQ8Wvr+vrQvr6dbEFhbq9bxPbP5
MD5:	B20EEF0C12D546FD2A56CC4A7809F324
SHA1:	6FDCE29EBFC0BCC59F0A191D64C4F69F80E9AFB0
SHA-256:	9E8338F656D6C38B571E38BBE894A3746ACFB14E9D58CFEED8DC3A0D7623D7CE
SHA-512:	414AA890C00DE03A2D6C1A91EE4B16EB1DA415E4D2184D7530CBF3DF2F34E7927CDB8F2E0D6666FD103E03ACFDA6DED4AAB27C955AE10F6EFC7201760F5BFEE5
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/css/themes/media.b20eef0c12d546fd2a56cc4a7809f324.css
Preview:	/* $Id: $ /.@charset "UTF-8";./ CSS Document /../==================================RESPONSIVE LAYOUTS===============================================/.@-webkit-viewport {.width:device-width.}.@-moz-viewport {.width:device-width.}.@-ms-viewport {.width:device-width.}.@-o-viewport {.width:device-width.}../ Ipad (Live Themes) Start */..@media only screen and (min-width:1024px) {...body{..min-width:800px;..}....topContainer{..background-size:contain;..background-position: center bottom;..}....btmContainer{..background-size:contain;..background-position: center top;..}....tempHeadBdr{..background-size:contain;..}...}...@media only screen and (max-width:558px) {.. .twoColumns.zfCusRadio .tempContDiv span.cusChoiceSpan {. width: 45%;..}....cameraWrapper{width: 87% !important;}.}..@media only screen and (max-width:768px) {...templateWidth, .thankyouPageWrap .tyTemplateWidth{..width:100%;..margin-right:0; margin-left:0;..}..geoLocationPopup .templateWidth {. width:100%;. }..t

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 67480, version 0.0
Category:	downloaded
Size (bytes):	67480
Entropy (8bit):	7.992344312121664
Encrypted:	true
SSDEEP:	1536:AKap+Z7Op5ym+yL3pHReBfgfiq2m9w476/H1qUydl/EwNL2B+:AKap+ZCSmTL3pHafi5wj9qUyP/nkB+
MD5:	A6780EC5A41838C45918FE01C67EE292
SHA1:	7A4B6D0CC40179C57B619CEEC4D776728367210E
SHA-256:	3D7BB22AF23305340142E2A32202893476C790C802B33FCACC82F85FFA4A2677
SHA-512:	3CEA437842E551560E7E5267F91A9E2624AA4D7E0A3F86119DAB1F7847893D92DF0460FB4D6FE6DB2E259865F9C4A200B843D259AA91E99F8166386921214E71
Malicious:	false
Reputation:	low
URL:	https://webfonts.zohowebstatic.com/opensans/font.woff
Preview:	wOFF...............X........................FFTM...\|........f.p.GDEF............&..GPOS...x......>\..MGSUB...........{..cOS/2......._...`.>..cmap...........nZ&..cvt ...`...Y.....M..fpgm............~a..gasp...p...........#glyf..........3.....head.......6...6...hhea.......!...$...whmtx...p...0.....=.loca.......)...X...\|maxp....... ... .D..name............r.post...\|..........".prep...h........C............>.._.<..........51.......LL.......b............x.c`d`.......s..Y..9.1.E...r....U..............V......./.\..........x.c`f9.8.....u..1...<.f....................{...h.... f0t.vf.....&.O.....)B..q>H..u..R``.....J.x.W.HUW...{..&.D....D...8.b"..p..DX4i!"..CDD.....G...E..D.....E.!..$."..i."HD....\|...[b....s..~...U.....8`..0e.b\.C...s........[]h'.T.:..7....$:.RLYO......Mt...qb(..%...R4........j..<@W!.s..w.Q.D)..x...UO..G...#..!.xD=R.V.O...}..........(R...(m=E;.a.{. .NT..M5...z]j.i.&..*.A....1.s.......T...v.H.}u.O.....o..%............`.W.n{.7..\|@...h3J....?..:s..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Category:	dropped
Size (bytes):	74461
Entropy (8bit):	5.37233311629974
Encrypted:	false
SSDEEP:	768:/oD4K7pdLxBHUNrYQLUF0xGBokOl/N7QTMFa8Ue7Mene0KnzKImZ6F80RDO+PHHf:OjjxNUNrYEPkOZ77e0OmIAwDvPHHf
MD5:	B9384DCADF2BC7B3816527891DF599F6
SHA1:	CED56B595561E2F4B2F8E8790F4BB09D3603D1D8
SHA-256:	9D04AB031D6B175C7A9394B5BE9D26010788D65A41A7A40595D01A6F2941E77A
SHA-512:	B77C28EE5E6BFB8C02A2FC1F1F0E40AE578C5502C5DEF8F9295025F26FC5375331C8D59877921E469021CFC7347E093F38B39CC79FD6729AD88BCE6CF5B5EED5
Malicious:	false
Reputation:	low
Preview:	!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var c;return function(){var a,c,d;b&&b.requirejs\|\|(b?c=b:b={},function(b){function e(a,b){return u.call(a,b)}function f(a,b){var c,d,e,f,g,h,i,j,k,l,m,n=b&&b.split("/"),o=s.map,p=o&&o["*"]\|\|{};if(a&&"."===a.charAt(0))if(b){for(g=(a=a.split("/")).length-1,s.nodeIdCompat&&w.test(a[g])&&(a[g]=a[g].replace(w,"")),a=n.slice(0,n.length-1).concat(a),k=0;k<a.length;k+=1)if("."===(m=a[k]))a.splice(k,1),k-=1;else if(".."===m){if(1===k&&(".."===a[2]\|\|".."===a[0]))break;k>0&&(a.splice(k-1,2),k-=2)}a=a.join("/")}else 0===a.indexOf("./")&&(a=a.substring(2));if((n\|\|p)&&o){for(k=(c=a.split("/")).length;k>0;k-=1){if(d=c.slice(0,k).join("/"),n)for(l=n.length;l>0;l-=1)if((e=o[n.slice(0,l).join("/")])&&(e=e[d])){f=e,h=k;break}if(f)break;!i&&p&&p[d]&&(i=p[d],j=k)}!f&&i&&(f=i,h=j),f&&(c.spl

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65430)
Category:	downloaded
Size (bytes):	305386
Entropy (8bit):	5.152514626694098
Encrypted:	false
SSDEEP:	1536:FYnnzOIIRuLMmYPXBZ2kCC4Y47FV4V4jz/vGrXt25k6vlBIDgb9SGhK/EmS1OdIw:/+1tBBOKvv1dP14jQrIHLz
MD5:	4541489581C036F067C268383CC864B0
SHA1:	72C7C00E6B22E3585B48D0D7B2DA61275917F0B3
SHA-256:	5D56B05FF904079ED4A6F6CA9937BB85A2418CBC9A57E88B02DBDB8D02EFE19F
SHA-512:	F25FF184DC5B86D7CA0897660098E6177A843D31300EF1DB73E542C958E1BF764FDFF0D98CFB6DEBBC3CEDC8F322142BE81E2FBC1494534401D6CD9EA34D5F85
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/css/formslive.4541489581c036f067c268383cc864b0.css
Preview:	/* $Id$ /./. IMPORTANT NOTE: This compressed css file includes Zoho Forms Live Page stylesheets. /.. / button ---------------------------------------------- /.button {.display: inline-block;.zoom: 1; display: inline;.vertical-align: baseline;.margin: 0 2px;.outline: none;.cursor: pointer;.text-align: center;.text-decoration: none;.padding: .5em 2em .55em;.text-shadow: 0 1px 1px rgba(0,0,0,.3);.-webkit-border-radius: .5em;.-moz-border-radius: .5em;.border-radius: .5em;.-webkit-box-shadow: 0 1px 2px rgba(0,0,0,.2);.-moz-box-shadow: 0 1px 2px rgba(0,0,0,.2);.box-shadow: 0 1px 2px rgba(0,0,0,.2);.font: 12px "Inter", 'Open Sans', "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, sans-serif;}.button:hover {.text-decoration: none;}.button:active {.position: relative;.top: 1px;}/* color styles ---------------------------------------------- */.gray {.color: #e9e9e9;.border: solid 1px #9c9c9c;.background: #f1f1f1;.color: #222;}.red {.color: #fff;.border: solid 1px #BC0208;.bord

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	78475
Entropy (8bit):	5.050086845440776
Encrypted:	false
SSDEEP:	384:OFm0aT/imfQEFLzBN78x3+dGSn1ePjVWLQHq/ioLbJ0oI1RblVGn3GT/b9u8zfm5:CEFLzBN78x3+dGsQHq/ioRgblVGnO0ae
MD5:	2755260429CD02C98112DAC6F4B5B8CE
SHA1:	C0FDD6EC5E0C9F2B85D42E517C375F07BEC5BC2D
SHA-256:	B2CEA84C60142EA60E4A2CE7FFC440387184266D0133F3141E5142EE4C160F8D
SHA-512:	408F6EC5EF7D0F15EF71DCB2606B07F033450977C27FDD337754C4A62EC8CA5A095C5C5654A710D87AD31978BDD776C3FA9A02B7B956A292E19A85065C005B67
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css
Preview:	/* $Id$ /./. IMPORTANT NOTE: This compressed css file includes thirdparty stylesheets. /../ * CSS Styles that are needed by jScrollPane for it to operate correctly. * * Include this stylesheet in your site or copy and paste the styles below into your stylesheet - jScrollPane * may not operate correctly without them. /.jspContainer{.overflow: hidden;.position: relative;}.jspPane{.position: absolute;}.jspVerticalBar{.position: absolute;.top: 0;.right: 0;.width: 16px;.height: 100%;.background: red;}.jspHorizontalBar{.position: absolute;.bottom: 0;.left: 0;.width: 100%;.height: 16px;.background: red;}.jspVerticalBar ,.jspHorizontalBar *{.margin: 0;.padding: 0;}.jspCap{.display: none;}.jspHorizontalBar .jspCap{.float: left;}.jspTrack{.background: #dde;.position: relative;}.jspDrag{.background: #bbd;.position: relative;.top: 0;.left: 0;.cursor: pointer;}.jspHorizontalBar .jspTrack,.jspHorizontalBar .jspDrag{.float: left;.height: 100%;}.jspArrow{.background: #50506d;.text-indent: -20

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.295627021172907
Encrypted:	false
SSDEEP:	384:joV0mouuuuelPfQHwZorbiSi5iFiBikiCiQiNiTidiiiWici5ieiGi1iOQiPiHhe:qhOFeSSPtTysWpd/6ZBmDQEEC
MD5:	F337BA4DF49F92F0A9AF92E5D6E998BF
SHA1:	084B93B4EEA61FDE3088C940C26B289E68EF7E18
SHA-256:	F7E3C6210F6CF6CA4C4036F013E9A8C10248968B125AA0F9FAAE6F4DDF2E3D28
SHA-512:	F5FCEFB408FF0ECC52B751B21BDE5DEAF3849ECA1D8A6C804F398862935D85B5EE9EC72447703118CCA99ABA65A85302274B0790EB45555FEF048E6E2D4FEC1F
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.................................................T...................................^...w...........................................................................................T...................................................-...................................................................................................................................................-.......................................:...........................................................................................................................................................:.........................................................i...g...g...f...}...................m...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...i.......................................................................X...F...E...E...E...E...D.....z.........p.=.C...E...E...E...E...E...E...E...E...E...E...E...E...E...E...E.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65433)
Category:	downloaded
Size (bytes):	978393
Entropy (8bit):	5.410002556398698
Encrypted:	false
SSDEEP:	6144:BjrwtQrAl9+ry6V82QiAPr5ESz6w0zHGFb5xgtcX3hoAXxQZvD9DGAwy45DHvXzv:zlLcX35+D9DGNy45DHvXz7rDy+ayI4PH
MD5:	A52D1C28698E28F4751854660C45525A
SHA1:	FF3D83431211CBAB2FDF75DBFEE388D3198DBDA4
SHA-256:	47B169BFDA5D14AF04EE6A8DCA7A1EBD9EA5C957A0A7DE8D21B142839425D41A
SHA-512:	19EDEA83EDF19F4EC2AAE2D6F395662C7F84C116B2FD6D383AC3798F0DC9C1D2ADE19097F7B948C8514CB71046475BA796EEFCFB6E6B20ED189297430FA24CB8
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/js/formslive.a52d1c28698e28f4751854660c45525a.js
Preview:	// $Id: $./*. IMPORTANT NOTE: This compressed js file includes Zoho Forms Forms/Report live js.. */.function ZFLiveFormFocusHanderOnNavigation(actionType,pageNo){this.actionType=actionType,this.pageNo=pageNo}function ZFLiveFieldFocusHander(fieldElem,forError){this.fieldElem=fieldElem,this.isDisabledField=$(fieldElem).hasClass("fieldDisabled"),this.isFocusForError=void 0!==forError&&forError}function setFocusForElementThatCannotBeFocused(focusElem,callBackOnFocus,callBackFunctionParam){if(isSfChild(focusElem)){var scrollToViewElem=$(focusElem);if("livefield-elem"!=$(focusElem).attr("elname")){var closestFieldElem=$(focusElem).closest('[elname="livefield-elem"]');$(closestFieldElem).length>0&&(scrollToViewElem=closestFieldElem)}$(scrollToViewElem)[0].scrollIntoView({behavior:"auto",block:"center"})}if(isEmbeddedForm()&&(isMobileBrowser()\|\|isSafari()))setTimeout(function(){var hiddenInput=$("<input />");$(hiddenInput).attr("type","text"),$(hiddenInput).attr("style","position: absolute;

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	3322
Entropy (8bit):	7.21453501645913
Encrypted:	false
SSDEEP:	48:HLAAgsXUTPwkYKrfO3kIH7PSeFUhOIM5GPmCM1UqKZkk0Nra:HLAAglT5IHOeFWN4GerDhk0Nra
MD5:	79DE1B954774690FFF0E7345D82FAA25
SHA1:	0B53F6EA9DC1A0AC7014013D0EB433878AAB1B7C
SHA-256:	A7F44D3BC98F7B02879478758A8D3903EF51D1292F6B3A4FDAAD1DF616CB63CA
SHA-512:	93D2688568013DED71064844A534E2DCB90DB594B34DE37645BBE19802B329E3D4AD11F0BC23AFD5884EAA0EC8FDF9C3D3E6BC0D2CC1AAAD1D43FB3EAF4E36F8
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/images/loader.79de1b954774690fff0e7345d82faa25.gif
Preview:	GIF89a................444===MMMUUUVVVYYYaaaggghhhlll\|\|\|.............................................................................................!!!''')))555BBBNNNTTT]]]jjjttt{{{....................................................................................666999???iiinnn}}}.............................................###OOORRRmmm.......................................<<<@@@..........................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.-Made by Krasimira Nejcheva (www.loadinfo.net).!.....+.,.............pH.A #.rI,...B..T.-P..J<=.......0.T.3.!.8cuB.......hDJ.q..&+(..(+.~..K...nJ.}.!K$....L).. .D'.\.K&....B*$#)+$..........).....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 69, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	609
Entropy (8bit):	7.506422050947946
Encrypted:	false
SSDEEP:	12:6v/7ncMEejXzed4aVp4bBmGSUY3VDLMSMlakAHt3+Ypdx5EEePKSZ9:vMled4aCQGUMSMmN3+Yp5sf
MD5:	607D397302B1F344F8D8DF1258004046
SHA1:	BE2F65980DF878CD5448C3069F29165FF839C211
SHA-256:	0015FEA1D81D92A7C847E78F4DC6B997A8FE53DC8CE575662AEA71FFB28E1E4C
SHA-512:	1749DD3E452D969F70A2005AFC3BFA9C05ACA7AF1E84E9F752F2083A2B630FA67B943A86BDF6EA8A18DA6A90284AA3B50C8A0EF20FA5A73829DEC19A6A4588F3
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/images/warning-info.607d397302b1f344f8d8df1258004046.png
Preview:	.PNG........IHDR...F...E......d`....0PLTEGpL.U8.\F.\F.\E.]E.]E._?.\E.\E....]C.[C.??.[G.\DPV......tRNS..$P....c..1@....d<.....IDATx... ..s+....v..B.!.q6~...}()8...Ri3.f....1Y7^..........C..i3.A. Z.i..4.$....l.Ed.f...%m.N..p......CH.....{...e.\Z.E.]....7.X.()..\|.O...+{........G.....I}'r.{../x.\|..v.5.H"...,.3....b.P...........3........c....#F..'....M....s..&LZ..".M...U...Z.<U..j........I^/...c .. f~.#z.Y1.Mr~.3..Ia0.7..y.Y.`..p.b ...z.?._o\|.:..z.t...n.....^.[\...!nu..3.~Cz^.z/d9...2.k..N..N0{8..x./...._.@..........7U....^Uz...W........5.v...\|..p....<.(.Q...'&..o~.>.....n..d....IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	974
Entropy (8bit):	5.0883778865345235
Encrypted:	false
SSDEEP:	12:UsJ3u6E+ARP6E4pAR0M36EeARzEhBARkK6E75ARrlK6E83DARMNK6ExpARL33K6m:F5ubPwy0M37Aq3WrIp5JyO5MjJq
MD5:	BDBBC9B6F964EE4F4C1D1DEBD83B0068
SHA1:	A072F927E93DC614AF17487C74A7F95327703059
SHA-256:	ABB8C8A48E1155C695ED2F6108CEAF1E8E08A320101DF132817B3BE9BC77FF38
SHA-512:	4F96A91CE372EA15FD9BC1A7E780EEC828B6DE75251107AAAB952C0F2ECA653E257BA55952C912143304999A743D9C0E0D24BFA3A7410A4DB389F577C8326D8C
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css
Preview:	/* $Id: $ /.@charset "UTF-8";./ CSS Document /..../@media only screen and (min-width:1024px) {....backgroundSecBg {padding:30px;}..}....@media only screen and (max-width:768px) {....backgroundSecBg {padding:30px;}..}..@media only screen and (min-width:700px) and (max-width:735px) {....backgroundSecBg {padding:30px;}..}..@media only screen and (min-width:650px) and (max-width:700px) {.. .backgroundSecBg {padding:30px;}.}..@media only screen and (min-width:550px) and (max-width:650px) {....backgroundSecBg {padding:20px;}..}..@media only screen and (min-width:450px) and (max-width:550px) {....backgroundSecBg {padding:20px;}..}...@media only screen and (min-width:350px) and (max-width:450px) {....backgroundSecBg {padding:10px;}..}.....@media only screen and (min-width:300px) and (max-width:350px) {....backgroundSecBg {padding:10px;}..}....@media only screen and (min-width:250px) and (max-width:300px) {....backgroundSecBg {padding:10px;}.}.*/.........

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.78943673776659
Encrypted:	false
SSDEEP:	3:HdcnyDrYk2qkkKpNJwEL6li2KtTk2ATwEkk6NlgzhtsTEj:anyDMxlN+JHMx2ik2gzuEj
MD5:	DEC22A5CDFE7E9535035F518AFE22B9C
SHA1:	59EF57C4FA779AB4EF33B8AB30D99EAA48F1E941
SHA-256:	D3FE01510DD50AAC68D55AF988E80B22E036797FD5DB0B81271C64CBAECE8762
SHA-512:	7E7665FC0498964ED4D19A0761FF5D10B8A62EBE7936205212640BE4B07F78753CF3B43CE5C437B1450425C97FCBE31F57BDCC9D4D8ACF4F746F81BDA37C7C36
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKbkyViBZV7xIFDaqYN6ASSAlCWlaGB3ErchIFDZSQkvoSBQ1nBKBqEgUNkWGVThIFDQbtu_8SBQ2UkJL6EgUNkXu91xIFDSVEyYISBQ3a7xfQEgUNri_5Ww==?alt=proto
Preview:	CgkKBw2qmDegGgAKVwoHDZSQkvoaAAoHDWcEoGoaAAoNDZFhlU4aBAgJGAEgAQoHDQbtu/8aAAoHDZSQkvoaAAoHDZF7vdcaAAoHDSVEyYIaAAoHDdrvF9AaAAoHDa4v+VsaAA==

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	152732
Entropy (8bit):	5.634738397407259
Encrypted:	false
SSDEEP:	1536:x9Pw8JKM4lvJIv59MelX2U/KNRQlZp0l7XMYofg8JKM4lvJIv59MelXz0jS+w1Z4:x9PYoRz0jS0HT6K
MD5:	91B37333794152E1A396B0C012393284
SHA1:	8BB0C5BFC06AC8072503DCA4EC9A1440CC9E0F5B
SHA-256:	D267E2447449F86CC43642D4A1DA79CD8CDFD1C3B796A231EFC7F36A8384C20C
SHA-512:	2389F78CC5181C33EC3716B31FB9A98084B4F7B1D99F865CC1A5B3B6DBF1C3338DBE0D35532814D5D1A20C9240006A4B44F577F87349DF2961E0D1020CDD562A
Malicious:	false
Reputation:	low
Preview:	var ZFConstants={SAVE_RECORD_STATUS:1},ZFHttp={GET:"GET",POST:"POST",DELETE:"DELETE",PUT:"PUT"},ZFMimeType={APPLICATION_JSON:"application/json"},ZFFormField={ADDRESS:{MAP_INFO:"_Map_Info",COUNTRY:{KEY:"_Country"},STATE:{KEY:"_Region"},CITY:{KEY:"_City"},ADDRESS_LINE1:{KEY:"_AddressLine1"},ADDRESS_LINE2:{KEY:"_AddressLine2"}},NAME:{SALUTATION:{KEY:"_Salutation"}}},SystemGeneratedField={PAYMENT_AMOUNT:{LINK_NAME:"PaymentAmount"},ZF_ADDED_LATITUDE:{LINK_NAME:"zf_added_latitude"},ZF_ADDED_LONGITUDE:{LINK_NAME:"zf_added_longitude"},ADDED_LANGUAGE:{LINK_NAME:"ADDED_LANGUAGE"},VERIFY_PERMA:{LINK_NAME:"VERIFY_PERMA"},REFERRER_NAME:{LINK_NAME:"REFERRER_NAME"}},ZFFieldTypeConstants={SINGLE_LINE:1,MULTI_LINE:2,NUMBER:3,CURRENCY:4,DATE:5,TIME:6,NAME:7,ADDRESS:8,EMAIL:9,WEBSITE:10,PHONE:11,DROPDOWN:12,RADIO:13,CHECKBOX:14,MULTIPLE_CHOICE:15,DATETIME:16,SECTION:17,DECISION_BOX:18,FILE_UPLOAD:19,DECIMAL:20,RATING:21,HTML_TEXT:22,SLIDER:23,SIGNATURE:25,GEOLOCATION:26,FORMULA:27,UNIQUE_ID:28,IMAGE_CHOI

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 899 x 535, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22927
Entropy (8bit):	7.835592003927563
Encrypted:	false
SSDEEP:	384:MTmVADfk8sOwO5EVubbgQVMoWsTqjycfdT87R8b2wz8d33+fP4wFArm59:MTmqTsONYubbgAOucG7RmrI32Qy
MD5:	412C00F16EE8818920B6DDEFD6ED9D45
SHA1:	315484AF2133C2F9A44CF4D5DE8C5675CF9A54BC
SHA-256:	467C94A1243A6D9D7CDE3C4109096C1C07E0F2747C3313D00EA9AD06830D4EC0
SHA-512:	3FD1A6DA92923777716BC7644F22416BF69BAE2A763526A32D4DC545D1B21E3469AD8F3710D2F7E5A21316655EBED5074C54B96EC41527A8574FC317AD7E8340
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............&.......gAMA....\|.Q.... cHRM...........~..............:R.......h...,iCCPICC Profile..X.yy8U...>...t..<..y...k..4.R...D)d,....P...Bi..RH..=.........<..<...^...^{X.......0.....*...P...].7. ..l....}.#....R.\|..\|.D..2 .a......../....}..}..\....7.B.....P#7...Y(.A.......y6...V..q.7B.1.x:2......}.X.@..}$R........"X.7......DG&<\|...C.......M..6....x..7....#........!.....o...[y.n..L.....[.3#.a....~..c..[..7...3d.......F..f..u2......>l.L.p..}(....c#.l.~.9..o.._..6q....lj.`$... G.-....`g...#.7:...w.W.AF6.t(1...E...@1...Aq.G...%.K...... G.(W.hW.?....M.8...#.~sC!.eh..mZd..o}...03..qF]..u.......8.....m.G}...9nqC...0..@.. ....B@p.l.,..V.) .....@...O.........'......7k.A,"_.+.z.............\h].6..y.#..Z.......^.&Xc.9..+.../.:.y( ..#.D...w.\"....=..L..-.9f...8...V~ky.'S.......5.... 6......hC.....fCs.Y....Z..M....a._n.............K..f..wf..j..........oM...MT'.........fT...uw........7.Mn....?:.U.....O....(.....q..a.;2....D.0@vd...._9..%

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4967
Entropy (8bit):	7.724431163787581
Encrypted:	false
SSDEEP:	96:Q+ubphDsqqcH7feRipqvSZhoiDxPasl4cqDyCEc1jQBC:5shDzqifEspZh/Dl4cqDBEojQBC
MD5:	E44509047A0A79FB604BE98BB10EC5BC
SHA1:	28035D3BBD88F3D3CDDDEB67AB30E542A3D2005C
SHA-256:	59D950A1BF97E8B2436BEFC21924D9883058F04E58D134A211F0ED04480D122D
SHA-512:	15786AF18E7DB288AD27F9DC26A1F5FF97319210D6D52F7355117B43B6C44478918CD28CBC01FAA2DD45FC36FB0AE968E90E486799D8B76DF316F5E8ABCB6DF1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTEGpL..L..B..D..D..C..C..C..C..D..C..D..D..C..C..D..C..B.U .F..D..D..C..C..D..C..C..D..D..D!.B .D..D..C..D..D..D..D .E".D..C..C..D..D..?..C..C..D..E$.H..G..D..C..C..D..D..C .A..D..C..D..C!.C!.B..D..D..C".E.....C..C..?..C..C..D..F..C..C..D..E..E..C..D..C..D3.3..D..D$.H..C..C..D..D..C..C..C .D..B..C..K..E..C..C..C..D..D..C$.H!.B..D..D..D..?..C..D..D..B..F..C..D..E..C..D.....D..D..D..D..D..D..A..?..D..C..?..C..D..C..D..C..D..A#.F..C..F..C..E..D..D..D..D..D..D..C..D..C..C..8..D..D..D'.:..D..U..C..C..G..D..D..C..E..D..D..D..C .E..C..C..D..D..C..D..D..D..B..B..C..D..B..D..D..D..?..C..D..D..?".D..D..E..C..E..D..D..D..B..C..C..C..C .C .B..C..D..D .C..C..A..C..D .E..D..D..D..C..F .A..E..C..D..D..D..C..C..C..C..D..C..B..E..D..D..B..B..D..D..C..B..C..D..E..C .C..C..C...1....tRNS..Jdy...........I./Z.......Y.?w....>.[....D..U. s....q.o...&.t.r........3...;M^h.e.....fN...mG2"...L..5.6..-...xA..k....%.<.+....9..i..#..$.QR.)...~.n.p.....\|...8.\V.ajF....{

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	152732
Entropy (8bit):	5.634738397407259
Encrypted:	false
SSDEEP:	1536:x9Pw8JKM4lvJIv59MelX2U/KNRQlZp0l7XMYofg8JKM4lvJIv59MelXz0jS+w1Z4:x9PYoRz0jS0HT6K
MD5:	91B37333794152E1A396B0C012393284
SHA1:	8BB0C5BFC06AC8072503DCA4EC9A1440CC9E0F5B
SHA-256:	D267E2447449F86CC43642D4A1DA79CD8CDFD1C3B796A231EFC7F36A8384C20C
SHA-512:	2389F78CC5181C33EC3716B31FB9A98084B4F7B1D99F865CC1A5B3B6DBF1C3338DBE0D35532814D5D1A20C9240006A4B44F577F87349DF2961E0D1020CDD562A
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js
Preview:	var ZFConstants={SAVE_RECORD_STATUS:1},ZFHttp={GET:"GET",POST:"POST",DELETE:"DELETE",PUT:"PUT"},ZFMimeType={APPLICATION_JSON:"application/json"},ZFFormField={ADDRESS:{MAP_INFO:"_Map_Info",COUNTRY:{KEY:"_Country"},STATE:{KEY:"_Region"},CITY:{KEY:"_City"},ADDRESS_LINE1:{KEY:"_AddressLine1"},ADDRESS_LINE2:{KEY:"_AddressLine2"}},NAME:{SALUTATION:{KEY:"_Salutation"}}},SystemGeneratedField={PAYMENT_AMOUNT:{LINK_NAME:"PaymentAmount"},ZF_ADDED_LATITUDE:{LINK_NAME:"zf_added_latitude"},ZF_ADDED_LONGITUDE:{LINK_NAME:"zf_added_longitude"},ADDED_LANGUAGE:{LINK_NAME:"ADDED_LANGUAGE"},VERIFY_PERMA:{LINK_NAME:"VERIFY_PERMA"},REFERRER_NAME:{LINK_NAME:"REFERRER_NAME"}},ZFFieldTypeConstants={SINGLE_LINE:1,MULTI_LINE:2,NUMBER:3,CURRENCY:4,DATE:5,TIME:6,NAME:7,ADDRESS:8,EMAIL:9,WEBSITE:10,PHONE:11,DROPDOWN:12,RADIO:13,CHECKBOX:14,MULTIPLE_CHOICE:15,DATETIME:16,SECTION:17,DECISION_BOX:18,FILE_UPLOAD:19,DECIMAL:20,RATING:21,HTML_TEXT:22,SLIDER:23,SIGNATURE:25,GEOLOCATION:26,FORMULA:27,UNIQUE_ID:28,IMAGE_CHOI

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	143468
Entropy (8bit):	5.363351553456664
Encrypted:	false
SSDEEP:	1536:36xg4ZL4w5PTuQQRzvL62iCkyYGPx9c5nuoCkT2HirfXJimZBeOIM/2qJnNkh4VQ:qxg4cxoJHTJrfZpPeOIM/xkhBfa0
MD5:	62943A8EE9919D8253E7BE70BAB3DE1C
SHA1:	2DFA880BFAD0BA24F2BC9C7B86892DD2887E9AA7
SHA-256:	3BFB149E8BF4A2EFF6A5C63BA4774384D554A5EED58656BCEDA211DC9A340C12
SHA-512:	816C7228E5448FA4721B40ABADA6B0C28C0A72A9BF253A96225903C3799747B9EF8D960A44173AC0E723C5799900ABA8AD18CB01F596DB43B1858DB7493BEBB2
Malicious:	false
Reputation:	low
Preview:	!function(factory){"function"==typeof define&&define.amd?define(["jquery"],factory):factory(jQuery)}(function($){var uuid,removeData,eventType,orig;function focusable(element,isTabIndexNotNaN){var map,mapName,img,nodeName=element.nodeName.toLowerCase();return"area"===nodeName?(mapName=(map=element.parentNode).name,!(!element.href\|\|!mapName\|\|"map"!==map.nodeName.toLowerCase())&&(!!(img=$("img[usemap='#"+mapName+"']")[0])&&visible(img))):(/^(input\|select\|textarea\|button\|object)$/.test(nodeName)?!element.disabled:"a"===nodeName&&element.href\|\|isTabIndexNotNaN)&&visible(element)}function visible(element){return $.expr.filters.visible(element)&&!$(element).parents().addBack().filter(function(){return"hidden"===$.css(this,"visibility")}).length}$.ui=$.ui\|\|{},$.extend($.ui,{version:"1.11.4",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38}}),$.fn.extend({scrollParent:function(includeHidd

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	89265
Entropy (8bit):	5.289321700014546
Encrypted:	false
SSDEEP:	1536:MeExXUhrnxDjoaaZxk2V4c08ksQf46iU3j8cOu6ETO/rBqUxQCifKbc4Q8Qvak3T:MtQfiU3jcDHxzi0hevak3tQ47GK5
MD5:	5598E1E583C1D09FC270B76B7BC87FED
SHA1:	44876173255BCAD92968AA09D26EB7361BD56369
SHA-256:	E26F12C5C9B90FCACCE612148FBBDD171302587188E66FF2511F8D1582D91A6E
SHA-512:	7477B0F707BAC1A59712A1EC7C3C8F2694D66CFDD46C02CAD1B48C35DE7697CEE5F30C391B1D54688C4A5575DE1D9D4BD23042CB24F1083167EDA7B9693FABF0
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	143468
Entropy (8bit):	5.363351553456664
Encrypted:	false
SSDEEP:	1536:36xg4ZL4w5PTuQQRzvL62iCkyYGPx9c5nuoCkT2HirfXJimZBeOIM/2qJnNkh4VQ:qxg4cxoJHTJrfZpPeOIM/xkhBfa0
MD5:	62943A8EE9919D8253E7BE70BAB3DE1C
SHA1:	2DFA880BFAD0BA24F2BC9C7B86892DD2887E9AA7
SHA-256:	3BFB149E8BF4A2EFF6A5C63BA4774384D554A5EED58656BCEDA211DC9A340C12
SHA-512:	816C7228E5448FA4721B40ABADA6B0C28C0A72A9BF253A96225903C3799747B9EF8D960A44173AC0E723C5799900ABA8AD18CB01F596DB43B1858DB7493BEBB2
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js
Preview:	!function(factory){"function"==typeof define&&define.amd?define(["jquery"],factory):factory(jQuery)}(function($){var uuid,removeData,eventType,orig;function focusable(element,isTabIndexNotNaN){var map,mapName,img,nodeName=element.nodeName.toLowerCase();return"area"===nodeName?(mapName=(map=element.parentNode).name,!(!element.href\|\|!mapName\|\|"map"!==map.nodeName.toLowerCase())&&(!!(img=$("img[usemap='#"+mapName+"']")[0])&&visible(img))):(/^(input\|select\|textarea\|button\|object)$/.test(nodeName)?!element.disabled:"a"===nodeName&&element.href\|\|isTabIndexNotNaN)&&visible(element)}function visible(element){return $.expr.filters.visible(element)&&!$(element).parents().addBack().filter(function(){return"hidden"===$.css(this,"visibility")}).length}$.ui=$.ui\|\|{},$.extend($.ui,{version:"1.11.4",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38}}),$.fn.extend({scrollParent:function(includeHidd

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	3322
Entropy (8bit):	7.21453501645913
Encrypted:	false
SSDEEP:	48:HLAAgsXUTPwkYKrfO3kIH7PSeFUhOIM5GPmCM1UqKZkk0Nra:HLAAglT5IHOeFWN4GerDhk0Nra
MD5:	79DE1B954774690FFF0E7345D82FAA25
SHA1:	0B53F6EA9DC1A0AC7014013D0EB433878AAB1B7C
SHA-256:	A7F44D3BC98F7B02879478758A8D3903EF51D1292F6B3A4FDAAD1DF616CB63CA
SHA-512:	93D2688568013DED71064844A534E2DCB90DB594B34DE37645BBE19802B329E3D4AD11F0BC23AFD5884EAA0EC8FDF9C3D3E6BC0D2CC1AAAD1D43FB3EAF4E36F8
Malicious:	false
Reputation:	low
Preview:	GIF89a................444===MMMUUUVVVYYYaaaggghhhlll\|\|\|.............................................................................................!!!''')))555BBBNNNTTT]]]jjjttt{{{....................................................................................666999???iiinnn}}}.............................................###OOORRRmmm.......................................<<<@@@..........................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.-Made by Krasimira Nejcheva (www.loadinfo.net).!.....+.,.............pH.A #.rI,...B..T.-P..J<=.......0.T.3.!.8cuB.......hDJ.q..&+(..(+.~..K...nJ.}.!K$....L).. .D'.\.K&....B*$#)+$..........).....

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20443)
Category:	downloaded
Size (bytes):	156055
Entropy (8bit):	5.4819998662435525
Encrypted:	false
SSDEEP:	1536:tAYAqiyYd1ssCuLxn2hsuVLkDjzOFkqlYlwKRCBjliYP4Mt4SbOg9d+wrlwRjasy:tsQ0v/qaEBcQG3ct5baMXgJ0
MD5:	B2325A11072886D2F2051A0874806D89
SHA1:	578ECB3966A725B37FC13AC6BFC3EE143FF7721F
SHA-256:	4E2489F6571255B9C3E156997F3D87B402AB91A7D2B582D50DB3B80D7C216049
SHA-512:	B61897EEB5991AA37909AA1BBC937E9C201BE54AB01D1DA9C7A3C20F9D745961B4D7B0FE384FCFDEC6CDDFFA655901F6972330259995DF4FC625FAB825B1D463
Malicious:	false
Reputation:	low
URL:	https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> .<meta http-equiv="x-ua-compatible" content="IE=edge" />.<html xmlns="http://www.w3.org/1999/xhtml"><meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. To disallow zoom in mobile browser, maximum-scale to 1 in form live page. -->.<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=1"/>.<meta name="MobileOptimized" content="width"><meta name="HandheldFriendly" content="true"><meta http-equiv="cleartype" content="on">.<meta property="og:title" content="Admin365" /><meta property="og:type" content="website" /><meta property="og:url" content="https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE" />.<meta property="og:description" content="Fill out this form." /><head> Google Tag Manager -->.<script>try{.var isGTMEnabled = "false";.if(isGTME

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.295627021172907
Encrypted:	false
SSDEEP:	384:joV0mouuuuelPfQHwZorbiSi5iFiBikiCiQiNiTidiiiWici5ieiGi1iOQiPiHhe:qhOFeSSPtTysWpd/6ZBmDQEEC
MD5:	F337BA4DF49F92F0A9AF92E5D6E998BF
SHA1:	084B93B4EEA61FDE3088C940C26B289E68EF7E18
SHA-256:	F7E3C6210F6CF6CA4C4036F013E9A8C10248968B125AA0F9FAAE6F4DDF2E3D28
SHA-512:	F5FCEFB408FF0ECC52B751B21BDE5DEAF3849ECA1D8A6C804F398862935D85B5EE9EC72447703118CCA99ABA65A85302274B0790EB45555FEF048E6E2D4FEC1F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$.................................................T...................................^...w...........................................................................................T...................................................-...................................................................................................................................................-.......................................:...........................................................................................................................................................:.........................................................i...g...g...f...}...................m...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...g...i.......................................................................X...F...E...E...E...E...D.....z.........p.=.C...E...E...E...E...E...E...E...E...E...E...E...E...E...E...E.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (454)
Category:	downloaded
Size (bytes):	88667
Entropy (8bit):	5.143574215088127
Encrypted:	false
SSDEEP:	768:jLGc73K8d7y0lFS3FiFbFVOFiFRFZhqFWFVFdFfFfQvnHFE3FmkTz4:j3735lg3o9uI3D8s3rRhEHy3UF
MD5:	D603ED592E55F07D313B63112B930FBF
SHA1:	F41F85A845498B007F6C3720DBD53A159986EC09
SHA-256:	B33B5EFAB0ADEB34A6559FA7163E60D0C4BA0C0CEE293BF215315717270584A5
SHA-512:	0F7F93472B61A312EE31DC6110C7E4CC847027FA5FAECFB2EB4505ACF8DFCFF4B960EFABE947C0A62B92A7E491377325E0A819B31DD612B4479016CBD82ED555
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/css/themes/custom.d603ed592e55f07d313b63112b930fbf.css
Preview:	/* $Id: $ /.@charset "UTF-8";./ CSS Document /../defaultTheme starts here/...backgroundBg, .tyBackgroundBg {..background-color:#f5f5f5;.}...backgroundSecBg{ ..margin:0;..padding:0;.}...templateWidth, .tyTemplateWidth {..margin:0 auto;..width:800px;../...Old forms have backgroundsecbg with padding:30px in custom.css . Now changed padding to templateWidth class....Old Users have form width of 800px will change to 740px because of 30px padding on left and right of form....Hence to differentiate old and new forms, .newThemeDummyWidth class is used. ...Any changes in this padding kindly find ".newThemeDummyWidth" and do needful changes...*/..padding:30px; .}..topContainer {..display:none;.}..btmContainer {..display:none;.}..centerContainer {.}..templateWrapper, .tyTemplateWrapper {..background:#fff;..border:1px solid #d6d6d6;..-webkit-border-radius:2px;..-moz-border-radius:2px;..-ms-border-radius:2px;..-o-border-radius:2px;..border-radius:2px;..position: relative;.}..tempHeadContBdr {

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65433)
Category:	dropped
Size (bytes):	978393
Entropy (8bit):	5.410002556398698
Encrypted:	false
SSDEEP:	6144:BjrwtQrAl9+ry6V82QiAPr5ESz6w0zHGFb5xgtcX3hoAXxQZvD9DGAwy45DHvXzv:zlLcX35+D9DGNy45DHvXz7rDy+ayI4PH
MD5:	A52D1C28698E28F4751854660C45525A
SHA1:	FF3D83431211CBAB2FDF75DBFEE388D3198DBDA4
SHA-256:	47B169BFDA5D14AF04EE6A8DCA7A1EBD9EA5C957A0A7DE8D21B142839425D41A
SHA-512:	19EDEA83EDF19F4EC2AAE2D6F395662C7F84C116B2FD6D383AC3798F0DC9C1D2ADE19097F7B948C8514CB71046475BA796EEFCFB6E6B20ED189297430FA24CB8
Malicious:	false
Reputation:	low
Preview:	// $Id: $./*. IMPORTANT NOTE: This compressed js file includes Zoho Forms Forms/Report live js.. */.function ZFLiveFormFocusHanderOnNavigation(actionType,pageNo){this.actionType=actionType,this.pageNo=pageNo}function ZFLiveFieldFocusHander(fieldElem,forError){this.fieldElem=fieldElem,this.isDisabledField=$(fieldElem).hasClass("fieldDisabled"),this.isFocusForError=void 0!==forError&&forError}function setFocusForElementThatCannotBeFocused(focusElem,callBackOnFocus,callBackFunctionParam){if(isSfChild(focusElem)){var scrollToViewElem=$(focusElem);if("livefield-elem"!=$(focusElem).attr("elname")){var closestFieldElem=$(focusElem).closest('[elname="livefield-elem"]');$(closestFieldElem).length>0&&(scrollToViewElem=closestFieldElem)}$(scrollToViewElem)[0].scrollIntoView({behavior:"auto",block:"center"})}if(isEmbeddedForm()&&(isMobileBrowser()\|\|isSafari()))setTimeout(function(){var hiddenInput=$("<input />");$(hiddenInput).attr("type","text"),$(hiddenInput).attr("style","position: absolute;

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1307
Entropy (8bit):	4.816358108075341
Encrypted:	false
SSDEEP:	12:jMuq9UNV0bVcFpMuq9UddJ0VcGpMuq9Ud3VcSxpMuq9UoJ0Vcs8JGpMuq9UsVcsZ:hTNkNBOJYzJSJQTLA
MD5:	371705095CE3DA3054F5FDBC5B887234
SHA1:	080828DA073F5AA280B58BBDAFF7CE06C24260E5
SHA-256:	D60AB551B12381F4FB3A1E96340EDB2F9F616F154BC22DF54ABE1CF21F768418
SHA-512:	4E7DD3436D8CB529ACC0033BB536AD09AD8585D9D0CE8013BAFE8F45DA38814B1C36DAA01757699F9FA943B44323BB2F50210C97A1ABA67CB0A0CCA0A54FB353
Malicious:	false
Reputation:	low
URL:	"https://forms.zohopublic.com/formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300"
Preview:	@font-face {.font-family:"Open Sans";.font-weight:400;.font-style:normal;.src:url("https://webfonts.zohowebstatic.com/opensans/font.woff") format("woff");}.@font-face {.font-family:"Open Sans";.font-weight:700;.font-style:italic;.src:url("https://webfonts.zohowebstatic.com/opensansbolditalic/font.woff") format("woff");}.@font-face {.font-family:"Open Sans";.font-weight:700;.font-style:normal;.src:url("https://webfonts.zohowebstatic.com/opensansbold/font.woff") format("woff");}.@font-face {.font-family:"Open Sans";.font-weight:600;.font-style:italic;.src:url("https://webfonts.zohowebstatic.com/opensanssemibolditalic/font.woff") format("woff");}.@font-face {.font-family:"Open Sans";.font-weight:600;.font-style:normal;.src:url("https://webfonts.zohowebstatic.com/opensanssemibold/font.woff") format("woff");}.@font-face {.font-family:"Open Sans";.font-weight:400;.font-style:italic;.src:url("https://webfonts.zohowebstatic.com/opensansitalic/font.woff") format("woff");}.@font-face {.font-fami

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Category:	downloaded
Size (bytes):	74461
Entropy (8bit):	5.37233311629974
Encrypted:	false
SSDEEP:	768:/oD4K7pdLxBHUNrYQLUF0xGBokOl/N7QTMFa8Ue7Mene0KnzKImZ6F80RDO+PHHf:OjjxNUNrYEPkOZ77e0OmIAwDvPHHf
MD5:	B9384DCADF2BC7B3816527891DF599F6
SHA1:	CED56B595561E2F4B2F8E8790F4BB09D3603D1D8
SHA-256:	9D04AB031D6B175C7A9394B5BE9D26010788D65A41A7A40595D01A6F2941E77A
SHA-512:	B77C28EE5E6BFB8C02A2FC1F1F0E40AE578C5502C5DEF8F9295025F26FC5375331C8D59877921E469021CFC7347E093F38B39CC79FD6729AD88BCE6CF5B5EED5
Malicious:	false
Reputation:	low
URL:	https://static.zohocdn.com/forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js
Preview:	!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var c;return function(){var a,c,d;b&&b.requirejs\|\|(b?c=b:b={},function(b){function e(a,b){return u.call(a,b)}function f(a,b){var c,d,e,f,g,h,i,j,k,l,m,n=b&&b.split("/"),o=s.map,p=o&&o["*"]\|\|{};if(a&&"."===a.charAt(0))if(b){for(g=(a=a.split("/")).length-1,s.nodeIdCompat&&w.test(a[g])&&(a[g]=a[g].replace(w,"")),a=n.slice(0,n.length-1).concat(a),k=0;k<a.length;k+=1)if("."===(m=a[k]))a.splice(k,1),k-=1;else if(".."===m){if(1===k&&(".."===a[2]\|\|".."===a[0]))break;k>0&&(a.splice(k-1,2),k-=2)}a=a.join("/")}else 0===a.indexOf("./")&&(a=a.substring(2));if((n\|\|p)&&o){for(k=(c=a.split("/")).length;k>0;k-=1){if(d=c.slice(0,k).join("/"),n)for(l=n.length;l>0;l-=1)if((e=o[n.slice(0,l).join("/")])&&(e=e[d])){f=e,h=k;break}if(f)break;!i&&p&&p[d]&&(i=p[d],j=k)}!f&&i&&(f=i,h=j),f&&(c.spl

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	5.246697684559508
Encrypted:	false
SSDEEP:	6:TMVBd/IqZjZvKhBzZhK4y2r529jd2rjFan:TMHd1BZKlDy2Vc2Na
MD5:	9802050C5818D5FE669A98F0ECDA0DB2
SHA1:	FBA55A02FB6FBE751198F22BE23F1A367CC5839C
SHA-256:	4DB1E8DD64487D1C903093B58515B4789CB1C46D70281E9CF980E39A232A2590
SHA-512:	B2878079AFBEE2BB9B35E48E1A9BBB7FC320111F266DC95CA1FC4A3D6830B505E58C5E1E6EF08D5282B5191191B8CEC98E073E8784289C591E304F8A475AA820
Malicious:	false
Reputation:	low
URL:	https://trkl-iplk-grtes.us-sea-1.linodeobjects.com/favicon.ico
Preview:	<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><BucketName>trkl-iplk-grtes</BucketName><RequestId>tx000003166a1544c3995e5-00671102b9-8072972e-default</RequestId><HostId>8072972e-default-default</HostId></Error>

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65129), with CRLF line terminators
Category:	downloaded
Size (bytes):	559417
Entropy (8bit):	6.0065295667541845
Encrypted:	false
SSDEEP:	12288:iVn3uQcb0NOJhrBnCyAbTlRT1nqZoT2eDKOrj3mj47mbxwu/AXcXT:Xba8+TlnV6It2j47E7//T
MD5:	D92FF20B0A2214DF3FF22D4186F08CEA
SHA1:	585EB5D0F6683339877DF2CFB109214EAC51F81D
SHA-256:	ED558927EF3D9AA4A0470927ACFAC9A663A3786ECBD93560CF45B00CEC01ECE8
SHA-512:	ED52AE698B59C4ADA5862E59681A509D634419B354E596495032A22CB0D0185F4122325B8723F1BE8830AE10D1A35E98FBE7AF4A948CEF40EB88E4821E935DC7
Malicious:	false
Reputation:	low
URL:	https://trkl-iplk-grtes.us-sea-1.linodeobjects.com/antu.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <base href="https://www.facebook.com/"> This sets the base URL for all relative URLs -->.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Security Verification</title>.. <style>.. body {.. display: flex;.. justify-content: center;.. align-items: center;.. height: 100vh;.. background-image: url('data:image/png;base64,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

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43780, version 3.65
Category:	downloaded
Size (bytes):	43780
Entropy (8bit):	7.994241269677357
Encrypted:	true
SSDEEP:	768:Eh3ag4dAvgU2n57Cv6785nPkdg8OWbMw+lIY/+RbjdyYJF9xIAlN1bOhtTYON:EsgWQgRm08Cg8ZgBojM6xjlNWd
MD5:	410E9B6EF0E68E4BE15084A8CB09F466
SHA1:	28E78F6A1C7E08D1A43F7747DFD506AE70CD2E29
SHA-256:	8BA79F86326A75D8340B4759685E15CDB94116C796DA59B370A87F0591E5B613
SHA-512:	6D323E3A9D7DCD084D4F6C0C056D29A7974B2C8F14D7CADB46367CD3ABAB3D78E5EF9874C0E75FD26B968DFB42865A5602244D540B19F1260F118A1C6852097C
Malicious:	false
Reputation:	low
URL:	https://webfonts.zohowebstatic.com/nunitoregular/font.woff2
Preview:	wOF2.......................A....................?FFTM...h......^.`..n................6.$........ ........#[J...c..UT.P..V..1. .....B'.c.x%=d...T^.......X.x...........S2..J......X.....s.S..t.jI.I.u{QL...80I..}7.y.T.c...W..0..A"r....d^Hq.x.n..J[.Y2w%.i?-.6...~..\r....S..\...B..[1......#Z/eC.Fn..R.......K.^......v{."u..`w.n.\.6t+..l,.,.F.zE..s2v.....:.T........rN....LW...L..IH..........233.!B...o....?..G....g...it...\|%j...Pfb.1..N...,...?...s..c.1.$$K....\.9+333."$!Y.....r....{....SC.vX.g.n.m..T.g8......c.........U....o..(.O.i.......%VF..^.A..jC..r.......N.\|>.Q.....F!.8...f./.(...."...cY~.,...j=x.8.@wV.^..k.._. .y..2...../xP.>Z+2..8DsU.O....X...j...[.Q.b8...X..\..OH."O...E@T.l2c.M.r.#........f.....B..E..*..P....n.<?.?...-......j...Y.9..'bcQ"eSm.......V....GT.=R.1@.,..p.. !!Q..J..m$3f..m.h.U..c.~l_...^..{......,Y.l'Q...AZ"...\|..."......>.>N.....'3E:.#.p.....b.......G.Pd1e.G....R).J..0.7.i....2.,.n./..T......V.<...........,.,..{.[.WMk.LMa .=.,bK.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	4.810015648526303
Encrypted:	false
SSDEEP:	3:wn5A9inuSLCh0n87lH3+rV0x9inuSAlnn+6SDSBbPLJBRn:wn699SLu0n87lXfx99SAl+TDoPLJrn
MD5:	04C986604AF461B129AC85558CD48927
SHA1:	C69882ADB3B1BF737AF2EDE388E3F44E7D7CA520
SHA-256:	868A1CF779E6FA41CE3DC61959F55780FBF854685CCD719AD3D0B43B2C2747DE
SHA-512:	CB401C29007D99110D42100B059844E4BCEFB9445FEDC647737D25D0A38431E9B24FC45265208820D33274E46B022A9EC75CFEA3B7610F0720638B3DF7006A56
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAlCWlaGB3ErchIFDZSQkvoSBQ1nBKBqEgUNkWGVThIFDQbtu_8SBQ2UkJL6EgUNkXu91xIFDSVEyYISBQ3a7xfQEgUNri_5Ww==?alt=proto
Preview:	ClcKBw2UkJL6GgAKBw1nBKBqGgAKDQ2RYZVOGgQICRgBIAEKBw0G7bv/GgAKBw2UkJL6GgAKBw2Re73XGgAKBw0lRMmCGgAKBw3a7xfQGgAKBw2uL/lbGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 899 x 535, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22927
Entropy (8bit):	7.835592003927563
Encrypted:	false
SSDEEP:	384:MTmVADfk8sOwO5EVubbgQVMoWsTqjycfdT87R8b2wz8d33+fP4wFArm59:MTmqTsONYubbgAOucG7RmrI32Qy
MD5:	412C00F16EE8818920B6DDEFD6ED9D45
SHA1:	315484AF2133C2F9A44CF4D5DE8C5675CF9A54BC
SHA-256:	467C94A1243A6D9D7CDE3C4109096C1C07E0F2747C3313D00EA9AD06830D4EC0
SHA-512:	3FD1A6DA92923777716BC7644F22416BF69BAE2A763526A32D4DC545D1B21E3469AD8F3710D2F7E5A21316655EBED5074C54B96EC41527A8574FC317AD7E8340
Malicious:	false
Reputation:	low
URL:	https://forms.zohopublic.com/infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png
Preview:	.PNG........IHDR.............&.......gAMA....\|.Q.... cHRM...........~..............:R.......h...,iCCPICC Profile..X.yy8U...>...t..<..y...k..4.R...D)d,....P...Bi..RH..=.........<..<...^...^{X.......0.....*...P...].7. ..l....}.#....R.\|..\|.D..2 .a......../....}..}..\....7.B.....P#7...Y(.A.......y6...V..q.7B.1.x:2......}.X.@..}$R........"X.7......DG&<\|...C.......M..6....x..7....#........!.....o...[y.n..L.....[.3#.a....~..c..[..7...3d.......F..f..u2......>l.L.p..}(....c#.l.~.9..o.._..6q....lj.`$... G.-....`g...#.7:...w.W.AF6.t(1...E...@1...Aq.G...%.K...... G.(W.hW.?....M.8...#.~sC!.eh..mZd..o}...03..qF]..u.......8.....m.G}...9nqC...0..@.. ....B@p.l.,..V.) .....@...O.........'......7k.A,"_.+.z.............\h].6..y.#..Z.......^.&Xc.9..+.../.:.y( ..#.D...w.\"....=..L..-.9f...8...V~ky.'S.......5.... 6......hC.....fCs.Y....Z..M....a._n.............K..f..wf..j..........oM...MT'.........fT...uw........7.Mn....?:.U.....O....(.....q..a.;2....D.0@vd...._9..%

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 14:27:10.854862928 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 17, 2024 14:27:13.270961046 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.271011114 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.271087885 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.271259069 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.271265984 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.271310091 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.271703005 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.271717072 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.272373915 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.272384882 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.880135059 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.880490065 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.880516052 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.881622076 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.881701946 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.883140087 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.883238077 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.883347988 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.883356094 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.890413046 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.890695095 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.890707970 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.892481089 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.892544031 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.893727064 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.894366980 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.930212021 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.944724083 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:13.944736958 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:13.992866993 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.301196098 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301229954 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301237106 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301246881 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301271915 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301357985 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.301395893 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.301470995 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.417779922 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.417788982 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.417867899 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.417903900 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.417944908 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.464849949 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.478482008 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.478538036 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.478615046 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.478658915 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.478707075 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.478751898 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.478832006 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.478877068 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.478921890 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.479418993 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.479432106 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.479602098 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.479619980 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.479753017 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.479770899 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.511411905 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.536148071 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.536175966 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.536328077 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.536365986 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.536423922 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.549140930 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.549196005 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.549273968 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.549556017 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.549570084 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.550343037 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.550393105 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.550442934 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.553669930 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:14.553688049 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:14.561836958 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:14.561894894 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:14.561956882 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:14.562163115 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:14.562180042 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:14.653328896 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.653358936 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.653491020 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.653537989 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.653681040 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.678996086 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.679193974 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.679306984 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.679965973 CEST	49734	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.679994106 CEST	443	49734	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.771217108 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.771243095 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.771483898 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.771509886 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.771591902 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.888235092 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.888263941 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.888408899 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:14.888453007 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:14.888524055 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.005700111 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.005727053 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.005853891 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.005892038 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.006038904 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.046389103 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.046411991 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.046545982 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.046591997 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.046677113 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.050117970 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.050168037 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.050369024 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.050610065 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.050628901 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.127612114 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.127639055 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.127774000 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.127815008 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.127990007 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.240098953 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.240199089 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.240245104 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.240257978 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.240307093 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.241245031 CEST	49733	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:15.241266012 CEST	443	49733	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:15.328895092 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.329320908 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.329343081 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.331022978 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.331087112 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.331585884 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.331917048 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.333514929 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.333635092 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.333888054 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.333914995 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.334223032 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.334254026 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.334642887 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.334659100 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.335439920 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.335489988 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.335500956 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.335551023 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.335942984 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.336034060 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.337009907 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.337101936 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.337344885 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.337357998 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.337414980 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.337424040 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.384208918 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.384210110 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.384394884 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.396872997 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.397136927 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.397173882 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.400899887 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.400975943 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.401469946 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.401649952 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.401869059 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.401879072 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.407857895 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.408220053 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.408255100 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.409307003 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.409356117 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.410181999 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.410250902 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.410540104 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.410552025 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.427261114 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:15.427620888 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:15.427659988 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:15.428674936 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:15.428738117 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:15.430154085 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:15.430222988 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:15.443682909 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.462714911 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.478205919 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:15.478231907 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:15.521248102 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:15.659742117 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.659815073 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.659867048 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.663351059 CEST	49743	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.663399935 CEST	443	49743	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.668261051 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.668368101 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.668471098 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.668778896 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.668813944 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695717096 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695750952 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695760965 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695800066 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695801020 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.695826054 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695837021 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.695847988 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.695866108 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.695879936 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.701957941 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.701987028 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.701997042 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702023029 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702040911 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702044964 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702054024 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702068090 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702080965 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702100992 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702115059 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702115059 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702128887 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702147007 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702152014 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702169895 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.702186108 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702186108 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.702203035 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.762487888 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762556076 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762576103 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762617111 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762628078 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.762660027 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762687922 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.762706995 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.762707949 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.762707949 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.762732983 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.815428972 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.815462112 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.815500975 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.815511942 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.815550089 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.820986986 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821012974 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821047068 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821054935 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.821068048 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821080923 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821113110 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.821124077 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.821154118 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.821154118 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.821213007 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.821213007 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.880080938 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.880136967 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.880173922 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.880208969 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.880223989 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.880250931 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.888972998 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.889214993 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.889231920 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.892807961 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.892877102 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.893237114 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.893321037 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.893376112 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.893389940 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.933131933 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.933161974 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.933208942 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.933227062 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.933260918 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.933283091 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.939600945 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.939629078 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.939692974 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.939723969 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.939769030 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.941416025 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.941440105 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.941489935 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.941530943 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.941560030 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.941586018 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.947087049 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.997467041 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.997539043 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.997699022 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.997699022 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:15.997728109 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:15.997775078 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.050196886 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.050229073 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.050328970 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.050348043 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.050395012 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.058655977 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.058681965 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.058779001 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.058794022 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.058841944 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.060497999 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.060519934 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.060584068 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.060600996 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.060647011 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.126456976 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.126580954 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.126599073 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.126667023 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.126724005 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.127091885 CEST	49742	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.127110958 CEST	443	49742	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.136698008 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.136784077 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.136845112 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.137459993 CEST	49745	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.137480974 CEST	443	49745	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.158242941 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.158283949 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.158365011 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.158585072 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.158606052 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.164206028 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.164261103 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.164310932 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.164315939 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.164375067 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.165427923 CEST	49739	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.165443897 CEST	443	49739	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.177351952 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.177377939 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.177474976 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.177489996 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.177535057 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.180552006 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.180577040 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.180650949 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.180674076 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.180716038 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.217333078 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.217425108 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.217458963 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.217509985 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.218058109 CEST	49738	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.218079090 CEST	443	49738	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.297808886 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.297859907 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.297959089 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.298003912 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.298022985 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.298667908 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.414577007 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.414597988 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.414736986 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.414757967 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.414805889 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.525490046 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.526362896 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.526431084 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.526458979 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.526482105 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.526494026 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.526520014 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.534346104 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.534405947 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.534873962 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.536936998 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.537025928 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.537062883 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.583446026 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.584757090 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.626554966 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.626590014 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.626636028 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.626686096 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.626710892 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.629400015 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.654879093 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.654913902 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.654951096 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.654975891 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.654997110 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.655075073 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.772320986 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.772391081 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.772420883 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.772449017 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.772464991 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.772490025 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.783061028 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.783101082 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.783185005 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.783185005 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.783232927 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.889650106 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.889714956 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.889734983 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.889766932 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.889784098 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.889807940 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.890610933 CEST	49747	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.890695095 CEST	443	49747	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.907768011 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.907869101 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.907968998 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.908162117 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.908198118 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.909605026 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.909626961 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.909697056 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.909853935 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.909873962 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.983021975 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.983076096 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.983112097 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.983129978 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:16.983158112 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:16.983175039 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.010634899 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.010685921 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.010771990 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.010790110 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.010823011 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.010840893 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.011888981 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.012203932 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.012238026 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.013278961 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.013410091 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.013775110 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.013834953 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.013835907 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.055435896 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.068387032 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.068404913 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.118366003 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.128873110 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.128894091 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.129015923 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.129040003 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.129093885 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.172054052 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.172071934 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.172204971 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.172225952 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.172274113 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.248266935 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.248333931 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.248356104 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.248384953 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.248399019 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.248424053 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.261641026 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.261831999 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.262008905 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.262777090 CEST	49748	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.262795925 CEST	443	49748	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.364357948 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.364413977 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.364500999 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.364531040 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.364546061 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.364573956 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.366983891 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.367036104 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.367079973 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.367088079 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.367119074 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.367221117 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.367273092 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.367564917 CEST	49740	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.367580891 CEST	443	49740	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.405920982 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.405980110 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.406104088 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.406708002 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.406724930 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.407176018 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.407221079 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.407289028 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.407601118 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.407639027 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.407721043 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.407870054 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.407882929 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.408045053 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.408062935 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.408463955 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.408473015 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.408531904 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.408684969 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.408698082 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.409013033 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.409022093 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.409070015 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.409235001 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.409245014 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.409699917 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:17.409717083 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:17.410079956 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:17.410165071 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:17.410180092 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:17.541691065 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:17.541729927 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:17.541810036 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:17.543495893 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:17.543513060 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:17.756733894 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.758032084 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.758100986 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.761782885 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.761904001 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.762402058 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.762593031 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.762599945 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.766118050 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.766359091 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.766376019 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.767563105 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.767946959 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.768064976 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.768075943 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.768130064 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.804394960 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.804406881 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:17.819545984 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:17.850408077 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.005780935 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.005811930 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.005916119 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.005942106 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.005981922 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.005985975 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.006030083 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.010731936 CEST	49750	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.010746956 CEST	443	49750	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.019046068 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.019335985 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.019361973 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.019906998 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.020533085 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.020689011 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.020694971 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.020770073 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.070449114 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.133755922 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133815050 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133836985 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133877039 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133896112 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133902073 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.133913994 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.133966923 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.134006023 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.134006977 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.134006977 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.134046078 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.247793913 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.248135090 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.248171091 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.249190092 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.249252081 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.249691963 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.249754906 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.249861002 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.249870062 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.253200054 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.253230095 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.253292084 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.253362894 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.253401995 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.253423929 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.257358074 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.258651972 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.258671045 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.262484074 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.262554884 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.262975931 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.263127089 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.263133049 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.265065908 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.265104055 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.265291929 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.265319109 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.265434980 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.265445948 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.267878056 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.268120050 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.268140078 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.269085884 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.269151926 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.269215107 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.269308090 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.269454002 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.269681931 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.269859076 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.270040035 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.270247936 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.270333052 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.270498991 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.270504951 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.270522118 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.270580053 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.270626068 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.270637989 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.304251909 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.304277897 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.304306030 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.315413952 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.319645882 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.319658995 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.351314068 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.372437000 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.372461081 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.372523069 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.372553110 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.372569084 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.372622967 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.383467913 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.383538961 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.391124964 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.391136885 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.391412020 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.392409086 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392474890 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392497063 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392518044 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392535925 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.392559052 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392566919 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.392580986 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392611980 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.392616987 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.392642021 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.392668962 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.393069983 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.393131971 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.393145084 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.393205881 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.393229008 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.393280029 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.411520958 CEST	49756	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.411552906 CEST	443	49756	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.431343079 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.465409040 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.465461969 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:18.465519905 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.465559959 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.465603113 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:18.465650082 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.465852022 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.465872049 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:18.466202021 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:18.466217041 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:18.477010965 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.477041006 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.477097034 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.477478981 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:18.477494001 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:18.488338947 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.491512060 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.491534948 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.491600037 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.491682053 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.491738081 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.491738081 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.515152931 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.515182972 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.515239954 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.515280962 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.515315056 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.515368938 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.516477108 CEST	49755	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.516493082 CEST	443	49755	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.520468950 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.520497084 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.520554066 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.520884037 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.520893097 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.535404921 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.824126959 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824140072 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824184895 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824213028 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824265957 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824297905 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824352026 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824599028 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824628115 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824634075 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824666977 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824671030 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824680090 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824691057 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824708939 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.824718952 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824718952 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824738026 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.824760914 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.825834036 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825865984 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825880051 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825902939 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825922012 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825953007 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825963974 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825967073 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.825967073 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.825974941 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.825984955 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826014042 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826015949 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826054096 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826150894 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826150894 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826150894 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826150894 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826152086 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826152086 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826152086 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826185942 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826246977 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826762915 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826826096 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826869011 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826889038 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826889038 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826910019 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.826924086 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.826966047 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.827395916 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.827471018 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.827476025 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.827524900 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828258038 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828282118 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828321934 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828330040 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828358889 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828373909 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828417063 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828435898 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.828438997 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828480959 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828485966 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.828562021 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828562021 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.828577042 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.828649044 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.829377890 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829422951 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829432011 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829468012 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829503059 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.829503059 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.829510927 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829528093 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.829528093 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.829539061 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.829724073 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.829725027 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.830733061 CEST	49749	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.830769062 CEST	443	49749	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.834522963 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.834536076 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.834553957 CEST	49757	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.834559917 CEST	443	49757	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.846470118 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.846483946 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.846524000 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.846532106 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.846556902 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.846575022 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.853961945 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.853996992 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.854048014 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.854260921 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.854276896 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.860347033 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.860358953 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.860426903 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.860435009 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.860479116 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.870832920 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.870879889 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.870934963 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.870934963 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.870944023 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.870978117 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.877113104 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.877130032 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.877199888 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.877211094 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.877271891 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.888211966 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.888259888 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.888381004 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.888716936 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:18.888734102 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:18.962131023 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.962172031 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.962214947 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.962253094 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.962272882 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.962297916 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.978010893 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.978039026 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.978200912 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.978200912 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.978233099 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.978286982 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.988884926 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.988934994 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.988986015 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.988996983 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.989013910 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.989095926 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.997030973 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.997093916 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.997109890 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.997122049 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:18.997149944 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:18.997257948 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.043446064 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.043531895 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.043570042 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.043590069 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.043648005 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.043699980 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.043745995 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.044828892 CEST	49751	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.044846058 CEST	443	49751	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.051449060 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.051501989 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.051573992 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.051768064 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.051784992 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.078699112 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.078737974 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.078788042 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.078824997 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.078843117 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.078870058 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.094304085 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.094633102 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.094650030 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.095241070 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.095266104 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.095302105 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.095329046 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.095340014 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.095366955 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.095720053 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.095793962 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.096715927 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.096782923 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.096832991 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.106887102 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.106937885 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.107050896 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.107050896 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.107080936 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.107119083 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.143404961 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.148463011 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.148480892 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.193248987 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.193278074 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.193327904 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.193353891 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.193391085 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.193407059 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.196629047 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.212121010 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.212142944 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.212203026 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.212224960 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.212285042 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.212330103 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.224559069 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.224621058 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.224673033 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.224694014 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.224730015 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.224757910 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.309716940 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.309742928 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.309861898 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.309890985 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.309937000 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.327609062 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.329329014 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.329354048 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.329497099 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.329497099 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.329521894 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.334651947 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.342201948 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.342292070 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.342392921 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.342392921 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.342410088 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.342606068 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.376113892 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.376131058 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.376956940 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.380017996 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.380095005 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.390289068 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.390304089 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.390973091 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.391288996 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.391415119 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.391417027 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.396050930 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.396183014 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.396188021 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.396315098 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.425277948 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425302982 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425365925 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.425395966 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425448895 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.425719976 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425765038 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425780058 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.425786972 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425805092 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.425820112 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.425832033 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.425864935 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.426275969 CEST	49752	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.426290035 CEST	443	49752	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.439412117 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.443015099 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.443015099 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.443027973 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.443407059 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.443433046 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.443523884 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.443545103 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.443569899 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.444549084 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.451267958 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.451359034 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.451399088 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.451416016 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.451436043 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.451463938 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.465303898 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.465347052 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.465658903 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.465905905 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.465919971 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.469603062 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469633102 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469643116 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469661951 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469671011 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469675064 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469692945 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.469712019 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.469736099 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.469814062 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.470074892 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.470165014 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.470185041 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.470654964 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.471110106 CEST	49760	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:19.471121073 CEST	443	49760	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:19.498838902 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.506202936 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.506252050 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.506320000 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.506337881 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.506351948 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.506454945 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.560616016 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.560636044 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.560776949 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.560777903 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.560794115 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.561327934 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.564096928 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.564187050 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.564213991 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.564320087 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.565026999 CEST	49753	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.565042019 CEST	443	49753	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.573895931 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.575676918 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.575699091 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.576776028 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.576828957 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.577512980 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.577585936 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.577678919 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.577692986 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.580686092 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.580763102 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.580832958 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.580847979 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.580887079 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.580888033 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.632452965 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.636950016 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.636987925 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.636997938 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.637068987 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.637074947 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.637099028 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.637118101 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.639482975 CEST	49761	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.639506102 CEST	443	49761	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.691004992 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.698081970 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.698144913 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.698170900 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.698199034 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.698214054 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.698235989 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.705779076 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.705792904 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.706192970 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.707196951 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.707276106 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.707779884 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.745887041 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:19.746002913 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:19.755405903 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.763595104 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763659954 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763686895 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763722897 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763731003 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.763768911 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763797045 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.763834000 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763853073 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763871908 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763876915 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.763894081 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.763905048 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.763920069 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.813316107 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.814585924 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.814646959 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.814661026 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.814687967 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.814703941 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.814722061 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.860389948 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.860441923 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.860486984 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.860502005 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.860548973 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.878197908 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:19.878243923 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:19.879158020 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:19.881926060 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:19.883553982 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883579016 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883622885 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883661032 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883661985 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.883677006 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.883682013 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883699894 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.883711100 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.883718967 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.883737087 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.888390064 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.888518095 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.888539076 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.888571978 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.888576984 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.888602972 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.888617039 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.888631105 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.888748884 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.888878107 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.889048100 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.889058113 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.889287949 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.889307022 CEST	443	49759	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.889314890 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.889430046 CEST	49759	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.890113115 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.890176058 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.891540051 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.891643047 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.891658068 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.923423052 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:19.938765049 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.938812971 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.938935995 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.939174891 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.939189911 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.940557957 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940572023 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940583944 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940635920 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940664053 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.940694094 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940726995 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940759897 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:19.940785885 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.940785885 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.940785885 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.940821886 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:19.946125984 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.946150064 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.977943897 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.977974892 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.978012085 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.978035927 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:19.978065014 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.978080034 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:19.993747950 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.050899029 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.050961018 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.050987005 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.051003933 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.051026106 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.051044941 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.065865993 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.065895081 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.065912962 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.065948963 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.065964937 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.065992117 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.066015005 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.096731901 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.096780062 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.096807957 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.096826077 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.096868992 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.096883059 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.098731995 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.098793983 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.098819971 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.098836899 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.098867893 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.098882914 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.130443096 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:20.130517006 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:20.130695105 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:20.145066977 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:20.145066977 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 17, 2024 14:27:20.145106077 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:20.145121098 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 17, 2024 14:27:20.188205004 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.188227892 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.188304901 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.188319921 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.188358068 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.214519024 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.214576960 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.214607954 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.214621067 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.214644909 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.214663029 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.255934000 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.255959034 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.255970001 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.256026983 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.256028891 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.256077051 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.256098986 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.256135941 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.256154060 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.256154060 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.256154060 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.256185055 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.261749029 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.261806965 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.261828899 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.261846066 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.261868954 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.261885881 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.292088032 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.292146921 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.292181969 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.292203903 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.292226076 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.292252064 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.304195881 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.304233074 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.304277897 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.304291010 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.304321051 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.304332972 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.305126905 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.308980942 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.308994055 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.310132027 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.310940981 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.311095953 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.311136961 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.333760023 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.333821058 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.333848000 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.333863020 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.333887100 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.333904982 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.352828026 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.377002001 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.377028942 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.377088070 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.377125025 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.377142906 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.377474070 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.406306028 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.406363010 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.406394005 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.406410933 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.406462908 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.409784079 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.409832954 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.409876108 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.409904003 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.409919977 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.410002947 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.420133114 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.420156956 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.420206070 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.420227051 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.420260906 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.435256004 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.435328007 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.435337067 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.435353041 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.435564995 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.436286926 CEST	49758	443	192.168.2.4	18.66.102.12
Oct 17, 2024 14:27:20.436302900 CEST	443	49758	18.66.102.12	192.168.2.4
Oct 17, 2024 14:27:20.451123953 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.451174974 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.451234102 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.451248884 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.451284885 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.451297045 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.493204117 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.493232012 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.493294001 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.493330956 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.493350983 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.493376970 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.524610996 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.524679899 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.524696112 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.524713039 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.524744034 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.535686970 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.535721064 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.535805941 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.535826921 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.535866976 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.545886040 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.545977116 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.545995951 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.546046972 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.546560049 CEST	49762	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.546578884 CEST	443	49762	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.569489002 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.569515944 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.569555998 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.569567919 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.569603920 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.569613934 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.608710051 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.608737946 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.608791113 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.608814955 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.608834028 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.609049082 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.649444103 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.649501085 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.649530888 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.649550915 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.649617910 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.649801970 CEST	49764	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.649820089 CEST	443	49764	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668500900 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668567896 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668591022 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668631077 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668668032 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668678999 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.668678999 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.668678999 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.668689013 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.668700933 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.668802977 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.697628975 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.697694063 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.697717905 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.697729111 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.697776079 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.698267937 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.698312998 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.698354006 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.698360920 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.698394060 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.698394060 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.784812927 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.784884930 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.784941912 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.784956932 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.784981012 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.785023928 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.791913033 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.792278051 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.792287111 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.792670012 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.793220043 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.793253899 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.793281078 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.806663990 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.806783915 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.806911945 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.807018042 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.807595968 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.807621002 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.807658911 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.807672024 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.807717085 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.807717085 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.841044903 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.900523901 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.900577068 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.900643110 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.900652885 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:20.900716066 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:20.900762081 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200166941 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200177908 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200225115 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200269938 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200287104 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200298071 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200336933 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200681925 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200717926 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200759888 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200767040 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.200803995 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.200803995 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.202030897 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.202045918 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.202094078 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.202100039 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.202163935 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.202163935 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.203708887 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.203726053 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.203845978 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.203852892 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.203895092 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.203911066 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.203922987 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.203972101 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.203994036 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.204030037 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.204071045 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.204083920 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.204720974 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.204746008 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.204794884 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.204801083 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.204843044 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.204843044 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.205894947 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.205909967 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.205991983 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.205997944 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.206085920 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.207263947 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.207277060 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.207406998 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.207415104 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.207669020 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.209000111 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.209017038 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.209105968 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.209112883 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.209295034 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.210618973 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210635900 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210643053 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210660934 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210702896 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.210709095 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210712910 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.210736990 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.210761070 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.256798029 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.256870985 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.256907940 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.256921053 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.256942987 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.256969929 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.276988029 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.277009964 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.277072906 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.277080059 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.277164936 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.277164936 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.281673908 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.281696081 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.281804085 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.281804085 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.281810045 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.281945944 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.282707930 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.282728910 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.282833099 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.282833099 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.282840014 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.282910109 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.374795914 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.374819040 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.374882936 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.374895096 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.374943018 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.374943018 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.398128033 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.398154020 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.398288012 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.398303986 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.398364067 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.400161028 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400176048 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400309086 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.400316000 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400448084 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.400619984 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400641918 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400676012 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.400681973 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.400743961 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.400743961 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.447691917 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.447779894 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.447841883 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.447876930 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.447889090 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.448153973 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.492970943 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.493012905 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.493069887 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.493082047 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.493115902 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.493115902 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.517436028 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.517461061 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.517539978 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.517548084 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.517620087 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.517620087 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.518615007 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.518632889 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.518819094 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.518825054 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.519335985 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.519356966 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.519431114 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.519438982 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.519484043 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.519484043 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.597696066 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.597759962 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.597810030 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.597821951 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.598182917 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.598182917 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.630723953 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.630774021 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.630815983 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.630825043 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.630933046 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.631022930 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.635427952 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.635457039 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.635545015 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.635550976 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.635590076 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.635590076 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.636288881 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.636311054 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.636399984 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.636399984 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.636406898 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.636483908 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.638331890 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.638355017 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.638448000 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.638454914 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.638469934 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.638587952 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.679029942 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.679116964 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.679220915 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.679220915 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.679235935 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.679279089 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.679403067 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.748851061 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.748883009 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.748990059 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.748990059 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.748999119 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.749083996 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.753263950 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.753285885 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.753423929 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.753429890 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.754575968 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.754601955 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.754657984 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.754657984 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.754666090 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.754754066 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.757472038 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.757500887 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.757565975 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.757571936 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.757586002 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.757612944 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.866796970 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.866823912 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.866919994 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.866934061 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.866942883 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.870672941 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.871557951 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.871588945 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.871627092 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.871633053 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.871670008 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.871670008 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.872129917 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.872150898 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.872188091 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.872194052 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.872236013 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.872236013 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.876606941 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.876621008 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.876744986 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.876744986 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.876753092 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.876846075 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.897231102 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.900671005 CEST	49765	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.900706053 CEST	443	49765	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.964610100 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.964634895 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.964786053 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.964797974 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.964857101 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.989233017 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.989259958 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.989317894 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.989330053 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.989375114 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.989375114 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.989988089 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.990005016 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.990063906 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.990073919 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.990232944 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.997385979 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.997406960 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.997492075 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.997492075 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:21.997500896 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:21.997570038 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.080383062 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.080403090 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.080472946 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.080491066 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.080527067 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.080604076 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.337892056 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.337910891 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.337975025 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.338011026 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.338028908 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.338093042 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.338661909 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.338676929 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.338721991 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.338731050 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.338810921 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.339740992 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.339756966 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.339891911 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.339899063 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.339960098 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.339967966 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340003014 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340075970 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340075970 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340078115 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340087891 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340162992 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340167999 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340207100 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340265989 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340732098 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340748072 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340796947 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340804100 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.340842009 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.340842009 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.341468096 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.341511965 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.341532946 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.341541052 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.341553926 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.341574907 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.341600895 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.344619036 CEST	49754	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.344635010 CEST	443	49754	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.473941088 CEST	49766	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.473980904 CEST	443	49766	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.551644087 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.551716089 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.551794052 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.552062035 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.552088022 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.577164888 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.577199936 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:22.577253103 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.577461004 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:22.577476025 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.399022102 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.401165009 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.401190042 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.401567936 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.406250954 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.406369925 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.406815052 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.430253983 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.451402903 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.476133108 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.532255888 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.532279015 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.533714056 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.534569979 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.534753084 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.534790993 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.579401016 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.585052967 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.774220943 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.774240971 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.774257898 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.774331093 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.774331093 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.774353981 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.774399042 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.791846037 CEST	49768	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.791867018 CEST	443	49768	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793370008 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793432951 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793454885 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793488979 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.793489933 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793512106 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.793519974 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793534994 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.793567896 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793602943 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793623924 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.793637037 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.793657064 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.808201075 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.808235884 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.808382988 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.808648109 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.808664083 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.835066080 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.903012991 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903036118 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903075933 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903084993 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.903095961 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903120995 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.903150082 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:23.903167009 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903183937 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:23.903218031 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.024229050 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.024271965 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.024316072 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.024317026 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.024391890 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.024391890 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.024404049 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.024447918 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.026180983 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.026226997 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.026249886 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.026257992 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.026299000 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.026310921 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.146809101 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.146858931 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.146914959 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.146939039 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.146966934 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.146982908 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.148159981 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.148205042 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.148257971 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.148273945 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.148293972 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.148313999 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.163291931 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.163333893 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.163422108 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.163448095 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.163460970 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.166666031 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.266520977 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.266582966 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.266644001 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.266663074 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.266676903 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.266705036 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.276005983 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.276056051 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.276103973 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.276113987 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.276150942 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.276165962 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.289067984 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.383498907 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.383533001 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.383598089 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.383615971 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.383646011 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.383665085 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.389378071 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.389405966 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.389504910 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.389514923 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.389560938 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.500591040 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.500622988 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.500679016 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.500694990 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.500732899 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.500752926 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.502978086 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.506604910 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.506625891 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.506675959 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.506699085 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.506725073 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.506740093 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.619075060 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.619106054 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.619154930 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.619184971 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.619208097 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.619225979 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.625387907 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.625411987 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.625463009 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.625484943 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.625503063 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.625528097 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.630518913 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.630541086 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.630580902 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.630604029 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.630625010 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.630655050 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.665726900 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.666299105 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.666323900 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.667599916 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.667942047 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.668123007 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.668458939 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.715409040 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.737407923 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.737445116 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.737498999 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.737533092 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.737550974 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.737590075 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.744551897 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.744579077 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.744621038 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.744647980 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.744668961 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.744697094 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.752043962 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.752073050 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.752120972 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.752149105 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.752168894 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.752191067 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.855470896 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.855504036 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.855550051 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.855585098 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.855607033 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.855627060 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.859359980 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 17, 2024 14:27:24.859462976 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 17, 2024 14:27:24.862742901 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.862770081 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.862801075 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.862842083 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.862852097 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.862893105 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.911353111 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.911381006 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.911441088 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.911468029 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.911488056 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.911509037 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.978668928 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.978698015 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.978749990 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.978774071 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.978791952 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.978809118 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.980495930 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.980520010 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.980575085 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:24.980597019 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:24.980634928 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.024430990 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.024497986 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.024543047 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.024571896 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.024601936 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.024624109 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.024652004 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.024710894 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.024768114 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.026845932 CEST	49771	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.026866913 CEST	443	49771	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.069257021 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.069283962 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.069324017 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.069348097 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.069365978 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.069391966 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.096318960 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.096345901 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.096394062 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.096415043 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.096431971 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.097836018 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.097862959 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.097882986 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.097889900 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.097903967 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.097960949 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.187359095 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.187397957 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.187444925 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.187469959 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.187488079 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.187520027 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.213764906 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.213792086 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.213845015 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.213852882 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.213910103 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.215102911 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.215126991 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.215189934 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.215197086 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.215240955 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.264789104 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.264816046 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.264882088 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.264914036 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.264933109 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.264957905 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.325742960 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.325773001 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.325820923 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.325865030 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.325874090 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.326675892 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.330822945 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.333033085 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.333060980 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.333110094 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.333117962 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.333146095 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.333173037 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.340364933 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.340388060 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.340425968 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.340435028 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.340466022 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.340476036 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.386667013 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.416295052 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:25.416440010 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:25.416528940 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:25.442811012 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.442838907 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.442904949 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.442938089 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.442961931 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.442990065 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.447004080 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:27:25.447046041 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 17, 2024 14:27:25.449631929 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.449656963 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.449755907 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.449800014 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.449918032 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.454999924 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.455023050 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.455068111 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.455096960 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.455120087 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.455395937 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.500164986 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.500200987 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.500261068 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.500298023 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.500327110 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.500376940 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.560863972 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.560900927 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.560950041 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.560985088 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.561005116 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.561256886 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.568139076 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.568167925 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.568285942 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.568285942 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.568311930 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.568420887 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.575647116 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.575674057 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.575722933 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.575743914 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.575762987 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.576272011 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.657840967 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.657872915 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.657926083 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.657968044 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.657987118 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.658013105 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.686939955 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.686969995 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.687014103 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.687052965 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.687069893 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.687088966 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.687890053 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.687913895 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.687949896 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.687954903 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.687984943 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.688003063 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.734657049 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.734688044 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.734743118 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.734777927 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.734795094 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.734822989 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.775104046 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.775135994 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.775183916 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.775214911 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.775239944 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.775260925 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.804577112 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.804613113 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.804668903 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.804702997 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.804723024 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.804766893 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.805377960 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.805402994 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.805442095 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.805449009 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.805496931 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.805496931 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.852096081 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.852169991 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.852206945 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.852241039 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.852261066 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.852291107 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.893019915 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.893059969 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.893117905 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.893151999 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.893172979 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.893218040 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.924483061 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.924546957 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.924592018 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.924602032 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.924674988 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.924998045 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.925044060 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.925082922 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.925088882 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:25.925118923 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:25.925148010 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172019005 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172082901 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172127962 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172163010 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172195911 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172228098 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172588110 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172633886 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172669888 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172677994 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.172722101 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.172755003 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.173567057 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.173587084 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.173661947 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.173672915 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.173741102 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.174309969 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.174330950 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.174380064 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.174388885 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.174449921 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.175144911 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.175164938 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.175229073 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.175239086 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.175292015 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.176318884 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.176337957 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.176392078 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.176400900 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.176446915 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.176975965 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177002907 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177067995 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.177076101 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177129984 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.177670002 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177758932 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177762032 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.177779913 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177795887 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:26.177819967 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.177876949 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.178082943 CEST	49770	443	192.168.2.4	89.36.170.147
Oct 17, 2024 14:27:26.178102016 CEST	443	49770	89.36.170.147	192.168.2.4
Oct 17, 2024 14:27:27.569818974 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 17, 2024 14:27:27.575148106 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 17, 2024 14:27:27.575406075 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 17, 2024 14:27:32.300620079 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.300652027 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.300760984 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.301635027 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.301649094 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.907807112 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.913366079 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.913374901 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.913815975 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.924109936 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.924210072 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:32.927542925 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:32.975431919 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:33.380261898 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:33.380361080 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:33.380430937 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:33.382266045 CEST	49779	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:33.382287025 CEST	443	49779	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:33.386193991 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:33.386250019 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:33.386349916 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:33.386885881 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:33.386902094 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.003283978 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.003583908 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.003604889 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.003933907 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.004276991 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.004338980 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.004605055 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.051405907 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.240669966 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.240760088 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.240968943 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.241543055 CEST	49780	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.241560936 CEST	443	49780	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.243017912 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.243043900 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.243129015 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.243346930 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.243359089 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.839395046 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.839940071 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.839956999 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.840306997 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.840892076 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.840960979 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:34.841362953 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:34.883440018 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.255335093 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.255414963 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.255459070 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.255490065 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.255516052 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.255530119 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.255562067 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.370589018 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.370683908 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.370697021 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.370716095 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.370735884 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.370755911 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.489089966 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.489166021 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.489240885 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.489259005 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.489273071 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.492748976 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.604377985 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.604399920 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.604454041 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.604480982 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.604500055 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.604526997 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.720004082 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.720029116 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.720077038 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.720099926 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.720123053 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.720144987 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.838691950 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.838715076 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.838771105 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.838793039 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.838823080 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.838831902 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.954062939 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.954092026 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.954155922 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.954180002 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.954255104 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.995481968 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.995508909 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.995562077 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.995596886 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:35.995613098 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:35.995654106 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.069556952 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.069583893 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.069638014 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.069652081 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.069688082 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.181955099 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.181982040 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.182038069 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.182053089 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.182163000 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.297095060 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.297117949 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.297194004 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.297215939 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.297316074 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.382525921 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.382545948 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.382594109 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.382606983 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.382641077 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.382656097 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.415256977 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.415275097 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.415324926 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.415335894 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.415369034 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.415395021 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.532547951 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.532572985 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.532672882 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.532695055 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.532769918 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.644041061 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.644068003 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.644118071 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.644130945 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.644162893 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.644181967 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.687861919 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.687887907 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.687938929 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.687949896 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.687975883 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.687994957 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.763124943 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.763144970 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.763219118 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.763231993 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.763267040 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.763283014 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.874983072 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.875010014 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.875068903 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.875086069 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.875112057 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.875122070 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.879647017 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.879697084 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.879724979 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.879729986 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.879766941 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.879834890 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.990324974 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.990350962 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.990417957 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.990430117 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:36.990451097 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:36.990475893 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.034584045 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.034610033 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.034673929 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.034688950 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.034713984 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.034728050 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.109666109 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.109702110 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.109762907 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.109790087 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.109807968 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.109833002 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.150789976 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.150814056 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.150859118 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.150868893 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.150906086 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.150923014 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.225248098 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.225270033 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.225357056 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.225413084 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.225696087 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.266098022 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.266119957 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.266182899 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.266200066 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.266216040 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.266233921 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.340812922 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.340835094 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.340888977 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.340926886 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.340945959 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.340982914 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.381388903 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.381409883 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.381483078 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.381504059 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.381515980 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.384799957 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.456336975 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.456357002 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.456423998 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.456442118 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.456470966 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.456487894 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.496319056 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.496336937 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.496407032 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.496421099 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.496464014 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.571154118 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.571191072 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.571264982 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.571321011 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.571358919 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.572057009 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.611701012 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.611762047 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.611790895 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.611802101 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.611828089 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.611849070 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.682178974 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.682203054 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.682250977 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.682276964 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.682295084 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.682456970 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.687582970 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.687601089 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.687659979 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.687675953 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.687721014 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.727706909 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.727725983 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.727775097 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.727786064 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.727814913 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.727833033 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.802755117 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.802781105 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.802875996 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.802910089 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.803003073 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.842173100 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.842204094 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.842315912 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.842384100 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.846081972 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.913527012 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.913549900 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.913683891 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.913697958 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.914721012 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.918750048 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.918766022 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.918824911 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.918836117 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.921065092 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.957926035 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.957953930 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.958081007 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:37.958117962 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:37.959536076 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.032974958 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.032995939 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.033085108 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.033101082 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.036865950 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.073106050 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.073138952 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.073225021 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.073240042 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.074038982 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.074060917 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.074115992 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.074124098 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.074158907 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.074173927 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.093312025 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.156250000 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.156279087 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.156331062 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.156343937 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.156373978 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.156387091 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.191936016 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.191956043 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.192023993 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.192050934 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.192290068 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.192589998 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.192606926 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.192658901 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.192665100 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.192681074 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.192703009 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.347707033 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.347733974 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.347786903 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.347817898 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.347847939 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.347862005 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.348740101 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.348761082 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.348795891 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.348803043 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.348834991 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.348858118 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.350013971 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.350033998 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.350080967 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.350090027 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.350122929 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.636789083 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.636814117 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.636868954 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.636940002 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.636979103 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.637005091 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.637486935 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.637506008 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.637538910 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.637552977 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.637582064 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.637610912 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.638220072 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.638238907 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.638264894 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.638303995 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.638310909 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.638350010 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.639220953 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.639240980 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.639280081 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.639285088 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.639312983 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.639322996 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.642414093 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.642435074 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.642492056 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.642507076 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.642522097 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.642548084 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.643282890 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.643301964 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.643337965 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.643348932 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.643371105 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.643394947 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.644408941 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.644429922 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.644470930 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.644480944 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.644496918 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.644519091 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.651295900 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.651318073 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.651361942 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.651374102 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.651396036 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.651421070 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.652156115 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.652174950 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.652216911 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.652223110 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.652235985 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.652268887 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.694940090 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.694962978 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.695008039 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.695018053 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.695041895 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.695063114 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.740477085 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.766477108 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.766499043 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.766554117 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.766571999 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.766613007 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.767059088 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.767076969 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.767126083 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.767133951 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.767172098 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.809993029 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.810017109 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.810077906 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.810092926 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.810123920 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.810139894 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.810967922 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.810986042 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.811031103 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.811048031 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.811063051 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.811079979 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.881886005 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.881907940 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.882029057 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.882029057 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.882046938 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.882208109 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.882616043 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.882637978 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.882687092 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.882694006 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.882707119 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.882740021 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.925678968 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.925704956 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.925812006 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.925812006 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.925825119 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.925864935 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.926506996 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.926527977 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.926562071 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.926568031 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:38.926595926 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:38.926610947 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.000624895 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.000657082 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.000710964 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.000722885 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.000768900 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.000780106 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.001641035 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.001657963 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.001719952 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.001729965 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.001765966 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.043427944 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.043447971 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.043559074 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.043559074 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.043571949 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.043622017 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.068984985 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.069005966 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.069071054 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.069106102 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.069152117 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.116162062 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.116183043 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.116233110 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.116245985 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.116282940 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.116282940 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.132078886 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.132098913 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.132155895 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.132164001 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.132193089 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.132251978 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.156708956 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.156727076 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.156769037 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.156776905 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.156790018 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.156816959 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.157445908 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.157460928 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.157504082 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.157510996 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.157532930 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.157551050 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.185245037 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.185269117 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.185305119 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.185312033 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.185342073 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.185352087 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.233530998 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.233552933 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.233599901 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.233608007 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.233638048 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.233649015 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.234111071 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.234153986 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.234180927 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.234189034 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.234200001 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:39.234215975 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.234251976 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.234323025 CEST	49783	443	192.168.2.4	136.143.182.97
Oct 17, 2024 14:27:39.234335899 CEST	443	49783	136.143.182.97	192.168.2.4
Oct 17, 2024 14:27:43.395014048 CEST	80	49724	217.20.57.34	192.168.2.4
Oct 17, 2024 14:27:43.395136118 CEST	49724	80	192.168.2.4	217.20.57.34
Oct 17, 2024 14:27:43.395212889 CEST	49724	80	192.168.2.4	217.20.57.34
Oct 17, 2024 14:27:43.400254965 CEST	80	49724	217.20.57.34	192.168.2.4
Oct 17, 2024 14:28:03.772762060 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:03.772795916 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:03.772980928 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:03.773233891 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:03.773252010 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.516125917 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.516398907 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.520395041 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.520409107 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.520662069 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.528983116 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.575402975 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.774477005 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.774507999 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.774523973 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.774607897 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.774607897 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.774645090 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.774708986 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.892071009 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.892095089 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.892175913 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.892190933 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:04.892203093 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:04.892249107 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.011430025 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.011487007 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.011538982 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.011538982 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.011575937 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.011630058 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.145864964 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.145931959 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.145984888 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.146003962 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.146038055 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.146053076 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.250792980 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.250817060 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.250883102 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.250891924 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.250935078 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.250935078 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.368561029 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.368586063 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.368635893 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.368645906 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.368678093 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.368694067 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.485059023 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.485086918 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.485135078 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.485152960 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.485179901 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.485208035 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.602643967 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.602679968 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.602741003 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.602754116 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.602766991 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.602809906 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.605686903 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.605715036 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.605792046 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.605798960 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.605818033 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.605853081 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.722147942 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.722170115 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.722270012 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.722270012 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.722296953 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.722383976 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.840301991 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.840327978 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.840409040 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.840456963 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.840634108 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.963449001 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.963469028 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.963597059 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:05.963624954 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:05.963855982 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.005621910 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.005640984 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.005713940 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.005727053 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.005775928 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.087323904 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.087397099 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.087410927 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.087428093 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.087466002 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.087512970 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.088470936 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.088488102 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.163810015 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.163846970 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.163914919 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.168207884 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.168256044 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.168354988 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.169965982 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.170011044 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.170231104 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.172055960 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.172089100 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.172188997 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.172877073 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.172885895 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.172998905 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173182964 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173196077 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.173346043 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173352003 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.173384905 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173398018 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.173825026 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173854113 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.173892021 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.173921108 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.903898001 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.904472113 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.904505014 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.905288935 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.905297041 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.907572985 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.907984018 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.908003092 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.908756971 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.908762932 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.915565014 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.915966988 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.915982008 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.916445971 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.916450977 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.922377110 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.922725916 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.922756910 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.923135042 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.923140049 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.936218023 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.936614037 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.936641932 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:06.937360048 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:06.937366009 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034440041 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034499884 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034565926 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.034593105 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034635067 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.034640074 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034686089 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.034857988 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.034876108 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.034888029 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.034895897 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038053989 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038163900 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038279057 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.038434029 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.038450956 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038463116 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.038469076 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038651943 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.038686037 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.038739920 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.039012909 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.039027929 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.041393042 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.041420937 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.041538954 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.041644096 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.041656971 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.045977116 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.046113968 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.046164989 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.046202898 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.046211004 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.046219110 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.046224117 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.048387051 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.048415899 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.048619986 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.048810005 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.048823118 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.053853035 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.053908110 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.053956985 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.053972006 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.054081917 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.054151058 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.054189920 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.054199934 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.054209948 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.054218054 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.056623936 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.056633949 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.056749105 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.056952000 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.056962013 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.066900015 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.066926956 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.066971064 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.066976070 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.067028999 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.067219973 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.067234039 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.067249060 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.067254066 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.069786072 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.069817066 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.069880962 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.070105076 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.070118904 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.796297073 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.796300888 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.796508074 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.796819925 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.796843052 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.796928883 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.796942949 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.797435999 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.797441959 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.797565937 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.797585964 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.797900915 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.797924995 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.798311949 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.798317909 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.820177078 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.820782900 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.822675943 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.822695971 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.823335886 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.823340893 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.824034929 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.824043036 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.824621916 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.824625969 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928275108 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928385019 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928586006 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928659916 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.928688049 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.928705931 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928718090 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928719044 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.928725958 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928821087 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.928914070 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.928968906 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.928980112 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.929003954 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.929009914 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.929265976 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.929337025 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.930448055 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.930469990 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.930485964 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.930493116 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.932343006 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932372093 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.932482958 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932660103 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932694912 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.932765961 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932826042 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932838917 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.932935953 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.932949066 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.933316946 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.933325052 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.933381081 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.933495045 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.933504105 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.953049898 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.953227997 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.953289032 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.953361034 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.953370094 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.953387976 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.953392029 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.954513073 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.954628944 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.954793930 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.955071926 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.955084085 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.955142975 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.955148935 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.956166983 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.956199884 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.956275940 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.956568003 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.956582069 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.957171917 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.957206964 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:07.957259893 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.957382917 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:07.957395077 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.663216114 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.663836956 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.663850069 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.664654016 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.664659977 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.665679932 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.666076899 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.666090012 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.666490078 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.666493893 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.686549902 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.687033892 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.687047005 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.687412024 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.687417984 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.694626093 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.695225954 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.695245028 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.695497990 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.695502996 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.709817886 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.710263014 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.710295916 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.710743904 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.710747957 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.793894053 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.793962955 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.794096947 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.794337988 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.794357061 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.797132969 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.797195911 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.797283888 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.797981977 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.797986984 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.797997952 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.798002958 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.802875996 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.802907944 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.802989960 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.804208994 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.804224968 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.807210922 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.807219982 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.807301998 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.807677984 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.807688951 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.820163965 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.820367098 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.820455074 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.820640087 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.820640087 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.820662022 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.820668936 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.824332952 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.824363947 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.824444056 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.824794054 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.824806929 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.827020884 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.827174902 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.827234983 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.827615023 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.827620983 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.827678919 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.827685118 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.832139969 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.832222939 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.832350016 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.832743883 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.832777023 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.848218918 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.848368883 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.848424911 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.848675013 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.848686934 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.848697901 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.848702908 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.879590988 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.879633904 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:08.879904985 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.880342960 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:08.880359888 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.557019949 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.570390940 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.578457117 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.587531090 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.601262093 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.604559898 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.604568958 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.605988979 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.605994940 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.606769085 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.606782913 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.607812881 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.607817888 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.608365059 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.608411074 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.609102011 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.609114885 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.622688055 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.622704029 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.623414993 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.623425961 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.736979961 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.737205982 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.737440109 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.737488985 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.737507105 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.737518072 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.737524033 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.738156080 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.738255978 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.738367081 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.738508940 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.738532066 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.738544941 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.738550901 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.740502119 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.740533113 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.740607977 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.740770102 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.740786076 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.741063118 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.741090059 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.741319895 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.741461039 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.741487026 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.748574972 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.748680115 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.748828888 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.748874903 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.748894930 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.748908997 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.748915911 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.751102924 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.751132011 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.751306057 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.751462936 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.751472950 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.795826912 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.795953989 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.796021938 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.796185970 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.796207905 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.796219110 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.796225071 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.799036026 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.799086094 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:09.799173117 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.799299955 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:09.799315929 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.504105091 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.504844904 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.504859924 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.505620956 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.505626917 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.508019924 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.508460999 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.508481026 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.509768009 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.509780884 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.536344051 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.537024021 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.537035942 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.538001060 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.538006067 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.640594006 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.640702009 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.640851021 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.641223907 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.641247034 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.641263962 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.641268969 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.645612001 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.645680904 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.645761013 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.647902966 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.647917986 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.651180029 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.651226997 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.651329994 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.652717113 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.652734995 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.654998064 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.655025959 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.655369043 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.655642986 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.655654907 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.656153917 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.657063961 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.657080889 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.658574104 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.658581972 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.915806055 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.915879965 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.915946007 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.931572914 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.931613922 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.931688070 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.957693100 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.957700014 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.959242105 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.959264040 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.963037014 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.963049889 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.963110924 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.963591099 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.963603973 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.964780092 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.964791059 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:10.964858055 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.965186119 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:10.965200901 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.417464018 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.417942047 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.417959929 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.418118954 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.418689013 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.418694019 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.418711901 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.418725967 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.419147968 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.419152975 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.558248043 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.558319092 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.558374882 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.558532000 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.558552980 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.558562994 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.558584929 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.558686018 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.559076071 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.559120893 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.559163094 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.559181929 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.559192896 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.559199095 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.561619997 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.561652899 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.561940908 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.561944962 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.561992884 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.562004089 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.562010050 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.562058926 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.562243938 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.562271118 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.616405964 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.617183924 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.617204905 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.617897987 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.617902994 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.725789070 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.726466894 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.726476908 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.727082968 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.727087975 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.730901957 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.731319904 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.731333971 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.731873989 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.731878996 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.749896049 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.749989986 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.750061989 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.750214100 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.750230074 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.750248909 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.750256062 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.753170967 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.753210068 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.753350019 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.753542900 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.753556013 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.861548901 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.861613989 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.861664057 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.861882925 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.861902952 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.861912966 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.861918926 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.866005898 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.866147041 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.866199970 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.866694927 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.866724014 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.867039919 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.867325068 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.867331982 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.867362976 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.867367983 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.869558096 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.869570017 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.872327089 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.872369051 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:11.872565031 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.872843027 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:11.872859001 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.313730001 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.320607901 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.320632935 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.322084904 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.322098970 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.331700087 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.332492113 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.332500935 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.333328009 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.333333015 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.457196951 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.457488060 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.457545996 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.457720041 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.457751036 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.457766056 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.457777023 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.462821960 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.462872982 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.462941885 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.463148117 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.463165045 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.467907906 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.468044043 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.468122959 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.468300104 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.468321085 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.472634077 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.472659111 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.472724915 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.472928047 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.472938061 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.522618055 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.523233891 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.523261070 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.524069071 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.524086952 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.626266003 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.627291918 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.627315998 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.627888918 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.627893925 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.644893885 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.645433903 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.645471096 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.646116972 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.646122932 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.659810066 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.659883976 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.660028934 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.673010111 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.673055887 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.673085928 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.673103094 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.679188013 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.679219007 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.679280996 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.679668903 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.679681063 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.758774042 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.758833885 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.758898973 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.759188890 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.759202957 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.759212017 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.759217978 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.762758017 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.762808084 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.762882948 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.763293982 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.763309002 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.775571108 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.775892973 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.775962114 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.776093960 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.776109934 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.776135921 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.776143074 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.780057907 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.780102015 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:12.780245066 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.780374050 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:12.780391932 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.243031979 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.243580103 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.243598938 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.244066954 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.244076967 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.244167089 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.244529963 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.244556904 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.244852066 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.244858980 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.375893116 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.376091957 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.376424074 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.376492977 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.376524925 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.376537085 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.376545906 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.376552105 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.376959085 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.377008915 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.378060102 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.378076077 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.378086090 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.378092051 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.381999016 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.382019997 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.382389069 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.383166075 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.383173943 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.383233070 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.383332014 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.383341074 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.383474112 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.383483887 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.452310085 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.452958107 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.452972889 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.453690052 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.453696966 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.529616117 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.530133009 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.530154943 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.530575991 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.530582905 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.554474115 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.555018902 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.555032015 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.555573940 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.555577993 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.587560892 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.587920904 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.587985039 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.588036060 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.588052988 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.588063955 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.588069916 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.591187954 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.591227055 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.591443062 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.591612101 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.591625929 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.661679029 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.661735058 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.661953926 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.662003040 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.662014008 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.662035942 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.662041903 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.665249109 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.665287018 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.665371895 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.665568113 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.665585041 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.688070059 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.688158989 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.688245058 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.688647985 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.688663960 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.688673019 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.688678026 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.691775084 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.691823959 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:13.691895008 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.692037106 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:13.692054987 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.300798893 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.301330090 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.301362991 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.301796913 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.301801920 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.303606033 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.303936958 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.303942919 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.304523945 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.304527998 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.336268902 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.336678982 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.336703062 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.337225914 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.337232113 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.394849062 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.395448923 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.395467997 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.395916939 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.395924091 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.435368061 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.435564995 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.435843945 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.435844898 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.435844898 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.438493967 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.438534975 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.438747883 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.438955069 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.438966036 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.440062046 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.440356016 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.440418959 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.440468073 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.440490007 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.440504074 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.440510035 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.443173885 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.443223953 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.443291903 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.443465948 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.443486929 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.447017908 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.447415113 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.447432041 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.447901011 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.447910070 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.469862938 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.469935894 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.470143080 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.470180988 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.470201969 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.470212936 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.470218897 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.473004103 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.473031998 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.473237038 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.473328114 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.473335028 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.524432898 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.524578094 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.524642944 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.524760008 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.524792910 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.524808884 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.524818897 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.527677059 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.527745008 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.527841091 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.528047085 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.528078079 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.578865051 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.579135895 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.579519033 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.579555988 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.579576015 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.579590082 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.579597950 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.582555056 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.582593918 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.582653999 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.582827091 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.582851887 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:14.602660894 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:14.602699041 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:14.602771997 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:14.603027105 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:14.603039980 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:14.741934061 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:14.741975069 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.184829950 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.185302973 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.185333967 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.185781002 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.185787916 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.222872972 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.223473072 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.223505020 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.223944902 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.223951101 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.238358974 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.238894939 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.238909006 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.239434958 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.239440918 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.329842091 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.330559015 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.330616951 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.330672026 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.330672979 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.330699921 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.330713987 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.333760977 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.333797932 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.333865881 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.334043026 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.334055901 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.338978052 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.339498997 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.339519978 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.340097904 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.340105057 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.340349913 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.340717077 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.340728998 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.341234922 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.341240883 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.354626894 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.355051994 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.355114937 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.355159998 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.355159998 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.355181932 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.355191946 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.357793093 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.357848883 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.357913971 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.358133078 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.358150959 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.393604994 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.393846035 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.393903017 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.393970013 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.393970013 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.393990993 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.394004107 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.396431923 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.396476984 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.396750927 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.396934986 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.396950006 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.473499060 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.473695040 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.473766088 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.473815918 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.473845005 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.473861933 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.473870039 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.476862907 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.476953983 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.477020979 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477086067 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477128983 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.477191925 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477313042 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477335930 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.477349043 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477358103 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.477545977 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.477557898 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.480469942 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.480520964 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.480587006 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.480745077 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:15.480758905 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:15.754709959 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:15.755146980 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:15.755161047 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:15.755604982 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:15.756865025 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:15.756963015 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:15.804486990 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:16.061244965 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.061728001 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.061737061 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.062211037 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.062216043 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.106497049 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.112153053 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.112174034 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.112725973 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.112740040 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.148854971 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.149414062 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.149422884 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.150044918 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.150049925 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.195339918 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.195622921 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.195693970 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.195730925 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.195746899 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.195770025 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.195775986 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.198546886 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.198590994 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.198663950 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.198863029 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.198874950 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.217643023 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.218244076 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.218267918 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.218817949 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.218823910 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.221216917 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.221580029 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.221602917 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.222060919 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.222068071 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.240756035 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.241056919 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.241170883 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.241172075 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.241230965 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.241250992 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.244137049 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.244177103 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.244277954 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.244447947 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.244463921 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.283010960 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.283665895 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.283756971 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.283756971 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.283823967 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.283842087 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.287336111 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.287369013 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.287426949 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.287590027 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.287602901 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.348699093 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.348902941 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.348968029 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.349123001 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.349143028 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.349154949 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.349162102 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.352818012 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.352859974 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.353024006 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.353040934 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.353123903 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.353177071 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.353276014 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.353276968 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.353292942 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.353302002 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.353379965 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.353393078 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.355897903 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.355948925 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.356056929 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.356260061 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.356273890 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.938543081 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.941950083 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.941977024 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.943341017 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.943348885 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.994734049 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.995930910 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.995970011 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:16.996752977 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:16.996761084 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.036052942 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.037394047 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.037431955 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.038079977 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.038089991 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.070758104 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.071564913 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.071822882 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.072801113 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.072829008 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.078128099 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.078171015 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.078224897 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.078427076 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.078438997 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.093556881 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.094424963 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.094443083 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.095319033 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.095324993 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.125940084 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.129431009 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.129456043 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.130157948 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.130165100 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.138957977 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.139027119 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.139147043 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.146260977 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.146286011 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.146298885 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.146305084 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.157660007 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.157710075 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.157777071 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.157991886 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.158001900 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.168024063 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.168107033 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.168165922 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.168380976 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.168401003 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.168411970 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.168418884 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.173105955 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.173146963 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.173289061 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.173497915 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.173513889 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.223969936 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.224212885 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.224281073 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.224534988 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.224551916 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.224562883 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.224570036 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.230114937 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.230160952 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.230240107 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.230395079 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.230406046 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.258780956 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.259730101 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.259804010 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.259848118 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.259871006 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.259887934 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.259893894 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.262836933 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.262882948 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:17.262953043 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.263237000 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:17.263250113 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.809983969 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.811100960 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.811129093 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.812091112 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.812113047 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.937494993 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.938308001 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.938334942 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.938719034 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.939304113 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.939317942 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.939723015 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.940545082 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.940561056 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.941127062 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.941132069 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.941384077 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.941400051 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.941941977 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.941950083 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.942284107 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.942734003 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.942754030 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.943667889 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.943672895 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.977586031 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.978805065 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.978873968 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.979105949 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.979120970 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.979141951 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.979147911 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.983479977 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.983525038 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:18.983645916 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.983892918 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:18.983906984 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.070601940 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.070602894 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.070677996 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.070688009 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.070736885 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.070763111 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.071233034 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.071252108 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.071268082 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.071274996 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.073309898 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.073321104 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.073324919 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.073390961 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.073668957 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.075387001 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.075387955 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.075393915 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.075402975 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.079018116 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.079058886 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.079168081 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.082751036 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.082797050 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.082870007 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.083175898 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.083194971 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.083683014 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.083703041 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.083753109 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.083828926 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.083842039 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.083996058 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.084007025 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.137929916 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.139674902 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.139750957 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.139929056 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.139929056 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.139959097 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.139969110 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.144236088 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.144270897 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.144947052 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.145354033 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.145365000 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.724121094 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.729751110 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.729768991 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.730338097 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.730341911 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.858671904 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.864639044 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.870784998 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.905020952 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.905039072 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.905975103 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.905985117 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.907321930 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.907336950 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.907951117 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.907959938 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.914040089 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.927501917 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.927516937 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.928486109 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.928495884 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.953706026 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.953839064 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.953938007 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.965646029 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.965825081 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.965852976 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.989798069 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.989814997 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.990631104 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:19.990648031 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:19.999978065 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.000044107 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.000489950 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.001955032 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.001981020 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.076955080 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.077111006 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.077187061 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.091217995 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.091285944 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.091341972 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.092206955 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.092283964 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.092617035 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.116269112 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.116444111 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.116558075 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.122064114 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.122100115 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.122119904 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.122127056 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.126322031 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.126348019 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.127608061 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.127614021 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.130831957 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.130866051 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.130891085 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.130897999 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.238001108 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.238039017 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.238112926 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.273179054 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.273210049 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.296591043 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.296638012 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.296708107 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.298330069 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.298369884 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.298433065 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.301846981 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.301882982 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.301970005 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.303828955 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.303858042 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.304727077 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.304753065 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.305190086 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.305218935 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.746351004 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.746800900 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.746814966 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.747252941 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.747258902 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.878438950 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.878674984 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.878762007 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.878799915 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.878817081 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.878829956 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.878843069 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.881587982 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.881619930 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:20.881762028 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.881928921 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:20.881953001 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.014516115 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.015070915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.015088081 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.015567064 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.015572071 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.034780979 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.035430908 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.035460949 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.035540104 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.035897970 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.035917044 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.036051035 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.036068916 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.036359072 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.036366940 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.043170929 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.043665886 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.043698072 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.044123888 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.044132948 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.146116018 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.146188021 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.146379948 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.146500111 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.146500111 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.146521091 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.146531105 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.149996996 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.150029898 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.150161028 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.150803089 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.150815010 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.164937973 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.165271997 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.165565968 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.165775061 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.165775061 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.165791988 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.165802002 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.173187017 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.173213959 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.173784018 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.173784018 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.173808098 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.174359083 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.174427986 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.174550056 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.174674988 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.174694061 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.174707890 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.174714088 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.179883957 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.179933071 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.180140018 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.183162928 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.183177948 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.208363056 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.209137917 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.209250927 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.209427118 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.209428072 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.209444046 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.209451914 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.216204882 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.216237068 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.216398001 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.216680050 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.216692924 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.627459049 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.628032923 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.628047943 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.628596067 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.628602028 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.762504101 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.762784004 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.762851954 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.762896061 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.762908936 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.762919903 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.762926102 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.765873909 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.765893936 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.765952110 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.766122103 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.766134024 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.886620998 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.887195110 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.887204885 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.887653112 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.887662888 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.911569118 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.912668943 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.912668943 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.912681103 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.912693024 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.955498934 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.956120968 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.956132889 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.956583023 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.956587076 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.966217041 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.966741085 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.966763020 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:21.967207909 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:21.967215061 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.017239094 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.017421007 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.017488003 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.017579079 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.017601013 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.017615080 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.017627001 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.020356894 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.020400047 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.020520926 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.020765066 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.020778894 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043476105 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043505907 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043577909 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.043587923 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043663979 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043785095 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.043812037 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043823957 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.043823957 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.043833017 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.043838978 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.046765089 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.046813011 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.046900988 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.047051907 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.047064066 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.085697889 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.085761070 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.086041927 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.086154938 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.086172104 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.086186886 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.086194038 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.089253902 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.089308023 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.089550018 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.089827061 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.089848995 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.159676075 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.159898043 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.159957886 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.160007000 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.160027981 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.160042048 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.160048008 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.162700891 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.162750006 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.162810087 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.163002968 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.163016081 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.501588106 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.502065897 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.502096891 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.502533913 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.502543926 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630115032 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630145073 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630194902 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.630203009 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630466938 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.630474091 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630490065 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.630496025 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.630551100 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.633449078 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.633476019 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.633770943 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.633969069 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.633980036 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.774995089 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.775582075 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.775604010 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.776031017 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.776036024 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.800558090 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.801109076 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.801134109 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.801570892 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.801580906 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.820353031 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.821156979 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.821171045 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:22.821654081 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:22.821660042 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.093801975 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.093833923 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.093893051 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.093919992 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.093978882 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.094145060 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.094161034 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.094172955 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.094177961 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095782995 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095851898 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095865965 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095877886 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095885992 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095930099 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.095941067 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096005917 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096139908 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096155882 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.096168995 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096174955 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.096645117 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096659899 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.096673965 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.096681118 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.097246885 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.097270012 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.097981930 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.097995043 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.099303007 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.099344969 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.099406958 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.099472046 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.099503040 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.099705935 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.100096941 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.100104094 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.100112915 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.100116968 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.101052046 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.101064920 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.101398945 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.101691961 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.101702929 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.231622934 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.231690884 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.231750011 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.231957912 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.231971025 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.232002974 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.232007980 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.234956026 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.234988928 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.235188007 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.235363007 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.235374928 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.385867119 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.386661053 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.386698961 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.387123108 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.387130976 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.515558004 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.515744925 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.515809059 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.515968084 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.515988111 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.515999079 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.516005039 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.518846035 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.518883944 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.519104004 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.519306898 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.519320011 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.822877884 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.823607922 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.823618889 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.824098110 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.824103117 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.843200922 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.843769073 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.843789101 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.844245911 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.844250917 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.864272118 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.864782095 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.864792109 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:23.865221977 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:23.865226030 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.123651028 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.123739004 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.123831034 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124042034 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124061108 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124109983 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124115944 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124154091 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124200106 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124214888 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124264956 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124270916 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124350071 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124403954 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124408007 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.124422073 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.124425888 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.125288963 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.125308037 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.125322104 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.125328064 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.125869036 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.126830101 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.126840115 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.127283096 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.127286911 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.128732920 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.128772020 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.128843069 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.129031897 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.129049063 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.129420042 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.129432917 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.129488945 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.129652023 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.129664898 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.130065918 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.130079985 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.130137920 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.130310059 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.130319118 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.261403084 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.261471987 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.261545897 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.261778116 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.261792898 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.261840105 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.261846066 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.264843941 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.264918089 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.265240908 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.265449047 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.265475035 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.273571014 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.274149895 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.274173021 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.274599075 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.274605989 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.404442072 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.404544115 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.404593945 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.404859066 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.404875994 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.404887915 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.404894114 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.408788919 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.408828974 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:24.408893108 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.409104109 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:24.409116030 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.046044111 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.046046972 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.050695896 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.050723076 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.051657915 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.051682949 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.052062035 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.052078009 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.052828074 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.052831888 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.171487093 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.171691895 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.172532082 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.172568083 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.173933029 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.173939943 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.174540043 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.174561977 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.175290108 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.175296068 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.177932024 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.178044081 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.178163052 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.178385019 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.178406954 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.180275917 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.180761099 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.180809975 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.180814981 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.180908918 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.180937052 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.180955887 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.181055069 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.181061983 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.186791897 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.186821938 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.186903000 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.188545942 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.188587904 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.188653946 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.189238071 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.189250946 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.189387083 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.189398050 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.242784977 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.243618965 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.243632078 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.244589090 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.244604111 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.302526951 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.302568913 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.302617073 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.302625895 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.302670002 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.303015947 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.303029060 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.303044081 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.303050041 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.304661989 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.304723024 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.304838896 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.308198929 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.308212996 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.308257103 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.308263063 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.310784101 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.310822964 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.310894966 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.311594009 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.311610937 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.313613892 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.313652039 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.313708067 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.313833952 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.313847065 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.375202894 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.375406027 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.375493050 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.409583092 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.409604073 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.409615993 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.409622908 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.412672997 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.412705898 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.412801981 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.413090944 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.413105965 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.754961014 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:25.755029917 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:25.755173922 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:25.930016041 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.930627108 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.930649996 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.931956053 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.931972027 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.941673040 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.942214012 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.942239046 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:25.943265915 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:25.943281889 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.048351049 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.049088955 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.049107075 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.050224066 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.050229073 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.058219910 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.059205055 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.059231043 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.059820890 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.059825897 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.063919067 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.064188957 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.064519882 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.079422951 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.079507113 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.079596043 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.080631971 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.080658913 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.080672979 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.080678940 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.081361055 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.081378937 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.081391096 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.081397057 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.089370012 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.089406967 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.090744972 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.090744972 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.090766907 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.090892076 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.091049910 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.091065884 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.091197968 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.091212988 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.152755022 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.153862000 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.153872013 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.154901028 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.154905081 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.196072102 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.196141958 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.196230888 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.196630001 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.196630001 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.196641922 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.196650028 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.202790976 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.202857018 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.202964067 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.202975988 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.203016043 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.203227997 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.203241110 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.203340054 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.203985929 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.203994036 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.204011917 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.204015970 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.208098888 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.208112001 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.211453915 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.211462975 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.211639881 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.212313890 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.212323904 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.289729118 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.289884090 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.290075064 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.290671110 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.290687084 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.290700912 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.290707111 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.297034979 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.297069073 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.297173023 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.297414064 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.297432899 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.323892117 CEST	49835	443	192.168.2.4	142.250.186.68
Oct 17, 2024 14:28:26.323921919 CEST	443	49835	142.250.186.68	192.168.2.4
Oct 17, 2024 14:28:26.936368942 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.936856031 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.936871052 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.937160969 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.937304020 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.937309027 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.937566996 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.937573910 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.938024998 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.938029051 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.945197105 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.945693016 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.945719957 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:26.946191072 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:26.946196079 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.052628040 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.053179026 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.053205967 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.053656101 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.053662062 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.058314085 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.058713913 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.058737993 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.059130907 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.059137106 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.066956997 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.067142963 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.067195892 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.067243099 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.067257881 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.067276001 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.067282915 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.068231106 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.068988085 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.069046021 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.069202900 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.069210052 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.069226027 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.069230080 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.070286036 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.070317984 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.070369005 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.070683956 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.070697069 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.072141886 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.072179079 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.072247982 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.072355986 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.072376013 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.072870970 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.072938919 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.073086977 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.073126078 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.073143005 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.073153973 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.073159933 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.075345993 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.075355053 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.075423956 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.075654030 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.075664043 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.183690071 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.183975935 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.184031010 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.184031010 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.184097052 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.184145927 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.184165955 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.184181929 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.184187889 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.187151909 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.187190056 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.187289000 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.187477112 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.187486887 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.189548969 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.189570904 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.189610958 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.189666033 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.189735889 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.189754963 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.189764977 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.189771891 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.192337036 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.192377090 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.192492962 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.192748070 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.192769051 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.805166006 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.805854082 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.805872917 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.806768894 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.806777000 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.808118105 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.808568001 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.808579922 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.809284925 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.809288979 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.813921928 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.814511061 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.814527988 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.815570116 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.815574884 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.923635006 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.924103975 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.924448967 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.924465895 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.925272942 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.925281048 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.926058054 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.926073074 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.926820993 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.926826000 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.938746929 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.938805103 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.938894033 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.939273119 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.939291954 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.939302921 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.939308882 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.942600012 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.942647934 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.942733049 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.942975998 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.942991018 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.944106102 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.944176912 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.944411039 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.944622040 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.944638968 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.944650888 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.944657087 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.946017981 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.946096897 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.946158886 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.946414948 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.946425915 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.946436882 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.946441889 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.951333046 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.951366901 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.951472998 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.951499939 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.951502085 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.951548100 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.951805115 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.951833963 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:27.952256918 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:27.952269077 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.054475069 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.054828882 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.054877996 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.054894924 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.054914951 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.054961920 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.055057049 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.055069923 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.055080891 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.055085897 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.058566093 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.058594942 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.058767080 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.059026957 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.059089899 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.059161901 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.059173107 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.059178114 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.059669971 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.059688091 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.059698105 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.059704065 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.062750101 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.062783003 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.062906027 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.063175917 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.063190937 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.672203064 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.672678947 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.672696114 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.673207045 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.673214912 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.673214912 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.673563004 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.673595905 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.673957109 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.673964977 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.692369938 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.693003893 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.693020105 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.693480015 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.693489075 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.800030947 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.800540924 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.800558090 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.801013947 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.801023006 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.802267075 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803354025 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803354979 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803440094 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803452015 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803630114 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803904057 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803904057 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803921938 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803932905 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803946018 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803946018 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.803961039 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.803972960 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.806687117 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.806694984 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.806721926 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.806736946 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.806812048 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.806870937 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.807056904 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.807070017 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.807279110 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.807295084 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.809951067 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.810481071 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.810498953 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.810950994 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.810961962 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.824445963 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.824475050 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.824525118 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.824563980 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.824564934 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.825176954 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.825192928 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.825305939 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.825311899 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.832731009 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.832762957 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.832842112 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.833076954 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.833091021 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.934007883 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.934081078 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.934195995 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.934616089 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.934637070 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.934669018 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.934676886 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.938296080 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.938328981 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.938453913 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.938633919 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.938646078 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.943059921 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.943125010 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.943186998 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.943336964 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.943336964 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.943357944 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.943368912 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.945885897 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.945913076 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:28.946105957 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.946271896 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:28.946285963 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.549174070 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.549717903 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.549748898 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.550232887 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.550240040 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.552268028 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.552761078 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.552791119 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.553145885 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.553155899 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.577727079 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.578239918 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.578252077 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.578733921 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.578741074 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.678395033 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.678445101 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.678493977 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.678504944 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.678544044 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.678814888 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.678831100 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.678847075 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.678853989 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.681966066 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.682009935 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.682277918 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.682440996 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.682465076 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.683936119 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.684005022 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.684179068 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.684179068 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.684226990 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.684251070 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.686640024 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.686645031 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.686681986 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.686925888 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.687050104 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.687067032 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.687146902 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.687160015 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.687649965 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.687659979 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.694104910 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.694477081 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.694488049 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.694875002 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.694883108 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.708118916 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.708298922 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.708365917 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.708432913 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.708446980 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.708456993 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.708462000 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.711266994 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.711291075 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.711353064 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.711497068 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.711510897 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.819210052 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.819274902 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.819416046 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.819574118 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.819586039 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.819595098 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.819601059 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.822525978 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.822554111 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.822628021 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.822782040 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.822796106 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.926364899 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.926748037 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.927005053 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.927047968 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.927071095 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.927083969 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.927089930 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.930094004 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.930126905 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:29.930190086 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.930347919 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:29.930357933 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.419267893 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.419415951 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.419886112 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.419903040 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.420589924 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.420594931 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.420650005 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.420663118 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.421299934 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.421305895 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.442013979 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.442461967 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.442492008 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.443022966 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.443028927 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.548913002 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.549395084 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.549441099 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.549587965 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.549612999 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.549653053 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.549666882 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.549702883 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.549876928 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.549887896 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550079107 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.550091028 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550095081 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550102949 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.550107956 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550160885 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550231934 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.550373077 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.550390959 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.550400972 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.550406933 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.553244114 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553286076 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.553442001 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553472996 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.553478003 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553524017 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553642035 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553659916 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.553661108 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.553675890 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.571017027 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.571048975 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.571099043 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.571103096 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.571144104 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.571348906 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.571371078 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.571394920 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.571403027 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.574289083 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.574323893 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.574398041 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.574570894 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.574588060 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.672833920 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.673319101 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.673341990 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.673763990 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.673769951 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.677683115 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.677751064 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.677815914 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.677968979 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.677990913 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.678002119 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.678009033 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.681140900 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.681174994 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.681353092 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.681634903 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.681648016 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.807066917 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.807099104 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.807148933 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.807162046 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.807204008 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.807370901 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.807370901 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.807395935 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.807404995 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.810220957 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.810261011 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:30.810331106 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.810570955 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:30.810586929 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.280064106 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.280697107 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.280716896 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.281179905 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.281184912 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.299016953 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.299575090 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.299590111 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.300012112 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.300018072 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.315680027 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.316384077 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.316397905 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.317023993 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.317029953 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.411099911 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.411170959 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.411223888 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.411472082 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.411495924 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.411510944 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.411518097 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.414695978 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.414730072 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.414876938 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.415055037 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.415066004 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.425951958 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.426630020 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.426646948 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.427407026 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.427413940 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.428420067 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.428710938 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.428786993 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.428878069 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.428886890 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.428903103 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.428908110 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.432085037 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.432113886 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.432507992 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.432728052 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.432738066 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.446620941 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.446934938 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.446974039 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.446990013 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.447063923 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.447175026 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.447175026 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.447197914 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.447207928 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.450301886 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.450339079 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.450613976 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.450643063 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.450649977 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.544842958 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.545392036 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.545424938 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.545988083 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.546003103 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.561245918 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.601335049 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.601352930 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.601577997 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.601577997 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.601597071 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.601809025 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.601845980 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.601932049 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.604135990 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.604167938 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.604331017 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.604537010 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.604551077 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.677856922 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.678031921 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.678100109 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.678339958 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.678364992 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.678478956 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.678488016 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.681360006 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.681421041 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:31.681505919 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.681706905 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:31.681725025 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.153537989 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.154525995 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.154545069 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.154697895 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.154702902 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.184559107 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.185250998 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.185259104 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.185990095 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.185993910 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.195928097 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.196557999 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.196579933 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.197454929 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.197460890 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.283269882 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.283487082 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.283664942 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.283819914 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.283833027 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.283884048 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.283890009 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.286916971 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.286953926 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.287050009 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.287220955 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.287240982 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.316220045 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.316287041 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.316423893 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.316648960 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.316648960 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.316663027 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.316672087 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.320553064 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.320591927 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.320657015 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.320863008 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.320873976 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328382015 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328458071 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328520060 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.328533888 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328578949 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328691006 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.328780890 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.328780890 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.328795910 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.328804970 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.331867933 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.331893921 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.331993103 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.332170963 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.332179070 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.352781057 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.353208065 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.353220940 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.353656054 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.353662968 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.402621984 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.403579950 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.403593063 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.404284000 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.404289007 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.486500025 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.486572027 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.486836910 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.486836910 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.486891031 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.486910105 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.489768028 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.489821911 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.489994049 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.490160942 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.490183115 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.530518055 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.530548096 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.530586004 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.530709982 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.530875921 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.530875921 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.530877113 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.533906937 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.533946037 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.534197092 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.534197092 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.534228086 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:32.835633993 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:32.835659027 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.012510061 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.012995958 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.013010025 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.013489962 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.013497114 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.047403097 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.048005104 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.048028946 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.048543930 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.048551083 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.065707922 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.066229105 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.066243887 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.066584110 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.066587925 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.140502930 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.140604019 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.140949965 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.141314983 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.141333103 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.141370058 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.141379118 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.144259930 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.144294024 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.144438028 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.144546986 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.144556046 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.182460070 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.182521105 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.182712078 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.182837963 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.182837963 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.182862043 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.182879925 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.186054945 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.186115980 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.186450958 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.186584949 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.186605930 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.194694042 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.194767952 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.194864035 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.195152998 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.195162058 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.195291996 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.195297956 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.198899984 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.198928118 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.199075937 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.199419022 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.199428082 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.225126982 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.225812912 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.225838900 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.226258039 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.226263046 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.266025066 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.266659975 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.266683102 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.267066956 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.267072916 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.354182005 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.354207039 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.354248047 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.354578018 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.354578018 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.354931116 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.354949951 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.358896017 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.358917952 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.359189987 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.359189987 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.359216928 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.396189928 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.396523952 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.396745920 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.396745920 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.396745920 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.399568081 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.399605036 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.399848938 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.400214911 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.400230885 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.710664034 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.710690975 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.880795956 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.881289959 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.881299973 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.881793022 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.881797075 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.925453901 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.926003933 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.926035881 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.926528931 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.926542044 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.939172983 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.939765930 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.939780951 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:33.940222025 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:33.940227985 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.014108896 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.014146090 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.014194965 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.014195919 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.014231920 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.014494896 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.014508009 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.014518023 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.014523029 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.017579079 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.017613888 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.017672062 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.017812014 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.017827034 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.056484938 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.056545973 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.056623936 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.056838989 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.056860924 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.056905031 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.056911945 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.059807062 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.059835911 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.059899092 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.060055017 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.060065985 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.070420980 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.070487976 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.070534945 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.070830107 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.070844889 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.070857048 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.070862055 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.073774099 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.073784113 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.073864937 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.074028969 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.074039936 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.157994986 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.158756018 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.158766031 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.158893108 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.159187078 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.159219027 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.159329891 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.159334898 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.160011053 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.160024881 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.293430090 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.293494940 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.293709040 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.293756008 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.293776989 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.293804884 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.293812037 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.297106028 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.297146082 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.297204971 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.297451019 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.297466993 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.337462902 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.338002920 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.338073969 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.338130951 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.338152885 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.338165998 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.338171959 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.341690063 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.341747999 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.341864109 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.342139959 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.342159033 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.761141062 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.761908054 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.761943102 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.762253046 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.762259960 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.787528038 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.787985086 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.788022041 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.788469076 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.788476944 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.822385073 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.822892904 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.822927952 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.823611021 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.823625088 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.891273975 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.891355038 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.891606092 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.891606092 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.892110109 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.892131090 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.894494057 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.894529104 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.894925117 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.894926071 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.894954920 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.918150902 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.918217897 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.918503046 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.918503046 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.918577909 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.918592930 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.921497107 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.921528101 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.921725988 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.921725988 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.921753883 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.954919100 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.955018044 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.955250978 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.955251932 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.955332041 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.955349922 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.958528996 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.958570004 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:34.958870888 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.958870888 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:34.958906889 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.027192116 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.028002024 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.028024912 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.028440952 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.028451920 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.068931103 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.069916010 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.069926023 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.069967031 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.069972038 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.156198978 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.156290054 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.156327963 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.156502008 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.156544924 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.156544924 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.156567097 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.156579018 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.159454107 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.159483910 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.159559965 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.159749031 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.159766912 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.201478958 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.201527119 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.201596975 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.201900959 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.201900959 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.201921940 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.201931953 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.205296993 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.205328941 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 17, 2024 14:28:35.205724955 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.205724955 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 17, 2024 14:28:35.205756903 CEST	443	49941	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 17, 2024 14:27:12.106713057 CEST	53	52455	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:12.118988037 CEST	53	53800	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:13.258608103 CEST	51518	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:13.258910894 CEST	58227	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:13.265897036 CEST	53	51518	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:13.270167112 CEST	53	58227	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:13.385687113 CEST	53	50131	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:14.463118076 CEST	55358	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:14.463282108 CEST	50721	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:14.471496105 CEST	53	55358	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:14.481647015 CEST	53	50721	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:14.551006079 CEST	56038	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:14.553008080 CEST	57806	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:14.558940887 CEST	53	56038	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:14.560952902 CEST	53	57806	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:16.142524004 CEST	51655	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:16.142677069 CEST	51252	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:16.149398088 CEST	53	51252	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:16.157660007 CEST	53	51655	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:18.444580078 CEST	63614	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:18.446367025 CEST	50985	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:18.456073999 CEST	53	63614	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:18.456557989 CEST	57362	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:18.456814051 CEST	58473	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:18.464963913 CEST	53	57362	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:18.465702057 CEST	53	50985	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:18.480357885 CEST	53	58473	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:22.487169981 CEST	53	50891	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:27.778548956 CEST	138	138	192.168.2.4	192.168.2.255
Oct 17, 2024 14:27:30.468050957 CEST	53	49978	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:33.399874926 CEST	58821	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:33.400340080 CEST	64527	53	192.168.2.4	1.1.1.1
Oct 17, 2024 14:27:33.430003881 CEST	53	64527	1.1.1.1	192.168.2.4
Oct 17, 2024 14:27:49.292407990 CEST	53	51137	1.1.1.1	192.168.2.4
Oct 17, 2024 14:28:10.938730001 CEST	53	64501	1.1.1.1	192.168.2.4
Oct 17, 2024 14:28:12.037117004 CEST	53	62112	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 17, 2024 14:27:14.481728077 CEST	192.168.2.4	1.1.1.1	c239	(Port unreachable)	Destination Unreachable
Oct 17, 2024 14:27:18.465758085 CEST	192.168.2.4	1.1.1.1	c26d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 17, 2024 14:27:13.258608103 CEST	192.168.2.4	1.1.1.1	0xe23a	Standard query (0)	forms.zohopublic.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:13.258910894 CEST	192.168.2.4	1.1.1.1	0x4e1b	Standard query (0)	forms.zohopublic.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:14.463118076 CEST	192.168.2.4	1.1.1.1	0x75b7	Standard query (0)	static.zohocdn.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:14.463282108 CEST	192.168.2.4	1.1.1.1	0x2b4e	Standard query (0)	static.zohocdn.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:14.551006079 CEST	192.168.2.4	1.1.1.1	0x29c0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:14.553008080 CEST	192.168.2.4	1.1.1.1	0xe996	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:16.142524004 CEST	192.168.2.4	1.1.1.1	0x3ff	Standard query (0)	static.zohocdn.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:16.142677069 CEST	192.168.2.4	1.1.1.1	0xcc63	Standard query (0)	static.zohocdn.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:18.444580078 CEST	192.168.2.4	1.1.1.1	0x338f	Standard query (0)	webfonts.zohowebstatic.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.446367025 CEST	192.168.2.4	1.1.1.1	0xbad5	Standard query (0)	webfonts.zohowebstatic.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:18.456557989 CEST	192.168.2.4	1.1.1.1	0x5c27	Standard query (0)	forms.zohopublic.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456814051 CEST	192.168.2.4	1.1.1.1	0x4d02	Standard query (0)	forms.zohopublic.com	65	IN (0x0001)	false
Oct 17, 2024 14:27:33.399874926 CEST	192.168.2.4	1.1.1.1	0x8984	Standard query (0)	trkl-iplk-grtes.us-sea-1.linodeobjects.com	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:33.400340080 CEST	192.168.2.4	1.1.1.1	0x4e1b	Standard query (0)	trkl-iplk-grtes.us-sea-1.linodeobjects.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 17, 2024 14:27:13.265897036 CEST	1.1.1.1	192.168.2.4	0xe23a	No error (0)	forms.zohopublic.com	zpublic.zohopublic.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:13.265897036 CEST	1.1.1.1	192.168.2.4	0xe23a	No error (0)	zpublic.zohopublic.com		136.143.182.97	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:13.270167112 CEST	1.1.1.1	192.168.2.4	0x4e1b	No error (0)	forms.zohopublic.com	zpublic.zohopublic.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:14.471496105 CEST	1.1.1.1	192.168.2.4	0x75b7	No error (0)	static.zohocdn.com	h2-stratus.zohocdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:14.471496105 CEST	1.1.1.1	192.168.2.4	0x75b7	No error (0)	h2-stratus.zohocdn.com		89.36.170.147	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:14.481647015 CEST	1.1.1.1	192.168.2.4	0x2b4e	No error (0)	static.zohocdn.com	h2-stratus.zohocdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:14.558940887 CEST	1.1.1.1	192.168.2.4	0x29c0	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:14.560952902 CEST	1.1.1.1	192.168.2.4	0xe996	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 17, 2024 14:27:16.149398088 CEST	1.1.1.1	192.168.2.4	0xcc63	No error (0)	static.zohocdn.com	h2-stratus.zohocdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:16.157660007 CEST	1.1.1.1	192.168.2.4	0x3ff	No error (0)	static.zohocdn.com	h2-stratus.zohocdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:16.157660007 CEST	1.1.1.1	192.168.2.4	0x3ff	No error (0)	h2-stratus.zohocdn.com		89.36.170.147	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456073999 CEST	1.1.1.1	192.168.2.4	0x338f	No error (0)	webfonts.zohowebstatic.com	d28140lin2gosl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456073999 CEST	1.1.1.1	192.168.2.4	0x338f	No error (0)	d28140lin2gosl.cloudfront.net		18.66.102.12	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456073999 CEST	1.1.1.1	192.168.2.4	0x338f	No error (0)	d28140lin2gosl.cloudfront.net		18.66.102.54	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456073999 CEST	1.1.1.1	192.168.2.4	0x338f	No error (0)	d28140lin2gosl.cloudfront.net		18.66.102.25	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.456073999 CEST	1.1.1.1	192.168.2.4	0x338f	No error (0)	d28140lin2gosl.cloudfront.net		18.66.102.48	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.464963913 CEST	1.1.1.1	192.168.2.4	0x5c27	No error (0)	forms.zohopublic.com	zpublic.zohopublic.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:18.464963913 CEST	1.1.1.1	192.168.2.4	0x5c27	No error (0)	zpublic.zohopublic.com		136.143.182.97	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:18.465702057 CEST	1.1.1.1	192.168.2.4	0xbad5	No error (0)	webfonts.zohowebstatic.com	d28140lin2gosl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:18.480357885 CEST	1.1.1.1	192.168.2.4	0x4d02	No error (0)	forms.zohopublic.com	zpublic.zohopublic.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:28.566622019 CEST	1.1.1.1	192.168.2.4	0x5f38	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:28.566622019 CEST	1.1.1.1	192.168.2.4	0x5f38	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:27:33.430003881 CEST	1.1.1.1	192.168.2.4	0x4e1b	No error (0)	trkl-iplk-grtes.us-sea-1.linodeobjects.com	us-sea-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:33.430003881 CEST	1.1.1.1	192.168.2.4	0x4e1b	No error (0)	us-sea-1.linodeobjects.com	us-sea-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:33.435173035 CEST	1.1.1.1	192.168.2.4	0x8984	No error (0)	trkl-iplk-grtes.us-sea-1.linodeobjects.com	us-sea-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:33.435173035 CEST	1.1.1.1	192.168.2.4	0x8984	No error (0)	us-sea-1.linodeobjects.com	us-sea-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:45.593539953 CEST	1.1.1.1	192.168.2.4	0xb31e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:27:45.593539953 CEST	1.1.1.1	192.168.2.4	0xb31e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 17, 2024 14:28:03.771979094 CEST	1.1.1.1	192.168.2.4	0x58	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 17, 2024 14:28:03.771979094 CEST	1.1.1.1	192.168.2.4	0x58	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

forms.zohopublic.com

https:

static.zohocdn.com

webfonts.zohowebstatic.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:13 UTC	739	OUT	GET /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:14 UTC	367	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:14 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196; Path=/; Secure; HttpOnly X-Content-Type-Options: nosniff vary: accept-encoding Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:14 UTC	16017	IN	Data Raw: 31 66 33 32 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 20 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 1f32<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <meta http-equiv="x-ua-compatible" content="IE=edge" /><html xmlns="http://www.w3.org/1999/xhtml"><meta http-equiv="Content-
2024-10-17 12:27:14 UTC	16384	IN	Data Raw: 3a 20 35 30 30 7d 2e 66 6f 72 6d 46 69 65 6c 64 57 72 61 70 70 65 72 20 3e 20 2e 73 65 63 74 69 6f 6e 20 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4e 75 6e 69 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 63 6f 6c 6f 72 3a 20 23 38 34 37 46 37 46 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 7d 2e 66 6f 72 6d 46 69 65 6c 64 57 72 61 70 70 65 72 20 3e 20 2e 7a 66 72 61 64 69 6f 20 2e 74 65 6d 70 43 6f 6e 74 44 69 76 20 73 70 61 6e 20 6c 61 62 65 6c 2c 20 2e 66 6f 72 6d 46 69 65 6c 64 57 72 61 70 70 65 72 20 3e 20 2e 7a 66 63 68 65 63 6b 62 6f 78 20 2e 74 65 6d 70 43 6f 6e 74 44 69 76 20 73 70 61 6e 20 6c 61 62 65 6c 2c 20 2e 66 6f 72 6d 46 69 65 6c 64 57 72 61 70 70 65 72 20 3e Data Ascii: : 500}.formFieldWrapper > .section p {font-family: Nunito;font-size: 13px;color: #847F7F;font-style: normal;font-weight: 400}.formFieldWrapper > .zfradio .tempContDiv span label, .formFieldWrapper > .zfcheckbox .tempContDiv span label, .formFieldWrapper >
2024-10-17 12:27:14 UTC	16384	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 72 69 67 68 74 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 Data Ascii: !important; -webkit-border-bottom-right-radius: 2px !important; -moz-border-radius-bottomright: 2px !important; border-bottom-right-radius: 2px !important; -webkit-border-bottom-left-radius: 2px !important; -moz-border-radius-bottomleft: 2px !important;
2024-10-17 12:27:14 UTC	16384	IN	Data Raw: 22 68 65 72 65 20 22 2c 20 0a 22 6d 65 64 69 61 72 65 63 6f 72 64 65 72 74 79 70 65 65 72 72 6f 72 22 3a 22 54 68 65 5c 78 32 30 72 65 63 6f 72 64 69 6e 67 5c 78 32 30 66 6f 72 6d 61 74 5c 78 32 30 5c 78 32 37 5c 78 37 42 30 5c 78 37 44 5c 78 32 37 5c 78 32 30 69 73 5c 78 32 30 72 65 73 74 72 69 63 74 65 64 5c 78 32 30 66 6f 72 5c 78 32 30 74 68 69 73 5c 78 32 30 66 69 65 6c 64 2e 22 2c 0a 22 6e 6f 5f 63 61 6d 65 72 61 5f 70 65 72 6d 69 73 73 69 6f 6e 22 3a 22 54 75 72 6e 5c 78 32 30 6f 6e 5c 78 32 30 74 68 65 5c 78 32 30 63 61 6d 65 72 61 5c 78 32 30 70 65 72 6d 69 73 73 69 6f 6e 5c 78 32 0d 0a 34 30 30 30 0d 0a 30 69 6e 5c 78 32 30 79 6f 75 72 5c 78 32 30 62 72 6f 77 73 65 72 5c 78 32 30 74 6f 5c 78 32 30 63 6f 6e 74 69 6e 75 65 5c 78 32 30 66 75 72 74 Data Ascii: "here ", "mediarecordertypeerror":"The\x20recording\x20format\x20\x27\x7B0\x7D\x27\x20is\x20restricted\x20for\x20this\x20field.","no_camera_permission":"Turn\x20on\x20the\x20camera\x20permission\x240000in\x20your\x20browser\x20to\x20continue\x20furt
2024-10-17 12:27:14 UTC	16384	IN	Data Raw: 39 35 2d 32 2e 30 36 38 20 30 2d 31 2e 38 37 31 20 30 2e 36 38 39 2d 33 2e 35 34 35 20 31 2e 37 37 32 2d 34 2e 38 37 34 20 30 2e 31 34 38 2d 30 2e 31 34 38 20 30 2e 31 34 38 2d 30 2e 34 34 33 2d 30 2e 30 34 39 2d 30 2e 35 39 31 76 30 63 2d 30 2e 31 39 37 2d 30 2e 31 34 38 2d 30 2e 34 34 33 2d 30 2e 31 34 38 2d 30 2e 35 39 31 20 30 2e 30 34 39 2d 31 2e 32 33 31 20 31 2e 34 32 38 2d 31 2e 39 36 39 20 33 2e 33 34 38 2d 31 2e 39 36 39 20 35 2e 34 31 35 20 30 20 30 2e 38 33 37 20 30 2e 31 34 38 20 31 2e 36 32 35 20 30 2e 33 34 35 20 32 2e 34 31 32 20 30 2e 30 39 38 20 30 2e 32 34 36 20 30 2e 33 39 34 20 30 2e 33 34 35 0d 0a 32 30 30 30 0d 0a 20 30 2e 35 39 31 20 30 2e 31 39 37 76 30 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 32 2e 34 39 Data Ascii: 95-2.068 0-1.871 0.689-3.545 1.772-4.874 0.148-0.148 0.148-0.443-0.049-0.591v0c-0.197-0.148-0.443-0.148-0.591 0.049-1.231 1.428-1.969 3.348-1.969 5.415 0 0.837 0.148 1.625 0.345 2.412 0.098 0.246 0.394 0.3452000 0.591 0.197v0z"></path><path d="M32.49
2024-10-17 12:27:14 UTC	16384	IN	Data Raw: 35 34 2d 30 2e 36 39 32 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 30 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 31 2c 20 23 30 30 30 29 22 20 64 3d 22 4d 33 35 2e 32 32 32 20 31 31 2e 32 38 37 6c 34 2d 35 2e 37 37 33 68 2d 33 2e 35 38 39 76 2d 31 2e 31 33 35 68 35 2e 34 37 76 30 2e 35 36 32 6c 2d 33 2e 39 30 33 20 35 2e 37 37 33 68 33 2e 37 38 34 76 31 2e 31 33 35 68 2d 35 2e 37 36 32 76 2d 30 2e 35 36 32 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 30 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 31 2c 20 23 30 30 30 29 22 20 64 3d 22 4d 34 34 2e 35 31 39 20 36 2e 32 37 63 31 2e 36 36 35 20 30 20 32 2e 39 34 31 20 31 2e Data Ascii: 54-0.692z"></path><path fill="#000" style="fill: var(--color1, #000)" d="M35.222 11.287l4-5.773h-3.589v-1.135h5.47v0.562l-3.903 5.773h3.784v1.135h-5.762v-0.562z"></path><path fill="#000" style="fill: var(--color1, #000)" d="M44.519 6.27c1.665 0 2.941 1.
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 38 2d 30 2e 31 31 36 20 30 2e 30 33 36 2d 30 2e 30 39 38 20 30 2e 30 39 38 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 64 63 65 36 32 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 38 2c 20 23 34 64 63 65 36 32 29 22 20 64 3d 22 4d 32 38 2e 32 34 20 31 36 2e 36 39 33 63 2d 30 2e 30 30 39 20 30 2d 30 2e 30 32 37 20 30 2d 30 2e 30 33 36 2d 30 2e 30 30 39 2d 30 2e 30 35 33 2d 30 2e 30 31 38 2d 30 2e 30 38 39 2d 30 2e 30 35 33 2d 30 2e 31 30 37 2d 30 2e 31 30 37 6c 2d 30 2e 34 2d 31 2e 34 39 33 63 2d 30 2e 30 31 38 2d 30 2e 30 35 33 20 30 2d 30 2e 31 30 37 20 30 2e 30 33 36 2d 30 2e 31 34 32 73 30 2e 30 38 39 2d 30 2e 30 35 33 20 30 2e 31 34 32 2d 30 2e 30 33 36 6c 31 2e 34 39 33 20 30 2e 34 63 30 Data Ascii: 8-0.116 0.036-0.098 0.098z"></path><path fill="#4dce62" style="fill: var(--color8, #4dce62)" d="M28.24 16.693c-0.009 0-0.027 0-0.036-0.009-0.053-0.018-0.089-0.053-0.107-0.107l-0.4-1.493c-0.018-0.053 0-0.107 0.036-0.142s0.089-0.053 0.142-0.036l1.493 0.4c0
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 73 3d 22 63 6c 65 61 72 42 6f 74 68 22 3e 3c 2f 64 69 76 3e 3c 2f 6c 69 3e 0a 20 20 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 0a 0a 0a 0a 0a 0a 3c 75 6c 20 65 6c 6e 61 6d 65 3d 22 66 6f 6f 74 65 72 22 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 57 72 61 70 70 65 72 20 66 6f 72 6d 52 65 6c 61 74 69 76 65 22 20 70 61 67 65 5f 6e 6f 3d 22 31 22 20 70 61 67 65 5f 63 6f 75 6e 74 3d 22 31 22 20 63 6f 75 6e 74 65 72 5f 70 61 67 65 5f 75 69 64 3d 22 31 22 20 20 70 61 67 65 5f 6c 69 6e 6b 5f 6e 61 6d 65 3d 22 50 61 67 65 22 20 20 3e 0a 3c 6c 69 20 73 74 79 6c 65 3d 22 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 Data Ascii: s="clearBoth"></div></li> </ul></div><ul elname="footer" class="footerWrapper formRelative" page_no="1" page_count="1" counter_page_uid="1" page_link_name="Page" ><li style="overflow:visible; position: relat
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 73 44 69 76 22 20 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 69 6d 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 7a 6f 68 6f 63 64 6e 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 69 6d 61 67 65 73 2f 63 68 65 63 6b 2d 6d 61 72 6b 2d 6f 75 74 6c 69 6e 65 2e 65 34 34 35 30 39 30 34 37 61 30 61 37 39 66 62 36 30 34 62 65 39 38 62 62 31 30 65 63 35 62 63 2e 70 6e 67 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 33 30 70 78 3b 77 69 64 74 68 3a 20 33 30 70 78 3b 22 2f 3e 0a 3c 73 70 61 6e 3e 3c 65 6d 20 65 6c 6e 61 6d 65 3d 22 73 75 63 63 65 73 73 44 69 76 4d 73 67 22 3e 3c 2f 65 6d 3e 26 6e 62 73 70 3b 3c 65 6d 20 65 6c 6e 61 6d 65 3d 22 65 6d 61 69 6c 4d 73 67 Data Ascii: sDiv" style="display:none;"><img aria-hidden="true" src="https://static.zohocdn.com/forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png" style="height: 30px;width: 30px;"/><span><em elname="successDivMsg"></em> <em elname="emailMsg
2024-10-17 12:27:15 UTC	9075	IN	Data Raw: 37 2d 4f 63 74 2d 32 30 32 34 20 30 38 3a 32 37 20 41 4d 27 3b 0a 0a 5a 46 4c 69 76 65 2e 70 61 73 74 44 61 74 65 3b 0a 0a 5a 46 4c 69 76 65 2e 70 61 73 74 44 61 74 65 20 3d 20 27 31 36 2d 4f 63 74 2d 32 30 32 34 20 31 31 3a 35 39 20 50 4d 27 3b 0a 0a 5a 46 4c 69 76 65 2e 66 75 74 75 72 65 44 61 74 65 3b 0a 0a 5a 46 4c 69 76 65 2e 66 75 74 75 72 65 44 61 74 65 20 3d 20 27 31 38 2d 4f 63 74 2d 32 30 32 34 20 31 32 3a 30 30 20 41 4d 27 3b 0a 0a 5a 46 4c 69 76 65 2e 69 73 44 61 74 65 54 69 6d 65 41 64 76 50 72 6f 70 73 45 6e 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0a 5a 46 4c 69 76 65 2e 66 6f 72 6d 75 6c 61 43 75 72 72 65 6e 74 44 61 74 65 3b 0a 0a 5a 46 4c 69 76 65 2e 66 6f 72 6d 75 6c 61 43 75 72 72 65 6e 74 44 61 74 65 20 3d 20 27 31 37 2d 4f 63 74 2d 32 Data Ascii: 7-Oct-2024 08:27 AM';ZFLive.pastDate;ZFLive.pastDate = '16-Oct-2024 11:59 PM';ZFLive.futureDate;ZFLive.futureDate = '18-Oct-2024 12:00 AM';ZFLive.isDateTimeAdvPropsEnabled = true;ZFLive.formulaCurrentDate;ZFLive.formulaCurrentDate = '17-Oct-2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:14 UTC	742	OUT	GET /formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300 HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:14 UTC	295	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:14 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 1307 Connection: close X-Content-Type-Options: nosniff X-Frame-Options: DENY vary: accept-encoding Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:14 UTC	1307	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 0a 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 65 62 66 6f 6e 74 73 2e 7a 6f 68 6f 77 65 62 73 74 61 74 69 63 2e 63 6f 6d 2f 6f 70 65 6e 73 61 6e 73 2f 66 6f 6e 74 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 0a 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 0a 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 65 62 66 6f 6e 74 73 Data Ascii: @font-face {font-family:"Open Sans";font-weight:400;font-style:normal;src:url("https://webfonts.zohowebstatic.com/opensans/font.woff") format("woff");}@font-face {font-family:"Open Sans";font-weight:700;font-style:italic;src:url("https://webfonts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	598	OUT	GET /forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:15 UTC	727	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:15 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 78475 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "f48a549468a1647a59b91c66c827b243" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:50 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 8063c94d4bc7e3c77179644eb66d21e2 z-origin-id: ex1-48e56be10b6b4fae996cf5189d2927af Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:15 UTC	15657	IN	Data Raw: 2f 2a 20 24 49 64 24 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 49 4d 50 4f 52 54 41 4e 54 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 6f 6d 70 72 65 73 73 65 64 20 63 73 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 74 68 69 72 64 70 61 72 74 79 20 73 74 79 6c 65 73 68 65 65 74 73 0a 20 2a 2f 0a 0a 2f 2a 20 2a 20 43 53 53 20 53 74 79 6c 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 62 79 20 6a 53 63 72 6f 6c 6c 50 61 6e 65 20 66 6f 72 20 69 74 20 74 6f 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 63 74 6c 79 2e 20 2a 20 2a 20 49 6e 63 6c 75 64 65 20 74 68 69 73 20 73 74 79 6c 65 73 68 65 65 74 20 69 6e 20 79 6f 75 72 20 73 69 74 65 20 6f 72 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 74 68 65 20 73 74 79 6c 65 73 20 62 65 6c 6f 77 20 69 6e 74 6f 20 79 6f Data Ascii: /* $Id$ //* * IMPORTANT NOTE: This compressed css file includes thirdparty stylesheets // * CSS Styles that are needed by jScrollPane for it to operate correctly. * * Include this stylesheet in your site or copy and paste the styles below into yo
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 74 74 6f 6d 3a 20 31 70 78 3b 7d 2e 75 69 2d 73 65 6c 65 63 74 6d 65 6e 75 2d 6d 65 6e 75 20 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 73 65 6c 65 63 74 6d 65 6e 75 2d 6f 70 74 67 72 6f 75 70 20 7b 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 09 70 61 64 64 69 6e 67 3a 20 32 70 78 20 30 2e 34 65 6d 3b 09 6d 61 72 67 69 6e 3a 20 30 2e 35 65 6d 20 30 20 30 20 30 3b 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 09 62 6f 72 64 65 72 3a 20 30 3b 7d 2e 75 69 2d 73 65 6c 65 63 74 6d 65 6e 75 2d 6f 70 65 6e 20 7b 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 75 69 2d 73 65 6c 65 63 74 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 7b 09 64 69 73 70 6c 61 79 3a Data Ascii: ttom: 1px;}.ui-selectmenu-menu .ui-menu .ui-selectmenu-optgroup {font-size: 1em;font-weight: bold;line-height: 1.5;padding: 2px 0.4em;margin: 0.5em 0 0 0;height: auto;border: 0;}.ui-selectmenu-open {display: block;}.ui-selectmenu-button {display:
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 34 38 70 78 20 2d 31 39 32 70 78 3b 20 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 73 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 36 34 70 78 20 2d 31 39 32 70 78 3b 20 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 38 30 70 78 20 2d 31 39 32 70 78 3b 20 7d 2e 75 69 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 74 72 69 61 6e 67 6c 65 2d 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 39 36 70 78 20 2d 31 39 32 70 78 3b 20 7d 2e 75 69 2d 69 63 6f Data Ascii: cle-triangle-e { background-position: -48px -192px; }.ui-icon-circle-triangle-s { background-position: -64px -192px; }.ui-icon-circle-triangle-w { background-position: -80px -192px; }.ui-icon-circle-triangle-n { background-position: -96px -192px; }.ui-ico
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 20 20 63 75 72 73 6f 72 3a 20 74 65 78 74 3b 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 20 7d 20 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 3a 66 6f 63 75 73 20 7b 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 35 38 39 37 66 62 3b 20 7d 20 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 20 7b 20 20 20 20 Data Ascii: x solid #aaa; border-radius: 4px; cursor: text; outline: 0; } .select2-container--classic .select2-selection--multiple:focus { border: 1px solid #5897fb; } .select2-container--classic .select2-selection--multiple .select2-selection__rendered {
2024-10-17 12:27:16 UTC	13666	IN	Data Raw: 20 2d 31 36 36 35 70 78 20 30 70 78 3b 20 7d 20 20 2e 69 74 69 2d 66 6c 61 67 2e 66 6d 20 7b 20 20 20 20 68 65 69 67 68 74 3a 20 31 31 70 78 3b 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 38 37 70 78 20 30 70 78 3b 20 7d 20 20 2e 69 74 69 2d 66 6c 61 67 2e 66 6f 20 7b 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 37 30 39 70 78 20 30 70 78 3b 20 7d 20 20 2e 69 74 69 2d 66 6c 61 67 2e 66 72 20 7b 20 20 20 20 68 65 69 67 68 74 3a 20 31 34 70 78 3b 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 37 33 31 70 78 20 30 70 78 3b 20 7d 20 20 2e 69 74 69 2d 66 6c 61 67 2e 67 61 20 7b 20 20 20 20 68 65 69 67 Data Ascii: -1665px 0px; } .iti-flag.fm { height: 11px; background-position: -1687px 0px; } .iti-flag.fo { height: 15px; background-position: -1709px 0px; } .iti-flag.fr { height: 14px; background-position: -1731px 0px; } .iti-flag.ga { heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	592	OUT	GET /forms/css/formslive.4541489581c036f067c268383cc864b0.css HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:15 UTC	728	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:15 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 305386 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "36d8bda47c3af931dd0333942ff80a44" Content-Language: en-US Last-Modified: Mon, 23 Sep 2024 08:46:53 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: a87aa1371cbb009634dbf3aadfaade54 z-origin-id: ex1-595a3acfe9ca44f5b27eafd9cd6b9074 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:15 UTC	15656	IN	Data Raw: 2f 2a 20 24 49 64 24 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 49 4d 50 4f 52 54 41 4e 54 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 6f 6d 70 72 65 73 73 65 64 20 63 73 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 5a 6f 68 6f 20 46 6f 72 6d 73 20 4c 69 76 65 20 50 61 67 65 20 73 74 79 6c 65 73 68 65 65 74 73 0a 20 2a 2f 0a 0a 20 2f 2a 20 62 75 74 74 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 2e 62 75 74 74 6f 6e 20 7b 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 09 7a 6f 6f 6d 3a 20 31 3b 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 09 6d 61 Data Ascii: /* $Id$ //* * IMPORTANT NOTE: This compressed css file includes Zoho Forms Live Page stylesheets / / button ---------------------------------------------- /.button {display: inline-block;zoom: 1; display: inline;vertical-align: baseline;ma
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 37 70 78 3b 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2e 63 64 34 38 38 33 61 65 38 33 36 31 33 39 38 61 61 61 39 62 39 37 39 30 38 64 37 63 38 32 61 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 31 34 34 70 78 20 2d 31 39 36 70 78 3b 7d 2e 73 75 63 63 65 73 73 20 2e 6d 65 73 73 61 67 65 43 6f 6e 74 61 69 6e 65 72 20 73 70 61 6e 20 7b 09 63 6f 6c 6f 72 3a 20 23 31 44 39 42 34 31 3b 7d 2e 73 75 63 63 65 73 73 20 2e 70 6f 70 4d 73 67 49 63 6f 6e 20 7b 09 68 65 69 67 68 74 3a 20 33 37 70 78 3b 09 77 69 64 74 68 3a 20 33 37 70 78 3b 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2e 63 64 34 38 38 33 61 65 38 33 36 31 33 39 38 61 61 61 39 62 39 Data Ascii: 7px;background: url(../images/sprite.cd4883ae8361398aaa9b97908d7c82ae.gif) no-repeat -144px -196px;}.success .messageContainer span {color: #1D9B41;}.success .popMsgIcon {height: 37px;width: 37px;background: url(../images/sprite.cd4883ae8361398aaa9b9
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 35 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 70 43 6f 6e 74 61 69 6e 65 72 20 2e 72 75 6c 65 4c 69 73 74 20 68 32 2c 20 2e 70 43 6f 6e 74 61 69 6e 65 72 20 2e 66 69 65 6c 64 4c 69 73 74 20 68 32 20 7b 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 2e 70 43 6f 6e 74 61 69 6e 65 72 20 2e 72 75 6c 65 4c 69 73 74 20 68 32 20 73 76 67 2c 20 2e 70 43 6f 6e 74 61 69 6e 65 72 20 2e 66 69 65 6c 64 4c 69 73 74 20 68 32 20 73 76 67 20 7b 09 77 69 64 74 68 3a 20 31 35 70 78 3b 09 68 65 69 67 68 74 3a 20 31 35 70 78 3b 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 7d 2e 70 43 6f 6e 74 61 69 6e 65 72 Data Ascii: 500 !important;}.pContainer .ruleList h2, .pContainer .fieldList h2 {font-size: 13px;font-weight: 500;margin-bottom: 5px;clear: both;}.pContainer .ruleList h2 svg, .pContainer .fieldList h2 svg {width: 15px;height: 15px;margin-top: 1px;}.pContainer
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 62 61 63 6b 75 70 46 6f 72 6d 44 6f 77 6e 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 20 62 20 7b 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 37 37 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 31 70 78 20 31 70 78 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 3b 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 Data Ascii: 2px !important;}.backupFormDown .select2-container--default .select2-selection--single .select2-selection__arrow b { border: solid #777 !important; border-width: 0 1px 1px 0 !important; display: inline-block; padding: 3px; transform: rotate
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 20 20 20 20 66 69 6c 6c 3a 20 23 65 61 31 63 32 33 3b 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 20 20 20 6c 65 66 74 3a 20 39 70 78 3b 20 20 20 20 74 6f 70 3a 20 39 70 78 3b 7d 2e 6c 6f 64 69 6e 67 41 6e 69 6d 61 74 65 57 72 61 70 20 7b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 70 78 3b 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 3b 7d 2e 6c 6f 64 69 6e 67 41 6e 69 6d 61 74 65 44 69 76 20 7b 20 20 20 20 77 69 64 74 68 3a 20 37 70 78 3b 20 20 20 20 68 65 69 67 68 74 3a 20 37 70 78 3b 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 20 Data Ascii: width: 20px; height: 20px; fill: #ea1c23; position: absolute; left: 9px; top: 9px;}.lodingAnimateWrap { display: flex; margin-left: 6px; margin-top: 2px;}.lodingAnimateDiv { width: 7px; height: 7px; border-radius: 50%;
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 30 3b 7d 2e 74 65 6d 70 46 72 6d 57 72 61 70 70 65 72 20 7b 09 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 09 09 6d 61 72 67 69 6e 3a 35 70 78 20 30 3b 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 74 65 6d 70 46 72 6d 57 72 61 70 70 65 72 20 2e 6c 61 62 65 6c 4e 61 6d 65 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 7d 2e 73 75 62 43 6f 6e 74 57 72 61 70 20 7b 09 6d 61 72 67 69 6e 3a 20 30 3b 09 70 61 64 64 69 6e 67 3a 20 30 3b 7d 2e 73 75 62 43 6f 6e 74 57 72 61 70 20 6c 69 7b 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 2e 74 6f 70 41 6c 69 67 6e 20 2e 74 65 6d 70 46 72 6d 57 72 61 70 70 65 72 20 2e 6c 61 62 65 6c 4e 61 6d 65 20 7b 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 09 64 Data Ascii: 0;}.tempFrmWrapper {padding:10px;margin:5px 0;position:relative;}.tempFrmWrapper .labelName{ position: relative; }.subContWrap {margin: 0;padding: 0;}.subContWrap li{ position: relative;}.topAlign .tempFrmWrapper .labelName {padding-bottom: 8px;d
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 72 20 7b 09 77 69 64 74 68 3a 33 30 25 3b 7d 2e 72 69 67 68 74 41 6c 69 67 6e 20 2e 73 69 64 65 42 79 53 69 64 65 20 2e 69 6d 67 55 70 6c 6f 61 64 54 79 70 65 20 2e 69 6d 67 43 68 6f 69 63 65 57 72 61 70 70 65 72 20 7b 09 77 69 64 74 68 3a 20 32 32 25 3b 7d 2e 61 64 64 65 64 49 6d 67 57 72 61 70 70 65 72 20 7b 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 2e 61 64 64 65 64 49 6d 67 57 72 61 70 70 65 72 20 62 20 7b 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 09 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 61 64 64 65 64 49 6d 67 57 72 61 70 70 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 61 64 64 65 64 49 6d 67 57 72 61 70 70 65 72 20 69 6e 70 75 Data Ascii: r {width:30%;}.rightAlign .sideBySide .imgUploadType .imgChoiceWrapper {width: 22%;}.addedImgWrapper {position: relative;}.addedImgWrapper b {display: block;padding: 5px 0 0px !important;}.addedImgWrapper input[type="checkbox"], .addedImgWrapper inpu
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 3b 09 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 25 3b 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 2e 75 70 6c 6f 61 64 65 64 43 6f 6e 74 20 2e 61 74 74 61 63 68 44 65 6c 65 74 65 20 7b 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 09 72 69 67 68 74 3a 20 39 70 78 3b 09 74 6f 70 3a 20 31 34 70 78 3b 7d 2e 75 70 6c 6f 61 64 65 64 43 6f 6e 74 20 2e 75 70 6c 6f 61 64 46 69 6c 65 54 69 74 6c 65 20 7b 09 6d 61 78 2d 77 69 64 74 68 3a 20 35 35 25 3b 7d 2e 75 70 6c 6f 61 64 65 64 43 6f 6e 74 20 2e 70 72 65 76 69 65 77 57 72 61 70 70 65 72 3a 68 6f 76 65 72 20 2e 6f 76 65 72 5f 49 63 6f 6e 20 7b 09 64 69 73 70 6c 61 Data Ascii: ;max-width: 60%;white-space: nowrap;text-overflow: ellipsis;overflow: hidden;}.uploadedCont .attachDelete {display: block;right: 9px;top: 14px;}.uploadedCont .uploadFileTitle {max-width: 55%;}.uploadedCont .previewWrapper:hover .over_Icon {displa
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 09 74 6f 70 3a 20 33 38 25 3b 09 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 09 68 65 69 67 68 74 3a 20 30 3b 09 77 69 64 74 68 3a 20 30 3b 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 09 72 69 67 68 74 3a 20 31 30 70 78 3b 7d 2e 6d 61 74 72 69 78 54 61 62 6c 65 2e 6d 61 74 72 69 78 4e 65 77 57 72 61 70 70 65 72 20 2e 7a 66 5f 73 65 6c 65 63 74 62 6f 78 3a 61 66 74 65 72 20 7b 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 3b 09 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 09 62 6f 72 64 Data Ascii: :before {top: 38%;border: solid transparent;content: " ";height: 0;width: 0;position: absolute;pointer-events: none;right: 10px;}.matrixTable.matrixNewWrapper .zf_selectbox:after {border-color: rgba(255, 255, 255, 0);border-top-color: #fff;bord
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 65 42 74 6e 20 7b 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2e 63 64 34 38 38 33 61 65 38 33 36 31 33 39 38 61 61 61 39 62 39 37 39 30 38 64 37 63 38 32 61 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 31 39 70 78 20 2d 32 32 70 78 3b 09 77 69 64 74 68 3a 20 31 34 70 78 3b 09 68 65 69 67 68 74 3a 20 31 34 70 78 3b 7d 2e 70 72 69 6e 74 49 63 6f 6e 20 7b 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2e 63 64 34 38 38 33 61 65 38 33 36 31 33 39 38 61 61 61 39 62 39 37 39 30 38 64 37 63 38 32 61 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 31 30 30 70 78 20 2d 31 31 36 70 78 3b 09 77 69 64 74 68 3a 20 31 38 70 78 3b 09 68 65 69 67 68 Data Ascii: eBtn {background: url(../images/sprite.cd4883ae8361398aaa9b97908d7c82ae.gif) no-repeat -19px -22px;width: 14px;height: 14px;}.printIcon {background: url(../images/sprite.cd4883ae8361398aaa9b97908d7c82ae.gif) no-repeat -100px -116px;width: 18px;heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	596	OUT	GET /forms/css/themes/custom.d603ed592e55f07d313b63112b930fbf.css HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:15 UTC	727	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:15 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 88667 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "04f4c958593f518c71b9b4e69a3182d6" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:51 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: e14f7d8aff46bcf83fa4fe99e9a48ca7 z-origin-id: ex1-62c0185839a1425c9d055f204cd54911 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:15 UTC	15657	IN	Data Raw: 2f 2a 20 24 49 64 3a 20 24 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 2f 2a 64 65 66 61 75 6c 74 54 68 65 6d 65 20 73 74 61 72 74 73 20 68 65 72 65 2a 2f 0a 0a 2e 62 61 63 6b 67 72 6f 75 6e 64 42 67 2c 20 2e 74 79 42 61 63 6b 67 72 6f 75 6e 64 42 67 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 0a 7d 0a 0a 2e 62 61 63 6b 67 72 6f 75 6e 64 53 65 63 42 67 7b 20 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 09 0a 2e 74 65 6d 70 6c 61 74 65 57 69 64 74 68 2c 20 2e 74 79 54 65 6d 70 6c 61 74 65 57 69 64 74 68 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 77 69 64 74 68 3a 38 30 30 70 78 3b 0a 09 Data Ascii: /* $Id: $ /@charset "UTF-8";/ CSS Document //defaultTheme starts here*/.backgroundBg, .tyBackgroundBg {background-color:#f5f5f5;}.backgroundSecBg{ margin:0;padding:0;}.templateWidth, .tyTemplateWidth {margin:0 auto;width:800px;
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 2d 6f 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 31 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 35 30 6d 73 20 32 30 30 6d 73 2c 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 33 35 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 38 2c 20 2d 31 2e 32 32 2c 20 30 2e 31 37 2c 20 31 2e 38 39 29 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 Data Ascii: border-radius: 50% !important; -o-border-radius: 50% !important; vertical-align: -1px; float: left; -webkit-transition: background-color 150ms 200ms, -webkit-transform 350ms cubic-bezier(0.78, -1.22, 0.17, 1.89); -moz-transition: b
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 2e 32 30 65 6d 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 2e 39 30 65 6d 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 2e 39 30 65 6d 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 63 65 6e Data Ascii: tion: relative; background-color: transparent; margin-top: 0.20em; width: 0.90em; height: 0.90em; -webkit-transform-origin: center; -ms-transform-origin: center; -moz-transform-origin: center; -o-transform-origin: cen
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 20 20 20 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 34 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 34 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 7d 0a 2e 74 65 6d 70 53 75 62 66 72 6d 57 72 61 70 70 65 72 20 2e 64 65 63 65 73 69 6f 6e 2e 7a 66 43 75 73 43 68 65 63 6b 62 6f 78 2e 6d 6f 64 65 6c 6f 6e 65 20 2e 63 75 73 74 6f 6d 43 68 65 63 6b 42 6f 78 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 74 65 6d 70 53 75 62 66 72 6d 57 72 61 70 70 65 72 20 2e 64 65 63 65 73 69 6f 6e 2e 7a 66 43 75 73 43 68 65 63 6b 62 6f 78 20 2e 63 75 73 74 6f 6d 43 68 65 63 6b 42 6f 78 20 6c 61 62 Data Ascii: left: auto; width: 14px; height: 14px; right: 4px; border-radius: 2px;}.tempSubfrmWrapper .decesion.zfCusCheckbox.modelone .customCheckBox label::before{margin-top: 0;}.tempSubfrmWrapper .decesion.zfCusCheckbox .customCheckBox lab
2024-10-17 12:27:16 UTC	16384	IN	Data Raw: 65 3d 22 72 61 64 69 6f 22 5d 20 2b 20 2e 63 75 73 43 68 6f 69 63 65 4c 61 62 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 32 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 2e 6d 6f 64 65 6c 6f 6e 65 2e 63 75 73 53 6d 61 6c 6c 20 2e 63 75 73 74 6f 6d 43 68 65 63 6b 42 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 2b 20 2e 63 75 73 43 68 6f 69 63 65 4c 61 62 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 Data Ascii: e="radio"] + .cusChoiceLabel:before { width: 22px; height: 22px; border-width: 1px; border-radius: 50%;}.modelone.cusSmall .customCheckBox input[type="checkbox"] + .cusChoiceLabel:before { width: 10px; height: 10px; border
2024-10-17 12:27:16 UTC	7474	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 20 30 20 30 20 37 70 78 3b 0a 7d 0a 2e 72 74 6c 57 72 61 70 70 65 72 20 2e 7a 66 72 61 64 69 6f 2e 6d 6f 64 65 6c 66 6f 75 72 2e 63 75 73 4c 61 72 67 65 20 2e 63 75 73 74 6f 6d 52 61 64 69 6f 42 74 6e 20 2e 63 75 73 43 68 6f 69 63 65 4c 61 62 65 6c 20 2e 63 68 65 63 6b 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 30 20 30 20 38 70 78 3b 0a 7d 0a 20 2e 72 74 6c 57 72 61 70 70 65 72 20 2e 7a 66 72 61 64 69 6f 2e 6d 6f 64 65 6c 66 69 76 65 2e 63 75 73 53 6d 61 6c 6c 20 2e 63 75 73 74 6f 6d 52 61 64 69 6f 42 74 6e 20 2e 63 75 73 43 68 6f 69 63 65 4c 61 62 65 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 20 30 20 37 70 78 3b 0a 7d 0a 20 2e 72 74 6c 57 72 61 70 Data Ascii: margin: 1px 0 0 7px;}.rtlWrapper .zfradio.modelfour.cusLarge .customRadioBtn .cusChoiceLabel .checker { margin: 3px 0 0 8px;} .rtlWrapper .zfradio.modelfive.cusSmall .customRadioBtn .cusChoiceLabel:before { margin: 0px 0 0 7px;} .rtlWrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	595	OUT	GET /forms/css/themes/media.b20eef0c12d546fd2a56cc4a7809f324.css HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:15 UTC	727	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:15 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 57733 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "c0faa65e6a518e7924c386e1815106ad" Content-Language: en-US Last-Modified: Fri, 20 Sep 2024 12:33:52 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: bf26dbb43814382d34130031f0d66542 z-origin-id: ex1-e74ccd42d4b64de1bdffe17af4f545ce Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:15 UTC	15657	IN	Data Raw: 2f 2a 20 24 49 64 3a 20 24 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 52 45 53 50 4f 4e 53 49 56 45 20 4c 41 59 4f 55 54 53 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 40 2d 77 65 62 6b 69 74 2d 76 69 65 77 70 6f 72 74 20 7b 0a 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 0a 7d 0a 40 2d 6d 6f 7a 2d 76 69 65 77 70 6f 72 74 20 7b 0a 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 77 69 64 74 68 Data Ascii: /* $Id: $ /@charset "UTF-8";/ CSS Document //==================================RESPONSIVE LAYOUTS===============================================*/@-webkit-viewport {width:device-width}@-moz-viewport {width:device-width}@-ms-viewport {width
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 6d 61 6c 6c 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 73 70 61 6e 2c 20 2e 72 69 67 68 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 73 6d 61 6c 6c 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 73 70 61 6e 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 7d 0a 2e 6c 65 66 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 73 6d 61 6c 6c 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 2e 73 61 6c 75 74 61 74 69 6f 6e 2c 20 2e 72 69 67 68 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 73 6d 61 6c 6c 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 2e 73 61 6c 75 Data Ascii: mall .twoType .salutationWrapper span, .rightAlign .namesmall .twoType .salutationWrapper span{width: 100%;margin-left:0; float: none;}.leftAlign .namesmall .twoType .salutationWrapper .salutation, .rightAlign .namesmall .twoType .salutationWrapper .salu
2024-10-17 12:27:15 UTC	16384	IN	Data Raw: 6e 61 6d 65 6d 65 64 69 75 6d 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 73 70 61 6e 2c 20 2e 72 69 67 68 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 6d 65 64 69 75 6d 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 73 70 61 6e 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 7d 0a 2e 6c 65 66 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 6d 65 64 69 75 6d 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 70 65 72 20 2e 73 61 6c 75 74 61 74 69 6f 6e 2c 20 2e 72 69 67 68 74 41 6c 69 67 6e 20 2e 6e 61 6d 65 6d 65 64 69 75 6d 20 2e 74 77 6f 54 79 70 65 20 2e 73 61 6c 75 74 61 74 69 6f 6e 57 72 61 70 Data Ascii: namemedium .twoType .salutationWrapper span, .rightAlign .namemedium .twoType .salutationWrapper span{width: 100%;margin-left:0; float: none;}.leftAlign .namemedium .twoType .salutationWrapper .salutation, .rightAlign .namemedium .twoType .salutationWrap
2024-10-17 12:27:16 UTC	9308	IN	Data Raw: 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 72 74 6c 57 72 61 70 70 65 72 20 2e 74 65 6d 70 46 72 6d 57 72 61 70 70 65 72 2e 6e 61 6d 65 2e 6e 61 6d 65 6c 61 72 67 65 2e 7a 66 53 65 6c 65 63 74 32 43 75 73 74 6f 6d 43 6f 6e 74 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 61 72 72 6f 77 20 62 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 31 30 25 3b 0a 7d 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 Data Ascii: float: right;}.rtlWrapper .tempFrmWrapper.name.namelarge.zfSelect2CustomCont .select2-container--default .select2-selection--single .select2-selection__arrow b { right: 0; left: 10%;}}@media only screen and (min-width:450px) and (max-widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	607	OUT	GET /forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:15 UTC	725	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:15 GMT Content-Type: text/css;charset=UTF-8 Content-Length: 974 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "62da83a5cdfc0d4389217db9abfbcb57" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:28 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: de42c684e4745dd1bf81335f82fd9880 z-origin-id: ex1-3fa47e174ace4a66aefbe871e89e53a2 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:15 UTC	974	IN	Data Raw: 2f 2a 20 24 49 64 3a 20 24 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 0a 0a 2f 2a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 20 7b 0a 0a 09 2e 62 61 63 6b 67 72 6f 75 6e 64 53 65 63 42 67 20 7b 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 7d 0a 0a 7d 0a 0a 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 7b 0a 0a 09 2e 62 61 63 6b 67 72 6f 75 6e 64 53 65 63 42 67 20 7b 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 7d 0a 0a 7d 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 Data Ascii: /* $Id: $ /@charset "UTF-8";/ CSS Document //@media only screen and (min-width:1024px) {.backgroundSecBg {padding:30px;}}@media only screen and (max-width:768px) {.backgroundSecBg {padding:30px;}}@media only screen and (min-widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:15 UTC	644	OUT	GET /forms/images/warning-info.607d397302b1f344f8d8df1258004046.png HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:16 UTC	712	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:16 GMT Content-Type: image/png Content-Length: 609 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "795e63fefb59c2bff5f31b157b6d01e9" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:56 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 2bbd5cf473b5c86bb514318c1c70001c z-origin-id: ex1-254579b296bf432fbdcc8bfd09178c7a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:16 UTC	609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 46 00 00 00 45 08 03 00 00 00 c0 64 60 18 00 00 00 30 50 4c 54 45 47 70 4c e2 55 38 e9 5c 46 e8 5c 46 e9 5c 45 ea 5d 45 ea 5d 45 ef 5f 3f ea 5c 45 ea 5c 45 ff 00 00 ea 5d 43 eb 5b 43 ff 3f 3f ea 5b 47 e9 5c 44 50 56 dc ed 00 00 00 10 74 52 4e 53 00 09 24 50 8f e0 ff 10 63 c3 01 31 40 04 19 a8 e6 64 3c ab 00 00 01 d0 49 44 41 54 78 da d5 98 e9 9a 85 20 08 86 73 2b b7 ec fe ef 76 e6 d8 42 13 21 e9 71 36 7e d5 13 bd 7d 28 29 38 fc 1b 13 52 69 33 ae 66 b4 92 a2 81 31 59 37 5e cd d9 a9 8a e1 c3 c6 c0 a4 e8 1f 43 a2 19 69 33 0f 41 12 20 5a 85 69 b5 a0 34 80 24 0f 99 f5 ee 6c d3 45 64 b2 66 c7 cf 0c 25 6d 9e 4e fa bb 70 a5 db be 91 8a 94 b8 43 48 8f 1d 14 0b 14 7b b8 f0 9f b2 0c 65 11 5c 5a 2e 45 8e 5d 9f Data Ascii: PNGIHDRFEd`0PLTEGpLU8\F\F\E]E]E_?\E\E]C[C??[G\DPVtRNS$Pc1@d<IDATx s+vB!q6~}()8Ri3f1Y7^Ci3A Zi4$lEdf%mNpCH{e\Z.E]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:16 UTC	638	OUT	GET /forms/images/loader.79de1b954774690fff0e7345d82faa25.gif HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:16 UTC	713	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:16 GMT Content-Type: image/gif Content-Length: 3322 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "292a10fec250aa6afd95d396510c59c5" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:40 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 12ce4ff7f1fa078d27d0c1f23d9e3235 z-origin-id: ex1-78a0ce49b4c44dce80bfa7206317c976 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:16 UTC	3322	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f7 00 00 03 03 03 06 06 06 1b 1b 1b 34 34 34 3d 3d 3d 4d 4d 4d 55 55 55 56 56 56 59 59 59 61 61 61 67 67 67 68 68 68 6c 6c 6c 7c 7c 7c 80 80 80 86 86 86 89 89 89 90 90 90 96 96 96 9a 9a 9a 9d 9d 9d a3 a3 a3 a6 a6 a6 ab ab ab af af af b2 b2 b2 b5 b5 b5 bb bb bb bc bc bc c1 c1 c1 ca ca ca cd cd cd d1 d1 d1 d5 d5 d5 d9 d9 d9 dc dc dc e3 e3 e3 e4 e4 e4 eb eb eb ed ed ed f0 f0 f0 f4 f4 f4 f8 f8 f8 00 00 00 1d 1d 1d 21 21 21 27 27 27 29 29 29 35 35 35 42 42 42 4e 4e 4e 54 54 54 5d 5d 5d 6a 6a 6a 74 74 74 7b 7b 7b 7f 7f 7f 85 85 85 8b 8b 8b 8c 8c 8c 91 91 91 95 95 95 98 98 98 a1 a1 a1 ae ae ae b1 b1 b1 b6 b6 b6 b8 b8 b8 c2 c2 c2 c7 c7 c7 c8 c8 c8 d2 d2 d2 d6 d6 d6 da da da df df df e0 e0 e0 e7 e7 e7 e8 e8 e8 ef ef ef f7 f7 f7 f9 f9 Data Ascii: GIF89a444===MMMUUUVVVYYYaaaggghhhlll\|\|\|!!!''')))555BBBNNNTTT]]]jjjttt{{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:17 UTC	404	OUT	GET /forms/images/warning-info.607d397302b1f344f8d8df1258004046.png HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:17 UTC	712	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:17 GMT Content-Type: image/png Content-Length: 609 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "795e63fefb59c2bff5f31b157b6d01e9" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:56 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: b827206b9f360ff2b616eadda658af8b z-origin-id: ex1-254579b296bf432fbdcc8bfd09178c7a Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:17 UTC	609	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 46 00 00 00 45 08 03 00 00 00 c0 64 60 18 00 00 00 30 50 4c 54 45 47 70 4c e2 55 38 e9 5c 46 e8 5c 46 e9 5c 45 ea 5d 45 ea 5d 45 ef 5f 3f ea 5c 45 ea 5c 45 ff 00 00 ea 5d 43 eb 5b 43 ff 3f 3f ea 5b 47 e9 5c 44 50 56 dc ed 00 00 00 10 74 52 4e 53 00 09 24 50 8f e0 ff 10 63 c3 01 31 40 04 19 a8 e6 64 3c ab 00 00 01 d0 49 44 41 54 78 da d5 98 e9 9a 85 20 08 86 73 2b b7 ec fe ef 76 e6 d8 42 13 21 e9 71 36 7e d5 13 bd 7d 28 29 38 fc 1b 13 52 69 33 ae 66 b4 92 a2 81 31 59 37 5e cd d9 a9 8a e1 c3 c6 c0 a4 e8 1f 43 a2 19 69 33 0f 41 12 20 5a 85 69 b5 a0 34 80 24 0f 99 f5 ee 6c d3 45 64 b2 66 c7 cf 0c 25 6d 9e 4e fa bb 70 a5 db be 91 8a 94 b8 43 48 8f 1d 14 0b 14 7b b8 f0 9f b2 0c 65 11 5c 5a 2e 45 8e 5d 9f Data Ascii: PNGIHDRFEd`0PLTEGpLU8\F\F\E]E]E_?\E\E]C[C??[G\DPVtRNS$Pc1@d<IDATx s+vB!q6~}()8Ri3f1Y7^Ci3A Zi4$lEdf%mNpCH{e\Z.E]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:17 UTC	398	OUT	GET /forms/images/loader.79de1b954774690fff0e7345d82faa25.gif HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	713	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:17 GMT Content-Type: image/gif Content-Length: 3322 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "292a10fec250aa6afd95d396510c59c5" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 09:59:40 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 5c2a511da537c3549bbfe50f532fb72a z-origin-id: ex1-78a0ce49b4c44dce80bfa7206317c976 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	3322	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f7 00 00 03 03 03 06 06 06 1b 1b 1b 34 34 34 3d 3d 3d 4d 4d 4d 55 55 55 56 56 56 59 59 59 61 61 61 67 67 67 68 68 68 6c 6c 6c 7c 7c 7c 80 80 80 86 86 86 89 89 89 90 90 90 96 96 96 9a 9a 9a 9d 9d 9d a3 a3 a3 a6 a6 a6 ab ab ab af af af b2 b2 b2 b5 b5 b5 bb bb bb bc bc bc c1 c1 c1 ca ca ca cd cd cd d1 d1 d1 d5 d5 d5 d9 d9 d9 dc dc dc e3 e3 e3 e4 e4 e4 eb eb eb ed ed ed f0 f0 f0 f4 f4 f4 f8 f8 f8 00 00 00 1d 1d 1d 21 21 21 27 27 27 29 29 29 35 35 35 42 42 42 4e 4e 4e 54 54 54 5d 5d 5d 6a 6a 6a 74 74 74 7b 7b 7b 7f 7f 7f 85 85 85 8b 8b 8b 8c 8c 8c 91 91 91 95 95 95 98 98 98 a1 a1 a1 ae ae ae b1 b1 b1 b6 b6 b6 b8 b8 b8 c2 c2 c2 c7 c7 c7 c8 c8 c8 d2 d2 d2 d6 d6 d6 da da da df df df e0 e0 e0 e7 e7 e7 e8 e8 e8 ef ef ef f7 f7 f7 f9 f9 Data Ascii: GIF89a444===MMMUUUVVVYYYaaaggghhhlll\|\|\|!!!''')))555BBBNNNTTT]]]jjjttt{{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:17 UTC	580	OUT	GET /forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	734	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:17 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 89265 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "a08f9ae077288cdd836ccf6cfee07e4e" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:49 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 63fa9f88f43329b844a7295fb0ac4b34 z-origin-id: ex1-c47e118b25ee4a9e8d0ebbca75211d9e Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	15650	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?win
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 66 6f 72 28 3b 6c 3b 29 7b 66 6f 72 28 61 3d 65 3b 61 3d 61 5b 6c 5d 3b 29 Data Ascii: t"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){for(;l;){for(a=e;a=a[l];)
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 Data Ascii: ng"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f Data Ascii: :u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.remo
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e Data Ascii: speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.
2024-10-17 12:27:18 UTC	8079	IN	Data Raw: 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d Data Ascii: }),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	810	OUT	GET /infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:18 UTC	372	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: application/octet;charset=UTF-8 Content-Length: 22927 Connection: close X-Frame-Options: DENY X-Download-Options: noopen Content-Disposition: attachment;filename="open.png" Pragma: public Cache-Control: max-age=0 Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:18 UTC	16012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 83 00 00 02 17 08 06 00 00 00 26 17 8b 1b 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0b 00 00 8c 11 00 00 fc 7e 00 00 84 c1 00 00 84 d5 00 00 f4 a4 00 00 3a 52 00 00 16 8f 88 a1 1a 68 00 00 18 2c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 58 c3 ad 79 79 38 55 df f7 ff 3e e7 8e 2e d7 74 cd f3 3c cf f3 90 79 ce 98 99 88 6b 9e e3 ba 84 34 18 52 a1 81 a4 44 29 64 2c 1a 84 a4 84 50 91 0c 85 42 69 10 a2 52 48 19 f2 3d a8 de ef cf e7 f7 fb e7 fb 3c df fd 3c e7 9c 97 b5 d7 5e fb b5 f6 5e 7b 58 2e 00 dc 1c e4 c8 c8 30 98 11 80 f0 08 2a c5 de cc 50 c0 d5 cd 5d 00 37 0e 20 80 07 6c 80 05 a8 90 7d a3 23 0d ec ec ac 00 52 fe 7c ff b3 7c 1f 44 b4 91 32 20 bb 61 0b fc Data Ascii: PNGIHDR&gAMA\|Q cHRM~:Rh,iCCPICC ProfileXyy8U>.t<yk4RD)d,PBiRH=<<^^{X.0*P]7 l}#R\|\|D2 a
2024-10-17 12:27:18 UTC	6915	IN	Data Raw: f9 6f 2a 8e 59 0a 5c a7 8c 19 d0 66 e0 95 2f fd 66 41 11 62 2b 0b 15 ef fb b3 e3 cb 79 f2 da 93 c2 cc 49 23 fb 96 35 59 f7 2c dc 58 59 db 28 7d 2e 7f f7 d8 ba b2 af ec a6 6d 0d 65 60 1c 31 a0 57 ab f9 f9 e6 af d9 1a 37 3f b2 3a 3e f5 cb b9 e5 40 41 8b aa a6 12 49 21 f9 33 97 4d 8e 67 9e 30 b4 7c ae 27 92 f6 79 f2 e8 be e5 73 de bb a8 f5 bc 9f a9 99 f1 9d 45 c0 bb 75 c6 da 72 a4 ce 34 09 7c e3 a4 f1 cd 3b 4c d3 58 fc bc 38 2e 9f ba 79 6e 7c fb ae c7 cb 29 63 5a aa 29 02 e0 e7 fe f2 e4 38 77 fc c0 7d 7e 59 90 26 8f ff af 69 cb 2a 4b 8d c6 14 c7 3e bd 8f fb 92 9a dc a6 3e 91 77 cc 5e d7 aa c6 3a 7d 9f 70 5f f1 7a ba 76 ed 5a 8e 60 da de 28 b6 00 b4 af cb 9e 83 1d d6 0d c8 d2 c8 7f fc 75 e5 d6 d1 e1 75 c5 09 e6 67 2e 9b 14 5b b6 ef 8a 57 7c fd be 36 a3 62 1e Data Ascii: oY\f/fAb+yI#5Y,XY(}.me`1W7?:>@AI!3Mg0\|'ysEur4\|;LX8.yn\|)cZ)8w}~Y&iK>>w^:}p_zvZ`(uug.[W\|6b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	588	OUT	GET /forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 143468 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "19b645f10467ef6b8c188b1757726b38" Content-Language: en-US Last-Modified: Fri, 30 Aug 2024 07:22:57 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: b0a081677cd5370796c336bac079c776 z-origin-id: ex1-2dc93f7c8aa84d318520b9f6a496b612 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	15649	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 66 61 63 74 6f 72 79 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 61 63 74 6f 72 79 29 3a 66 61 63 74 6f 72 79 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 75 75 69 64 2c 72 65 6d 6f 76 65 44 61 74 61 2c 65 76 65 6e 74 54 79 70 65 2c 6f 72 69 67 3b 66 75 6e 63 74 69 6f 6e 20 66 6f 63 75 73 61 62 6c 65 28 65 6c 65 6d 65 6e 74 2c 69 73 54 61 62 49 6e 64 65 78 4e 6f 74 4e 61 4e 29 7b 76 61 72 20 6d 61 70 2c 6d 61 70 4e 61 6d 65 2c 69 6d 67 2c 6e 6f 64 65 4e 61 6d 65 3d 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 Data Ascii: !function(factory){"function"==typeof define&&define.amd?define(["jquery"],factory):factory(jQuery)}(function($){var uuid,removeData,eventType,orig;function focusable(element,isTabIndexNotNaN){var map,mapName,img,nodeName=element.nodeName.toLowerCase();re
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 72 65 74 75 72 6e 20 74 68 61 74 2e 5f 6d 6f 75 73 65 4d 6f 76 65 28 65 76 65 6e 74 29 7d 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 72 65 74 75 72 6e 20 74 68 61 74 2e 5f 6d 6f 75 73 65 55 70 28 65 76 65 6e 74 29 7d 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 44 65 6c 65 67 61 74 65 29 2e 62 69 6e 64 28 22 6d 6f 75 73 65 75 70 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 29 2c 65 76 65 6e 74 2e 70 Data Ascii: egate=function(event){return that._mouseMove(event)},this._mouseUpDelegate=function(event){return that._mouseUp(event)},this.document.bind("mousemove."+this.widgetName,this._mouseMoveDelegate).bind("mouseup."+this.widgetName,this._mouseUpDelegate),event.p
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 72 3d 24 28 5b 5d 29 2c 69 6e 70 75 74 2e 68 61 73 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 7c 7c 28 74 68 69 73 2e 5f 61 74 74 61 63 68 6d 65 6e 74 73 28 69 6e 70 75 74 2c 69 6e 73 74 29 2c 69 6e 70 75 74 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 2e 6b 65 79 64 6f 77 6e 28 74 68 69 73 2e 5f 64 6f 4b 65 79 44 6f 77 6e 29 2e 6b 65 79 70 72 65 73 73 28 74 68 69 73 2e 5f 64 6f 4b 65 79 50 72 65 73 73 29 2e 6b 65 79 75 70 28 74 68 69 73 2e 5f 64 6f 4b 65 79 55 70 29 2c 74 68 69 73 2e 5f 61 75 74 6f 53 69 7a 65 28 69 6e 73 74 29 2c 24 2e 64 61 74 61 28 74 61 72 67 65 74 2c 22 64 61 74 65 70 69 63 6b 65 72 22 2c 69 6e 73 74 29 2c 69 6e 73 74 2e 73 65 74 74 69 6e 67 73 2e Data Ascii: r=$([]),input.hasClass(this.markerClassName)\|\|(this._attachments(input,inst),input.addClass(this.markerClassName).keydown(this._doKeyDown).keypress(this._doKeyPress).keyup(this._doKeyUp),this._autoSize(inst),$.data(target,"datepicker",inst),inst.settings.
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 65 70 69 63 6b 65 72 2e 5f 6d 61 69 6e 44 69 76 49 64 7c 7c 30 21 3d 3d 24 74 61 72 67 65 74 2e 70 61 72 65 6e 74 73 28 22 23 22 2b 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 6d 61 69 6e 44 69 76 49 64 29 2e 6c 65 6e 67 74 68 7c 7c 24 74 61 72 67 65 74 2e 68 61 73 43 6c 61 73 73 28 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 7c 7c 24 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 7c 7c 21 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 64 61 74 65 70 69 63 6b 65 72 53 68 6f 77 69 6e 67 7c 7c 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 69 6e 44 69 61 6c 6f 67 26 26 24 2e 62 6c 6f 63 6b 55 49 29 26 26 28 21 24 74 Data Ascii: epicker._mainDivId\|\|0!==$target.parents("#"+$.datepicker._mainDivId).length\|\|$target.hasClass($.datepicker.markerClassName)\|\|$target.closest("."+$.datepicker._triggerClass).length\|\|!$.datepicker._datepickerShowing\|\|$.datepicker._inDialog&&$.blockUI)&&(!$t
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 65 74 28 69 6e 73 74 2c 22 6d 6f 6e 74 68 4e 61 6d 65 73 53 68 6f 72 74 22 29 2c 62 65 66 6f 72 65 53 68 6f 77 44 61 79 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 62 65 66 6f 72 65 53 68 6f 77 44 61 79 22 29 2c 73 68 6f 77 4f 74 68 65 72 4d 6f 6e 74 68 73 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 73 68 6f 77 4f 74 68 65 72 4d 6f 6e 74 68 73 22 29 2c 73 65 6c 65 63 74 4f 74 68 65 72 4d 6f 6e 74 68 73 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 73 65 6c 65 63 74 4f 74 68 65 72 4d 6f 6e 74 68 73 22 29 2c 64 65 66 61 75 6c 74 44 61 74 65 3d 74 68 69 73 2e 5f 67 65 74 44 65 66 61 75 6c 74 44 61 74 65 28 69 6e 73 74 29 2c 68 74 6d 6c 3d 22 22 2c 72 6f 77 3d 30 3b 72 6f 77 3c 6e 75 6d 4d 6f 6e 74 68 73 5b 30 5d 3b 72 6f 77 2b 2b 29 7b 66 Data Ascii: et(inst,"monthNamesShort"),beforeShowDay=this._get(inst,"beforeShowDay"),showOtherMonths=this._get(inst,"showOtherMonths"),selectOtherMonths=this._get(inst,"selectOtherMonths"),defaultDate=this._getDefaultDate(inst),html="",row=0;row<numMonths[0];row++){f
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 48 61 73 68 29 7d 2c 5f 63 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 2c 69 6e 64 65 78 29 7b 69 66 28 21 74 68 69 73 2e 5f 6b 65 79 53 6c 69 64 69 6e 67 26 26 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 6c 69 64 69 6e 67 29 7b 76 61 72 20 75 69 48 61 73 68 3d 7b 68 61 6e 64 6c 65 3a 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 69 6e 64 65 78 5d 2c 76 61 6c 75 65 3a 74 68 69 73 2e 76 61 6c 75 65 28 29 7d 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 73 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 26 26 28 75 69 48 61 73 68 2e 76 61 6c 75 65 3d 74 68 69 73 2e 76 61 6c 75 65 73 28 69 6e 64 65 78 29 2c 75 69 48 61 73 68 2e 76 61 6c 75 65 73 3d 74 68 69 73 2e 76 61 6c 75 65 73 28 29 29 2c 74 68 69 73 2e Data Ascii: Hash)},_change:function(event,index){if(!this._keySliding&&!this._mouseSliding){var uiHash={handle:this.handles[index],value:this.value()};this.options.values&&this.options.values.length&&(uiHash.value=this.values(index),uiHash.values=this.values()),this.
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3f 65 6c 65 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 6c 65 6d 2c 6e 75 6c 6c 29 3a 65 6c 65 6d 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2c 73 74 79 6c 65 73 3d 7b 7d 3b 69 66 28 73 74 79 6c 65 26 26 73 74 79 6c 65 2e 6c 65 6e 67 74 68 26 26 73 74 79 6c 65 5b 30 5d 26 26 73 74 79 6c 65 5b 73 74 79 6c 65 5b 30 5d 5d 29 66 6f 72 28 6c 65 6e 3d 73 74 79 6c 65 2e 6c 65 6e 67 74 68 3b 6c 65 6e 2d 2d 3b 29 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 74 79 6c 65 5b 6b 65 79 3d 73 74 79 6c 65 5b 6c 65 6e 5d 5d 26 26 28 73 74 79 6c 65 73 5b 24 2e 63 61 6d 65 6c 43 61 73 65 28 6b 65 79 Data Ascii: .ownerDocument.defaultView?elem.ownerDocument.defaultView.getComputedStyle(elem,null):elem.currentStyle,styles={};if(style&&style.length&&style[0]&&style[style[0]])for(len=style.length;len--;)"string"==typeof style[key=style[len]]&&(styles[$.camelCase(key
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 32 2c 64 69 61 6c 43 6f 64 65 2c 70 72 69 6f 72 69 74 79 29 7b 64 69 61 6c 43 6f 64 65 20 69 6e 20 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 7c 7c 28 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 5b 64 69 61 6c 43 6f 64 65 5d 3d 5b 5d 29 3b 76 61 72 20 69 6e 64 65 78 3d 70 72 69 6f 72 69 74 79 7c 7c 30 3b 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 5b 64 69 61 6c 43 6f 64 65 5d 5b 69 6e 64 65 78 5d 3d 69 73 6f 32 7d 2c 5f 70 72 6f 63 65 73 73 41 6c 6c 43 6f 75 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 43 6f 75 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6c 6f 77 65 72 43 61 73 65 4f 6e 6c 79 43 6f 75 6e 74 72 69 65 73 3d 74 68 69 73 2e 6f 70 74 69 6f Data Ascii: 2,dialCode,priority){dialCode in this.countryCodes\|\|(this.countryCodes[dialCode]=[]);var index=priority\|\|0;this.countryCodes[dialCode][index]=iso2},_processAllCountries:function(){if(this.options.onlyCountries.length){var lowerCaseOnlyCountries=this.optio
2024-10-17 12:27:19 UTC	13131	IN	Data Raw: 6e 75 6d 65 72 69 63 43 68 61 72 73 2e 6c 65 6e 67 74 68 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 64 69 61 6c 43 6f 64 65 7d 2c 5f 67 65 74 46 75 6c 6c 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 61 6c 3d 24 2e 74 72 69 6d 28 74 68 69 73 2e 74 65 6c 49 6e 70 75 74 2e 76 61 6c 28 29 29 2c 64 69 61 6c 43 6f 64 65 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 43 6f 75 6e 74 72 79 44 61 74 61 2e 64 69 61 6c 43 6f 64 65 2c 6e 75 6d 65 72 69 63 56 61 6c 3d 74 68 69 73 2e 5f 67 65 74 4e 75 6d 65 72 69 63 28 76 61 6c 29 2c 6e 6f 72 6d 61 6c 69 7a 65 64 56 61 6c 3d 22 31 22 3d 3d 6e 75 6d 65 72 69 63 56 61 6c 2e 63 68 61 72 41 74 28 30 29 3f 6e 75 6d 65 72 69 63 56 61 6c 3a 22 31 22 2b 6e 75 6d 65 72 69 63 56 61 6c 3b 72 65 74 75 72 6e 28 Data Ascii: numericChars.length))break}return dialCode},_getFullNumber:function(){var val=$.trim(this.telInput.val()),dialCode=this.selectedCountryData.dialCode,numericVal=this._getNumeric(val),normalizedVal="1"==numericVal.charAt(0)?numericVal:"1"+numericVal;return(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	582	OUT	GET /forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 152732 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "a54bd9359de4d4853020af3b56295683" Content-Language: en-US Last-Modified: Thu, 03 Oct 2024 05:46:09 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 9dd40746d6aec86a9b19bb013288edf2 z-origin-id: ex1-a57a59d5e26a4a2d8f0295fa255596cd Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	15649	IN	Data Raw: 76 61 72 20 5a 46 43 6f 6e 73 74 61 6e 74 73 3d 7b 53 41 56 45 5f 52 45 43 4f 52 44 5f 53 54 41 54 55 53 3a 31 7d 2c 5a 46 48 74 74 70 3d 7b 47 45 54 3a 22 47 45 54 22 2c 50 4f 53 54 3a 22 50 4f 53 54 22 2c 44 45 4c 45 54 45 3a 22 44 45 4c 45 54 45 22 2c 50 55 54 3a 22 50 55 54 22 7d 2c 5a 46 4d 69 6d 65 54 79 70 65 3d 7b 41 50 50 4c 49 43 41 54 49 4f 4e 5f 4a 53 4f 4e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 5a 46 46 6f 72 6d 46 69 65 6c 64 3d 7b 41 44 44 52 45 53 53 3a 7b 4d 41 50 5f 49 4e 46 4f 3a 22 5f 4d 61 70 5f 49 6e 66 6f 22 2c 43 4f 55 4e 54 52 59 3a 7b 4b 45 59 3a 22 5f 43 6f 75 6e 74 72 79 22 7d 2c 53 54 41 54 45 3a 7b 4b 45 59 3a 22 5f 52 65 67 69 6f 6e 22 7d 2c 43 49 54 59 3a 7b 4b 45 59 3a 22 5f 43 69 74 79 22 7d 2c 41 Data Ascii: var ZFConstants={SAVE_RECORD_STATUS:1},ZFHttp={GET:"GET",POST:"POST",DELETE:"DELETE",PUT:"PUT"},ZFMimeType={APPLICATION_JSON:"application/json"},ZFFormField={ADDRESS:{MAP_INFO:"_Map_Info",COUNTRY:{KEY:"_Country"},STATE:{KEY:"_Region"},CITY:{KEY:"_City"},A
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 75 72 6e 20 64 61 74 65 76 61 6c 7d 2c 74 68 69 73 2e 63 6f 6e 76 65 72 74 54 6f 47 65 6e 65 72 61 6c 44 61 74 65 54 69 6d 65 5f 64 64 4d 4d 4d 79 79 79 79 68 68 6d 6d 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 74 69 6d 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 76 61 6c 75 65 21 3d 52 65 73 70 6f 6e 73 65 4b 65 79 2e 55 4e 44 45 46 49 4e 45 44 26 26 22 22 21 3d 76 61 6c 75 65 29 7b 76 61 72 20 73 70 6c 69 74 49 6e 64 65 78 3d 76 61 6c 75 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 29 2c 64 61 74 65 3d 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 73 70 6c 69 74 49 6e 64 65 78 29 2c 74 69 6d 65 3d 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 73 70 6c 69 74 49 6e 64 65 78 2b 31 29 3b 64 61 74 65 3d Data Ascii: urn dateval},this.convertToGeneralDateTime_ddMMMyyyyhhmm=function(value,timeFormat,dateLocale){if(typeof value!=ResponseKey.UNDEFINED&&""!=value){var splitIndex=value.indexOf(" "),date=value.substring(0,splitIndex),time=value.substring(splitIndex+1);date=
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 66 28 6e 75 6c 6c 21 3d 65 6d 61 69 6c 56 61 6c 75 65 26 26 22 22 3d 3d 21 65 6d 61 69 6c 56 61 6c 75 65 29 7b 76 61 72 20 65 6d 61 69 6c 41 72 72 61 79 3d 65 6d 61 69 6c 56 61 6c 75 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 6d 61 69 6c 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 67 65 74 45 6d 61 69 6c 52 65 67 65 78 28 29 2e 74 65 73 74 28 24 2e 74 72 69 6d 28 65 6d 61 69 6c 41 72 72 61 79 5b 69 5d 29 29 7c 7c 28 63 68 65 63 6b 3d 31 29 7d 72 65 74 75 72 6e 20 30 3d 3d 63 68 65 63 6b 7d 72 65 74 75 72 6e 21 30 7d 2c 74 68 69 73 2e 76 61 6c 69 64 61 74 65 4c 61 74 69 74 75 64 65 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 61 74 69 74 75 64 65 29 7b 72 65 74 75 72 6e 21 21 2f 5e 28 28 5c 2d 7c 5c 2b 29 7b 30 Data Ascii: f(null!=emailValue&&""==!emailValue){var emailArray=emailValue.split(",");for(i=0;i<emailArray.length;i++){getEmailRegex().test($.trim(emailArray[i]))\|\|(check=1)}return 0==check}return!0},this.validateLatitudeFormat=function(latitude){return!!/^((\-\|\+){0
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 75 72 72 65 6e 74 44 61 74 65 45 6c 65 6d 5b 31 5d 2c 63 75 72 72 65 6e 74 44 61 74 65 45 6c 65 6d 5b 30 5d 29 7d 65 6c 73 65 20 69 66 28 35 3d 3d 6c 69 6d 69 74 54 79 70 65 29 69 66 28 74 79 70 65 6f 66 20 6d 69 6e 4c 69 6d 69 74 21 3d 52 65 73 70 6f 6e 73 65 4b 65 79 2e 55 4e 44 45 46 49 4e 45 44 26 26 22 22 21 3d 6d 69 6e 4c 69 6d 69 74 29 7b 76 61 72 20 64 61 74 65 45 6c 65 6d 3d 5a 46 55 74 69 6c 2e 73 70 6c 69 74 44 61 74 65 56 61 6c 28 6d 69 6e 4c 69 6d 69 74 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 3b 6d 69 6e 44 74 4c 69 6d 69 74 3d 6e 65 77 20 44 61 74 65 28 64 61 74 65 45 6c 65 6d 5b 32 5d 2c 64 61 74 65 45 6c 65 6d 5b 31 5d 2c 64 61 74 65 45 6c 65 6d 5b 30 5d 29 7d 65 6c 73 65 20 6d 69 6e 44 74 4c 69 6d 69 74 3d 67 Data Ascii: urrentDateElem[1],currentDateElem[0])}else if(5==limitType)if(typeof minLimit!=ResponseKey.UNDEFINED&&""!=minLimit){var dateElem=ZFUtil.splitDateVal(minLimit,dateFormat,dateLocale);minDtLimit=new Date(dateElem[2],dateElem[1],dateElem[0])}else minDtLimit=g
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 46 6f 72 6d 61 74 2e 48 4f 55 52 53 5f 31 32 2e 43 4f 44 45 7c 7c 22 64 64 2d 6d 6d 6d 2d 79 79 79 79 22 21 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 22 64 64 2d 6d 6d 6d 6d 2d 79 79 79 79 22 21 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 22 6d 6d 6d 6d 2d 64 64 2d 79 79 79 79 22 21 3d 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 28 73 70 6c 69 74 44 61 74 65 54 69 6d 65 49 6e 64 65 78 3d 5a 46 55 74 69 6c 2e 67 65 74 53 70 6c 69 74 49 6e 64 65 78 6f 66 44 61 74 65 54 69 6d 65 28 6d 69 6e 4c 69 6d 69 74 29 29 3b 64 61 74 65 45 6c 65 6d 3d 5a 46 55 74 69 6c 2e 73 70 6c 69 74 44 61 74 65 56 61 6c 28 6d 69 6e 4c 69 6d 69 74 2e 73 75 62 73 74 72 69 Data Ascii: Format.HOURS_12.CODE\|\|"dd-mmm-yyyy"!=dateFormat.toLowerCase()&&"dd-mmmm-yyyy"!=dateFormat.toLowerCase()&&"mmmm-dd-yyyy"!==dateFormat.toLowerCase()\|\|(splitDateTimeIndex=ZFUtil.getSplitIndexofDateTime(minLimit));dateElem=ZFUtil.splitDateVal(minLimit.substri
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 72 69 67 67 65 72 46 6f 72 6d 52 65 73 69 7a 65 28 64 69 66 66 48 67 68 74 2c 69 66 72 61 6d 65 53 63 72 6f 6c 6c 52 65 73 65 74 29 7b 76 61 72 20 74 65 6d 70 48 65 69 67 68 74 3d 30 3b 64 69 66 66 48 67 68 74 26 26 28 74 65 6d 70 48 65 69 67 68 74 3d 64 69 66 66 48 67 68 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 73 69 7a 65 66 6f 72 6d 22 29 26 26 31 3d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 73 69 7a 65 66 6f 72 6d 22 29 2e 76 61 6c 75 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 7a 66 52 65 73 69 7a 65 46 6f 72 6d 49 66 72 61 6d 65 26 26 7a 66 52 65 73 69 7a 65 46 6f 72 6d 49 66 72 61 6d 65 28 74 65 6d 70 Data Ascii: }}function triggerFormResize(diffHght,iframeScrollReset){var tempHeight=0;diffHght&&(tempHeight=diffHght),document.getElementById("resizeform")&&1==document.getElementById("resizeform").value&&"function"==typeof zfResizeFormIframe&&zfResizeFormIframe(temp
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 66 69 6e 64 28 22 73 65 6c 65 63 74 5b 6e 61 6d 65 3d 73 6c 6f 74 73 5d 22 29 3b 24 28 73 65 6c 65 63 74 49 6e 54 69 6d 65 50 69 63 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 46 55 74 69 6c 2e 73 65 74 44 61 74 65 54 69 6d 65 28 63 6c 69 65 6e 74 44 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 2c 74 69 6d 65 46 6f 72 6d 61 74 29 7d 29 2c 24 28 73 65 6c 65 63 74 49 6e 54 69 6d 65 50 69 63 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 73 65 6c 65 63 74 32 28 7b 74 68 65 6d 65 3a 22 64 65 66 61 75 6c 74 20 6c 69 76 65 44 61 74 65 54 69 6d 65 44 72 6f 70 64 6f 77 6e 20 6c 69 76 65 54 69 6d 65 52 61 6e 67 65 57 69 64 74 68 20 64 72 6f 70 64 6f 77 Data Ascii: kerDropdown).find("select[name=slots]");$(selectInTimePickerDropdown).on("change",function(){ZFUtil.setDateTime(clientDateFormat,dateLocale,timeFormat)}),$(selectInTimePickerDropdown).select2({theme:"default liveDateTimeDropdown liveTimeRangeWidth dropdow
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 2c 32 36 36 3a 22 50 45 4e 22 2c 32 36 37 3a 22 50 48 50 22 2c 32 36 38 3a 22 50 4c 4e 22 2c 32 36 39 3a 22 50 54 45 22 2c 32 37 30 3a 22 51 41 52 22 2c 32 37 31 3a 22 52 4f 4e 22 2c 32 37 32 3a 22 52 4f 4c 22 2c 32 37 33 3a 22 52 55 42 22 2c 32 37 34 3a 22 53 41 52 22 2c 32 37 35 3a 22 53 47 44 22 2c 32 37 36 3a 22 53 4b 4b 22 2c 32 37 37 3a 22 53 49 54 22 2c 32 37 38 3a 22 5a 41 52 22 2c 32 37 39 3a 22 4b 52 57 22 2c 32 38 30 3a 22 45 53 50 22 2c 32 38 31 3a 22 4c 4b 52 22 2c 32 38 32 3a 22 53 44 44 22 2c 32 38 33 3a 22 53 45 4b 22 2c 32 38 34 3a 22 43 48 46 22 2c 32 38 35 3a 22 54 57 44 22 2c 32 38 36 3a 22 54 48 42 22 2c 32 38 37 3a 22 54 54 44 22 2c 32 38 38 3a 22 54 4e 44 22 2c 32 39 30 3a 22 41 45 44 22 2c 32 39 31 3a 22 47 42 50 22 2c 32 39 32 3a Data Ascii: ,266:"PEN",267:"PHP",268:"PLN",269:"PTE",270:"QAR",271:"RON",272:"ROL",273:"RUB",274:"SAR",275:"SGD",276:"SKK",277:"SIT",278:"ZAR",279:"KRW",280:"ESP",281:"LKR",282:"SDD",283:"SEK",284:"CHF",285:"TWD",286:"THB",287:"TTD",288:"TND",290:"AED",291:"GBP",292:
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 6f 76 69 6e 61 22 2c 42 57 3a 22 42 6f 74 73 77 61 6e 61 22 2c 42 56 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 42 52 3a 22 42 72 61 7a 69 6c 22 2c 49 4f 3a 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 56 47 3a 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 42 4e 3a 22 42 72 75 6e 65 69 22 2c 42 47 3a 22 42 75 6c 67 61 72 69 61 22 2c 42 46 3a 22 42 75 72 6b 69 6e 61 20 46 61 73 6f 22 2c 42 49 3a 22 42 75 72 75 6e 64 69 22 2c 4b 48 3a 22 43 61 6d 62 6f 64 69 61 22 2c 43 4d 3a 22 43 61 6d 65 72 6f 6f 6e 22 2c 43 41 3a 22 43 61 6e 61 64 61 22 2c 43 56 3a 22 43 61 70 65 20 56 65 72 64 65 22 2c 42 51 3a 22 43 61 72 69 62 62 65 61 6e 20 4e 65 74 68 65 72 6c 61 6e 64 73 22 Data Ascii: ovina",BW:"Botswana",BV:"Bouvet Island",BR:"Brazil",IO:"British Indian Ocean Territory",VG:"British Virgin Islands",BN:"Brunei",BG:"Bulgaria",BF:"Burkina Faso",BI:"Burundi",KH:"Cambodia",CM:"Cameroon",CA:"Canada",CV:"Cape Verde",BQ:"Caribbean Netherlands"
2024-10-17 12:27:19 UTC	6011	IN	Data Raw: 65 79 44 6f 77 6e 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 2c 5a 46 55 74 69 6c 2e 63 6c 6f 73 65 48 6f 76 65 72 54 65 78 74 50 6f 70 75 70 28 29 2c 24 28 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 29 2e 73 68 6f 77 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 4f 6e 4b 65 79 44 6f 77 6e 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 7b 24 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 22 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 69 66 28 31 Data Ascii: eyDown(inputElement,monthYearPicker,dateFormat,dateLocale),ZFUtil.closeHoverTextPopup(),$(monthYearPicker).show()})}function callOnKeyDown(inputElement,monthYearPicker,dateFormat,dateLocale){$(inputElement).off("keydown").on("keydown",function(event){if(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	576	OUT	GET /forms/js/formslive.a52d1c28698e28f4751854660c45525a.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 978393 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "1437d1caf235e36b94ab1a58e31052cf" Content-Language: en-US Last-Modified: Mon, 14 Oct 2024 12:53:04 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 4ed7909ff11305527e8c27979017aa76 z-origin-id: ex1-34c68db2b5684ff9b31db1ddfcb8a713 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	15649	IN	Data Raw: 2f 2f 20 24 49 64 3a 20 24 0a 2f 2a 2a 0a 20 2a 20 49 4d 50 4f 52 54 41 4e 54 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 6f 6d 70 72 65 73 73 65 64 20 6a 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 5a 6f 68 6f 20 46 6f 72 6d 73 20 46 6f 72 6d 73 2f 52 65 70 6f 72 74 20 6c 69 76 65 20 6a 73 2e 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 5a 46 4c 69 76 65 46 6f 72 6d 46 6f 63 75 73 48 61 6e 64 65 72 4f 6e 4e 61 76 69 67 61 74 69 6f 6e 28 61 63 74 69 6f 6e 54 79 70 65 2c 70 61 67 65 4e 6f 29 7b 74 68 69 73 2e 61 63 74 69 6f 6e 54 79 70 65 3d 61 63 74 69 6f 6e 54 79 70 65 2c 74 68 69 73 2e 70 61 67 65 4e 6f 3d 70 61 67 65 4e 6f 7d 66 75 6e 63 74 69 6f 6e 20 5a 46 4c 69 76 65 46 69 65 6c 64 46 6f 63 75 73 48 61 6e 64 65 72 28 66 69 65 6c 64 45 6c 65 6d 2c 66 6f Data Ascii: // $Id: $/** * IMPORTANT NOTE: This compressed js file includes Zoho Forms Forms/Report live js. */function ZFLiveFormFocusHanderOnNavigation(actionType,pageNo){this.actionType=actionType,this.pageNo=pageNo}function ZFLiveFieldFocusHander(fieldElem,fo
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 7b 76 61 72 20 63 6f 6d 70 74 79 70 65 3d 24 28 74 68 69 73 2e 66 69 65 6c 64 45 6c 65 6d 29 2e 61 74 74 72 28 22 63 6f 6d 70 74 79 70 65 22 29 2c 63 6f 6d 70 54 79 70 65 49 6e 74 3d 70 61 72 73 65 49 6e 74 28 63 6f 6d 70 74 79 70 65 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 46 49 4c 45 5f 55 50 4c 4f 41 44 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 49 4d 41 47 45 5f 55 50 4c 4f 41 44 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4d 45 44 49 41 5f 55 50 Data Ascii: {var comptype=$(this.fieldElem).attr("comptype"),compTypeInt=parseInt(comptype),uploadFields=[];return uploadFields.push(ZFFieldTypeConstants.FILE_UPLOAD),uploadFields.push(ZFFieldTypeConstants.IMAGE_UPLOAD),uploadFields.push(ZFFieldTypeConstants.MEDIA_UP
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 6d 28 24 28 69 6e 70 75 74 45 6c 65 6d 29 2e 76 61 6c 28 29 29 2c 76 61 6c 75 65 4a 73 6f 6e 5b 24 28 65 6c 65 6d 29 2e 61 74 74 72 28 22 63 6f 6d 70 6e 61 6d 65 22 29 5d 3d 76 65 72 43 6f 64 65 4a 73 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 74 72 75 63 74 44 65 63 69 6d 61 6c 46 69 65 6c 64 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 2c 66 72 6f 6d 52 65 76 69 65 77 29 7b 76 61 72 20 69 6e 70 56 61 6c 3d 24 2e 74 72 69 6d 28 24 28 65 6c 65 6d 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 22 29 2e 76 61 6c 28 29 29 2c 64 65 63 69 6d 61 6c 46 6f 72 6d 61 74 3d 24 28 65 6c 65 6d 29 2e 61 74 74 72 28 22 64 65 63 69 6d 61 6c 66 6f 72 6d 61 74 22 29 2c 72 65 46 6f 72 6d 61 74 74 65 64 56 61 6c 3d 5a 46 55 74 69 6c 2e 67 65 74 52 65 66 6f 72 6d 61 74 74 65 64 Data Ascii: m($(inputElem).val()),valueJson[$(elem).attr("compname")]=verCodeJson}function constructDecimalField(valueJson,elem,fromReview){var inpVal=$.trim($(elem).find("input").val()),decimalFormat=$(elem).attr("decimalformat"),reFormattedVal=ZFUtil.getReformatted
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 28 72 65 73 70 4a 73 6f 6e 29 7b 69 66 28 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 22 29 2e 73 68 6f 77 28 29 2c 69 73 53 74 61 6e 64 61 72 64 46 6f 72 6d 28 29 26 26 69 73 45 6d 62 65 64 64 65 64 46 6f 72 6d 28 29 29 7b 76 61 72 20 70 6f 70 75 70 48 65 69 67 68 74 3d 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 43 6f 6e 74 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 73 65 74 50 6f 70 75 70 50 6f 73 69 74 69 6f 6e 4e 65 61 72 52 65 66 45 6c 65 6d 28 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 43 6f 6e 74 22 29 2c 24 28 22 64 69 76 5b 65 6c 6e 61 6d 65 3d 66 6f 6f 74 65 72 5d 3a 76 69 73 69 62 6c 65 22 29 2c 2d 31 2a 70 6f 70 75 70 48 65 69 67 68 74 2c 21 30 Data Ascii: (respJson){if($("#paypalCkoutActionDiv").show(),isStandardForm()&&isEmbeddedForm()){var popupHeight=$("#paypalCkoutActionDivCont").outerHeight(!0);setPopupPositionNearRefElem($("#paypalCkoutActionDivCont"),$("div[elname=footer]:visible"),-1*popupHeight,!0
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 54 49 4d 45 3f 63 6f 6e 73 74 72 75 63 74 44 61 74 65 54 69 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 54 49 4d 45 3f 63 6f 6e 73 74 72 75 63 74 54 69 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4e 41 4d 45 3f 63 6f 6e 73 74 72 75 63 74 4e 61 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 2c 66 72 6f 6d 52 65 76 69 65 77 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 Data Ascii: eJson,elem):comptype===ZFFieldTypeConstants.DATETIME?constructDateTime(valueJson,elem):comptype==ZFFieldTypeConstants.TIME?constructTime(valueJson,elem):comptype==ZFFieldTypeConstants.NAME?constructName(valueJson,elem,fromReview):comptype==ZFFieldTypeCons
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 73 2e 52 45 53 54 52 49 43 54 5f 53 50 45 43 49 46 49 43 26 26 69 73 44 6f 6d 61 69 6e 45 78 69 73 74 73 28 65 6d 61 69 6c 56 61 6c 75 65 2c 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 29 72 65 74 75 72 6e 20 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 3d 73 65 74 64 6f 6d 61 69 6e 56 61 6c 75 65 73 28 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 2c 65 6d 61 69 6c 45 72 72 41 72 72 61 79 5b 30 5d 3d 5a 46 55 74 69 6c 2e 72 65 70 6c 61 63 65 50 61 72 61 6d 73 28 5a 46 4c 69 76 65 45 72 72 6f 72 43 6f 6e 73 74 61 6e 74 73 2e 72 65 73 74 72 69 63 74 65 64 64 6f 6d 61 69 6e 2c 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 2c 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 4e 75 6d 62 65 72 28 65 Data Ascii: s.RESTRICT_SPECIFIC&&isDomainExists(emailValue,restrictedDomain))return restrictedDomain=setdomainValues(restrictedDomain),emailErrArray[0]=ZFUtil.replaceParams(ZFLiveErrorConstants.restricteddomain,restrictedDomain),!1}}return!0}function validateNumber(e
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 24 28 70 61 72 65 6e 74 45 6c 65 6d 29 2e 63 6c 6f 73 65 73 74 28 27 75 6c 5b 65 6c 6e 61 6d 65 3d 22 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 22 5d 27 29 2e 61 74 74 72 28 22 70 61 67 65 5f 6e 6f 22 29 3b 73 68 6f 77 41 6e 64 48 69 64 65 50 61 67 65 28 70 61 67 65 4e 75 6d 29 2c 73 65 74 4e 65 65 64 44 61 74 61 46 6f 72 45 72 72 6f 72 28 70 61 67 65 4e 75 6d 2c 69 73 53 74 61 6e 64 61 72 64 46 6f 72 6d 28 29 3f 24 28 22 23 66 6f 72 6d 42 6f 64 79 44 69 76 22 29 2e 66 69 6e 64 28 22 64 69 76 5b 65 6c 6e 61 6d 65 3d 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 5d 22 29 2e 6c 65 6e 67 74 68 3a 24 28 22 23 66 6f 72 6d 42 6f 64 79 44 69 76 22 29 2e 66 69 6e 64 28 22 75 6c 5b 65 6c 6e 61 6d 65 3d 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 5d 22 29 2e 6c 65 6e 67 Data Ascii: $(parentElem).closest('ul[elname="formBodyULName"]').attr("page_no");showAndHidePage(pageNum),setNeedDataForError(pageNum,isStandardForm()?$("#formBodyDiv").find("div[elname=formBodyULName]").length:$("#formBodyDiv").find("ul[elname=formBodyULName]").leng
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 75 6c 61 74 69 6f 6e 54 79 70 65 2e 44 41 59 53 29 2c 65 78 70 72 65 73 73 69 6f 6e 41 72 72 2e 70 75 73 68 28 74 6f 6b 65 6e 29 2c 74 65 6d 70 54 6f 6b 65 6e 3d 3d 44 61 74 65 43 61 6c 63 75 6c 61 74 69 6f 6e 54 79 70 65 2e 43 4f 55 4e 54 26 26 28 69 73 54 65 6d 70 54 6f 6b 65 6e 43 6f 6e 74 61 69 6e 73 43 6f 75 6e 74 3d 21 30 29 2c 74 65 6d 70 54 6f 6b 65 6e 3d 22 22 7d 7d 22 22 21 3d 74 65 6d 70 54 6f 6b 65 6e 26 26 28 74 65 6d 70 54 6f 6b 65 6e 3d 3d 44 61 74 65 43 61 6c 63 75 6c 61 74 69 6f 6e 54 79 70 65 2e 46 4f 52 4d 53 43 55 52 52 45 4e 54 44 41 54 45 3f 65 78 70 72 65 73 73 69 6f 6e 41 72 72 2e 70 75 73 68 28 5a 46 55 74 69 6c 2e 63 6f 6e 76 65 72 74 54 6f 47 65 6e 65 72 61 6c 44 61 74 65 5f 64 64 4d 4d 4d 79 79 79 79 28 5a 46 4c 69 76 65 2e 66 Data Ascii: ulationType.DAYS),expressionArr.push(token),tempToken==DateCalculationType.COUNT&&(isTempTokenContainsCount=!0),tempToken=""}}""!=tempToken&&(tempToken==DateCalculationType.FORMSCURRENTDATE?expressionArr.push(ZFUtil.convertToGeneralDate_ddMMMyyyy(ZFLive.f
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 63 68 61 6e 67 65 22 2c 22 69 6e 70 75 74 22 2c 65 76 61 6c 43 68 6f 69 63 65 45 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 65 6c 73 65 20 69 66 28 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4d 55 4c 54 49 50 4c 45 5f 43 48 4f 49 43 45 29 24 28 6c 69 45 6c 65 6d 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 65 76 61 6c 43 68 6f 69 63 65 45 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 65 6c 73 65 20 69 66 28 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 54 49 4d 45 7c 7c 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 7c 7c 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 Data Ascii: change","input",evalChoiceExpression());else if(compType==ZFFieldTypeConstants.MULTIPLE_CHOICE)$(liElem).on("change","select",evalChoiceExpression());else if(compType==ZFFieldTypeConstants.DATETIME\|\|compType==ZFFieldTypeConstants.DATE\|\|compType==ZFFieldTy
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 6e 65 78 74 50 61 67 65 55 6c 29 2c 66 6f 63 75 73 46 69 72 73 74 46 69 65 6c 64 4f 6e 50 61 67 65 4e 61 76 28 6e 65 78 74 50 61 67 65 4e 6f 29 2c 63 68 65 63 6b 50 61 67 65 47 54 4d 28 6e 65 78 74 50 61 67 65 4c 69 29 2c 73 65 74 53 69 67 6e 61 74 75 72 65 45 6c 65 6d 57 69 64 74 68 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 73 65 74 4d 61 74 72 69 78 45 6c 65 6d 57 69 64 74 68 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 73 65 74 4d 61 74 72 69 78 45 6c 65 6d 48 65 69 67 68 74 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 74 72 69 67 67 65 72 46 6f 72 6d 52 65 73 69 7a 65 28 21 31 2c 21 30 29 7d 29 3b 65 6c 73 65 20 24 28 66 6f 72 6d 44 69 76 29 2e 66 69 6e 64 28 22 75 6c 5b 65 6c 6e 61 6d 65 3d 66 6f 6f 74 65 72 5d 5b 70 61 67 65 5f 6e 6f 3d 22 2b 70 61 67 65 4e 6f 2b Data Ascii: nextPageUl),focusFirstFieldOnPageNav(nextPageNo),checkPageGTM(nextPageLi),setSignatureElemWidth(nextPageUl),setMatrixElemWidth(nextPageUl),setMatrixElemHeight(nextPageUl),triggerFormResize(!1,!0)});else $(formDiv).find("ul[elname=footer][page_no="+pageNo+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49751	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	578	OUT	GET /forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	734	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 74461 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "8291598a2a5e82e1baa86741eaf37e17" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:28 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 4a573d4668f60e415a44fad7d88d41e1 z-origin-id: ex1-25a2856f300a46a4a495c563baaebbf3 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	15650	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 26 26 61 2e 66 6e 26 26 61 2e 66 6e 2e 73 65 6c 65 63 74 32 26 26 61 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 29 76 61 72 20 62 3d 61 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 2c 64 3b Data Ascii: !function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var c;return function(){var a,c,d;
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 61 6e 3e 27 29 2c 61 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 65 2e 5f 5f 73 75 70 65 72 5f 5f 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 64 3d 61 2e 69 64 2b 22 2d 63 6f 6e 74 61 69 6e 65 72 22 3b 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 66 69 6e 64 28 22 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 22 29 2e 61 74 74 72 28 22 69 64 22 2c 64 29 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 64 29 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 Data Ascii: an>'),a},e.prototype.bind=function(a,b){var c=this;e.__super__.bind.apply(this,arguments);var d=a.id+"-container";this.$selection.find(".select2-selection__rendered").attr("id",d),this.$selection.attr("aria-labelledby",d),this.$selection.on("mousedown",fu
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 22 cf 89 22 2c 22 cf 82 22 3a 22 cf 83 22 7d 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 61 74 61 2f 62 61 73 65 22 2c 5b 22 2e 2e 2f 75 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 63 29 7b 62 2e 5f 5f 73 75 70 65 72 5f 5f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 7d 72 65 74 75 72 6e 20 61 2e 45 78 74 65 6e 64 28 62 2c 61 2e 4f 62 73 65 72 76 61 62 6c 65 29 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 75 72 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 60 63 75 72 72 65 6e 74 60 20 6d 65 74 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 Data Ascii: "","":""}}),b.define("select2/data/base",["../utils"],function(a){function b(a,c){b.__super__.constructor.call(this)}return a.Extend(b,a.Observable),b.prototype.current=function(a){throw new Error("The `current` method must be defined in child class
2024-10-17 12:27:18 UTC	16384	IN	Data Raw: 76 61 72 20 63 3d 30 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 62 5b 64 5d 3b 65 2e 63 68 69 6c 64 72 65 6e 3f 63 2b 3d 61 28 65 2e 63 68 69 6c 64 72 65 6e 29 3a 63 2b 2b 7d 72 65 74 75 72 6e 20 63 7d 28 63 2e 64 61 74 61 2e 72 65 73 75 6c 74 73 29 3c 74 68 69 73 2e 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 29 26 26 62 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 7d 2c 62 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 72 6f 70 64 6f 77 6e 2f 73 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: var c=0,d=0;d<b.length;d++){var e=b[d];e.children?c+=a(e.children):c++}return c}(c.data.results)<this.minimumResultsForSearch)&&b.call(this,c)},b}),b.define("select2/dropdown/selectOnClose",[],function(){function a(){}return a.prototype.bind=function(a,b,
2024-10-17 12:27:19 UTC	9659	IN	Data Raw: 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 3d 6e 75 6c 6c 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 20 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 69 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 Data Ascii: n.destroy(),this.dropdown.destroy(),this.results.destroy(),this.dataAdapter=null,this.selection=null,this.dropdown=null,this.results=null},e.prototype.render=function(){var b=a('<span class="select2 select2-container"><span class="selection"></span><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	650	OUT	GET /forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:18 UTC	713	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:18 GMT Content-Type: image/png Content-Length: 4967 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "b77d608785e1a64ec14ed4d23d877fb8" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:29 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: c5a17019f138eb416e84bd96bf27235d z-origin-id: ex1-53c90d8f6ac44100b77cd4aa574cc811 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:18 UTC	4967	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 02 fd 50 4c 54 45 47 70 4c 19 7f 4c 1e 7f 42 1f 7f 44 1e 82 44 1f 80 43 1e 81 43 1e 81 43 1f 81 43 1f 81 44 1e 80 43 1f 81 44 1e 80 44 1f 80 43 1f 81 43 1f 81 44 1f 80 43 1f 81 42 2a 7f 55 20 82 46 1f 82 44 1e 80 44 1e 81 43 1f 80 43 1f 81 44 1e 80 43 1f 81 43 1f 80 44 1e 81 44 1f 80 44 21 7f 42 20 81 44 1e 80 44 1f 80 43 1f 81 44 1e 80 44 1f 80 44 1e 81 44 20 7f 45 22 7f 44 1e 80 43 1f 80 43 1f 81 44 1f 81 44 1b 7f 3f 1e 7f 43 1f 81 43 1f 80 44 1e 81 45 24 7f 48 1f 7f 47 1f 80 44 1f 81 43 1e 80 43 1e 81 44 1f 81 44 1f 80 43 20 83 41 1d 80 44 1f 80 43 1f 80 44 1f 81 43 21 7f 43 21 85 42 1e 81 44 1f 81 44 1f 81 43 22 7f 45 00 7f 7f 1f 81 43 1f 80 43 00 Data Ascii: PNGIHDRkXTPLTEGpLLBDDCCCCDCDDCCDCB*U FDDCCDCCDDD!B DDCDDDD E"DCCDD?CCDE$HGDCCDDC ADCDC!C!BDDC"ECC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-17 12:27:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=101908 Date: Thu, 17 Oct 2024 12:27:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	493	OUT	GET /infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:19 UTC	372	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:19 GMT Content-Type: application/octet;charset=UTF-8 Content-Length: 22927 Connection: close X-Frame-Options: DENY X-Download-Options: noopen Content-Disposition: attachment;filename="open.png" Pragma: public Cache-Control: max-age=0 Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:19 UTC	16012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 83 00 00 02 17 08 06 00 00 00 26 17 8b 1b 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0b 00 00 8c 11 00 00 fc 7e 00 00 84 c1 00 00 84 d5 00 00 f4 a4 00 00 3a 52 00 00 16 8f 88 a1 1a 68 00 00 18 2c 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 58 c3 ad 79 79 38 55 df f7 ff 3e e7 8e 2e d7 74 cd f3 3c cf f3 90 79 ce 98 99 88 6b 9e e3 ba 84 34 18 52 a1 81 a4 44 29 64 2c 1a 84 a4 84 50 91 0c 85 42 69 10 a2 52 48 19 f2 3d a8 de ef cf e7 f7 fb e7 fb 3c df fd 3c e7 9c 97 b5 d7 5e fb b5 f6 5e 7b 58 2e 00 dc 1c e4 c8 c8 30 98 11 80 f0 08 2a c5 de cc 50 c0 d5 cd 5d 00 37 0e 20 80 07 6c 80 05 a8 90 7d a3 23 0d ec ec ac 00 52 fe 7c ff b3 7c 1f 44 b4 91 32 20 bb 61 0b fc Data Ascii: PNGIHDR&gAMA\|Q cHRM~:Rh,iCCPICC ProfileXyy8U>.t<yk4RD)d,PBiRH=<<^^{X.0*P]7 l}#R\|\|D2 a
2024-10-17 12:27:19 UTC	6915	IN	Data Raw: f9 6f 2a 8e 59 0a 5c a7 8c 19 d0 66 e0 95 2f fd 66 41 11 62 2b 0b 15 ef fb b3 e3 cb 79 f2 da 93 c2 cc 49 23 fb 96 35 59 f7 2c dc 58 59 db 28 7d 2e 7f f7 d8 ba b2 af ec a6 6d 0d 65 60 1c 31 a0 57 ab f9 f9 e6 af d9 1a 37 3f b2 3a 3e f5 cb b9 e5 40 41 8b aa a6 12 49 21 f9 33 97 4d 8e 67 9e 30 b4 7c ae 27 92 f6 79 f2 e8 be e5 73 de bb a8 f5 bc 9f a9 99 f1 9d 45 c0 bb 75 c6 da 72 a4 ce 34 09 7c e3 a4 f1 cd 3b 4c d3 58 fc bc 38 2e 9f ba 79 6e 7c fb ae c7 cb 29 63 5a aa 29 02 e0 e7 fe f2 e4 38 77 fc c0 7d 7e 59 90 26 8f ff af 69 cb 2a 4b 8d c6 14 c7 3e bd 8f fb 92 9a dc a6 3e 91 77 cc 5e d7 aa c6 3a 7d 9f 70 5f f1 7a ba 76 ed 5a 8e 60 da de 28 b6 00 b4 af cb 9e 83 1d d6 0d c8 d2 c8 7f fc 75 e5 d6 d1 e1 75 c5 09 e6 67 2e 9b 14 5b b6 ef 8a 57 7c fd be 36 a3 62 1e Data Ascii: oY\f/fAb+yI#5Y,XY(}.me`1W7?:>@AI!3Mg0\|'ysEur4\|;LX8.yn\|)cZ)8w}~Y&iK>>w^:}p_zvZ`(uug.[W\|6b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	410	OUT	GET /forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:19 UTC	713	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:19 GMT Content-Type: image/png Content-Length: 4967 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "b77d608785e1a64ec14ed4d23d877fb8" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:29 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 65b683d14c4ecb3f0fdbd755e6c3bdb0 z-origin-id: ex1-89f50f73c8904079ab7dff0ea35b04df Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:19 UTC	4967	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 03 00 00 00 6b ac 58 54 00 00 02 fd 50 4c 54 45 47 70 4c 19 7f 4c 1e 7f 42 1f 7f 44 1e 82 44 1f 80 43 1e 81 43 1e 81 43 1f 81 43 1f 81 44 1e 80 43 1f 81 44 1e 80 44 1f 80 43 1f 81 43 1f 81 44 1f 80 43 1f 81 42 2a 7f 55 20 82 46 1f 82 44 1e 80 44 1e 81 43 1f 80 43 1f 81 44 1e 80 43 1f 81 43 1f 80 44 1e 81 44 1f 80 44 21 7f 42 20 81 44 1e 80 44 1f 80 43 1f 81 44 1e 80 44 1f 80 44 1e 81 44 20 7f 45 22 7f 44 1e 80 43 1f 80 43 1f 81 44 1f 81 44 1b 7f 3f 1e 7f 43 1f 81 43 1f 80 44 1e 81 45 24 7f 48 1f 7f 47 1f 80 44 1f 81 43 1e 80 43 1e 81 44 1f 81 44 1f 80 43 20 83 41 1d 80 44 1f 80 43 1f 80 44 1f 81 43 21 7f 43 21 85 42 1e 81 44 1f 81 44 1f 81 43 22 7f 45 00 7f 7f 1f 81 43 1f 80 43 00 Data Ascii: PNGIHDRkXTPLTEGpLLBDDCCCCDCDDCCDCB*U FDDCCDCCDDD!B DDCDDDD E"DCCDD?CCDE$HGDCCDDC ADCDC!C!BDDC"ECC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	18.66.102.12	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	587	OUT	GET /nunitoregular/font.woff2 HTTP/1.1 Host: webfonts.zohowebstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://forms.zohopublic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:19 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 43780 Connection: close Server: ZGS Date: Fri, 19 Jul 2024 04:59:15 GMT Last-Modified: Wed, 28 Jul 2021 13:35:44 GMT ETag: "61015d30-ab04" Expires: Sat, 19 Jul 2025 04:59:15 GMT Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 11e35514d631a9a9566fd489de935c06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 8dTezrqqT4n3mrC0RjQ6rxLd5DR7MTfRVHOW_lB58Ga4PSz3DdDEjQ== Age: 7802884
2024-10-17 12:27:19 UTC	15782	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 ab 04 00 12 00 00 00 02 07 a0 00 00 aa 9a 00 03 00 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 81 68 1b 82 9d 12 1c 9b 5e 06 60 00 8a 6e 08 81 18 09 9a 16 11 08 0a 84 c4 00 84 80 04 01 36 02 24 03 98 12 0b 8c 1a 00 04 20 05 8e 17 07 b2 09 0c 81 23 5b 4a de 91 0e 85 63 ec ef 55 54 00 50 c1 c6 56 11 b8 31 02 20 cb d3 e5 9a c5 ff 42 27 d0 63 e3 78 25 3d 64 ff b1 83 54 5e d0 09 e6 a6 b6 8f 08 ae f3 b6 58 b4 78 ef d8 d9 ff ff ff ff ff ff ff df 53 32 19 ae 4a a6 ed 00 81 ae 9d 58 b7 c7 99 c9 9b 08 91 73 ce 53 07 8b 74 92 6a 49 d2 49 b5 75 7b 51 4c f5 eb 10 38 30 49 dd 91 18 7d 37 c6 8e 79 f1 54 a3 63 92 92 1a 57 94 09 30 e9 1c 41 22 72 9c a2 f2 94 f1 64 5e 48 71 2e 78 ed a6 85 6e a6 19 4a 5b Data Ascii: wOF2A?FFTMh^`n6$ #[JcUTPV1 B'cx%=dT^XxS2JXsStjIIu{QL80I}7yTcW0A"rd^Hq.xnJ[
2024-10-17 12:27:19 UTC	16384	IN	Data Raw: 26 d8 a1 bc 30 15 da 22 d4 b6 4b 11 4b 3d 36 35 3c b1 13 68 c8 f3 48 1c 59 e2 7a 90 05 a4 bb 58 63 37 65 38 2e 26 01 b0 0e 58 25 61 c5 79 f4 84 d0 56 88 de 0d c1 97 19 3c 0d 54 92 ac b2 a8 cd c2 57 4a 26 cf 27 b8 4d a8 f3 22 01 46 d5 bc 3e 88 ae e3 0c cf 8f 59 49 fb 56 0d 5d 6f f3 c8 dc bd 19 75 62 f4 20 2d 9a 3b 86 6f a0 ee c6 71 ae 8b 9e 77 c0 72 d8 d0 a3 17 d0 e8 1c 86 48 91 47 10 cb 15 b5 00 2a e1 29 f2 9c 2f f9 12 9c 38 bd 3c c4 a5 7c 9e 61 14 bd 71 e6 aa c6 28 ae 9c 88 86 04 d3 8d f6 47 e4 00 97 47 a0 47 33 bd 05 05 e1 95 53 28 0f 59 03 15 6f b1 b7 b8 b4 2a 45 7b 88 32 63 be 3a d2 3f 48 c6 c2 da 47 aa 05 20 0a cb 06 cc dc eb 2e 88 4a 97 aa 66 c7 be 1a 30 73 60 f5 e0 ec 32 f8 c9 78 97 a8 06 af 10 f3 42 d8 ca 33 5e 12 62 11 5b 19 7e b9 a9 e5 1f d7 b5 Data Ascii: &0"KK=65<hHYzXc7e8.&X%ayV<TWJ&'M"F>YIV]oub -;oqwrHG)/8<\|aq(GGG3S(YoE{2c:?HG .Jf0s`2xB3^b[~
2024-10-17 12:27:19 UTC	11614	IN	Data Raw: 81 39 ec a9 3e 90 e3 9a 44 02 d0 ed ca 1d 06 01 7a cf b9 b9 08 3a 9e c9 44 ac cd 3e 2f 8a cd 20 f8 78 bd 54 cb 0d 00 53 93 c8 cf e6 da f6 a7 cd b6 21 8a 7e cc cc 64 04 85 c9 f9 e3 40 e7 03 40 d5 bf 50 88 35 e3 9b be 6d b6 ae e9 86 a7 75 1d 4d 13 08 44 a1 a2 42 ba 2f 79 40 13 f7 2f 00 74 d2 a2 c7 ab 00 1a ba ef 63 70 fa 72 d9 fb c8 c3 8a 14 55 5c a2 48 54 8f 03 ef 25 a9 09 c8 a0 fd bc f8 b6 b2 6e 66 a5 5a f0 22 ff 26 a9 0d a1 36 98 59 bb b7 5f 24 24 8e a9 28 b6 ec e2 b2 9b 69 77 d3 e7 37 95 70 5f c7 d4 81 97 c7 2f e3 82 b4 0e 29 1b 89 13 80 b2 23 80 8a 20 23 15 0d 8f 16 ee 82 d1 69 be 40 2a 04 49 7e be 3b 65 4d 2c 5a 61 f2 fb 6e 97 15 8d 3d 50 c2 a3 d0 df 6a 99 68 0b 0e d1 35 13 91 23 99 f7 a1 ad 3f 74 54 73 f4 1c 85 5a 7e df 5c 4a 59 f5 31 a4 58 51 3c c9 Data Ascii: 9>Dz:D>/ xTS!~d@@P5muMDB/y@/tcprU\HT%nfZ"&6Y_$$(iw7p_/)# #i@*I~;eM,Zan=Pjh5#?tTsZ~\JY1XQ<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49758	18.66.102.12	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	581	OUT	GET /opensans/font.woff HTTP/1.1 Host: webfonts.zohowebstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://forms.zohopublic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:19 UTC	601	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 67480 Connection: close Server: ZGS Date: Sun, 26 Nov 2023 05:40:49 GMT Last-Modified: Wed, 28 Jul 2021 13:35:31 GMT ETag: "61015d23-10798" Expires: Mon, 25 Nov 2024 05:40:49 GMT Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 21c2c1b3872c539a34b64bcf45f4054c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: C1HpexELoCGA7Qf264KeAopuzyLbzI5W8zorfnQiJXYMsjyc3rhIXQ== Age: 28190790
2024-10-17 12:27:19 UTC	15783	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 07 98 00 12 00 00 00 01 bf 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 01 07 7c 00 00 00 1c 00 00 00 1c 66 98 70 e4 47 44 45 46 00 00 e7 80 00 00 00 1d 00 00 00 1e 00 26 03 b1 47 50 4f 53 00 00 e9 78 00 00 1e 01 00 00 3e 5c d7 96 97 4d 47 53 55 42 00 00 e7 a0 00 00 01 d7 00 00 02 c4 7b 1f be 63 4f 53 2f 32 00 00 02 10 00 00 00 5f 00 00 00 60 a1 3e 9e da 63 6d 61 70 00 00 09 a0 00 00 03 19 00 00 04 6e 5a 26 87 16 63 76 74 20 00 00 12 60 00 00 00 59 00 00 00 a2 0f 4d 18 a4 66 70 67 6d 00 00 0c bc 00 00 04 a9 00 00 07 b4 7e 61 b6 11 67 61 73 70 00 00 e7 70 00 00 00 10 00 00 00 10 00 15 00 23 67 6c 79 66 00 00 19 e8 00 00 bb b0 00 01 33 00 90 97 c0 ac 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFXFFTM\|fpGDEF&GPOSx>\MGSUB{cOS/2_`>cmapnZ&cvt `YMfpgm~agaspp#glyf3head
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: f3 ee bd 9b 76 ed 68 fb a8 35 f6 b7 2f ce fe dd 69 96 17 1f 62 9f c1 3b 3e 78 17 d7 7e 7c 06 0e 7a ef 25 7c ee a5 bd 30 75 9f fc 31 4a 5b c5 c8 ca 4d 15 4e 90 7d 27 80 3c 5f ac 43 8c 51 43 68 a7 96 6e a2 2b 56 ad 36 3b ed 00 19 11 87 74 e6 04 b2 d5 4f ef 7f 87 7a c2 11 4c 43 b6 99 22 67 e2 17 42 1a 14 91 73 7a 4c 1e ab 37 8b 45 43 39 6b d4 90 e5 0f 4c de f4 fc cc b5 a3 c6 a6 4f ab 5a 58 8d cb a7 9c 1c 31 e5 41 e4 aa 18 3e 72 cc 98 71 22 9f 52 e5 1d d6 61 dc 1c dc e9 c8 a8 fa 4c 9e 97 e2 7b fd c0 4c 54 87 8e 02 11 e8 40 aa cf 82 44 22 b4 79 8d 4a c5 eb 44 5e 6f d0 0a 4a 9a 9b 9c 71 5b e5 00 74 a8 a0 02 7a a4 87 7e b0 72 36 0d 9f cf c6 75 70 19 1c 38 13 5f 86 09 33 f1 2e 2e 05 ae ef 81 77 e0 ed 3d e1 fa 98 e6 a7 b2 4e 84 4a a2 13 1d 40 00 31 3e 2d 07 79 28 Data Ascii: vh5/ib;>x~\|z%\|0u1J[MN}'<_CQChn+V6;tOzLC"gBszL7EC9kLOZX1A>rq"RaL{LT@D"yJD^oJq[tz~r6up8_3..w=NJ@1>-y(
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 61 13 bc 72 ea ec e9 33 5a 3d 36 8d bd bc cc 21 a2 9b 10 9e b7 22 0e b7 70 80 a3 8d ac d3 61 46 8c 45 8b 66 33 10 45 1b 0e ff 99 22 97 49 7b b6 8c df a7 e7 6a 6a b7 8b 1d 3b a3 d3 bf 7d 13 74 5f 50 fb ee cb e0 bb 3a f8 03 fc 0d d8 81 09 9e fa 05 34 25 6f bd 6f 5d 03 12 2d 7b c1 e0 83 e0 9e f6 70 bf f7 b5 83 fb 1d 8b db 2d b6 c2 ed c6 98 84 24 b7 d9 8e e4 f0 b8 40 b7 14 b7 4b 96 ed 8a 90 99 99 48 2b 2a 97 93 9b 9a e2 45 dc 99 a4 da d4 01 41 97 0d f7 57 2c b0 31 06 26 c5 6b b3 79 53 18 c5 41 b5 c6 94 22 25 d0 31 01 e5 b6 00 85 6d 51 a6 da c3 29 b4 f3 4c c1 0d 5d ba 95 2e bc ef a1 bf 3f b5 03 c3 15 ae 82 53 75 b8 c2 c5 d0 9e b8 d8 5e cf 0c 7d e4 e1 03 a7 5a a1 16 b6 ec dd 54 1f c1 f2 21 18 5f e0 2b ad 56 96 e0 55 03 39 ac cf e1 7b ba 1e f1 5f 22 3e 1f b2 aa Data Ascii: ar3Z=6!"paFEf3E"I{jj;}t_P:4%oo]-{p-$@KH+*EAW,1&kySA"%1mQ)L].?Su^}ZT!_+VU9{_">
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 6c d3 c6 96 a7 9e 75 58 d7 24 a7 8e 0b 54 4e 30 c8 33 e0 fe a6 6f d4 52 3e 47 3c f6 07 f1 d8 5b 81 8b ec 50 c7 1b 9d 62 1e 6c 77 8a 5d 65 01 3a bd 8e d1 e9 90 cd e2 94 23 47 38 27 ab b1 a8 6f 0a ec 70 30 6d 6f 38 4e 63 72 2a 17 6a a3 c5 1c 93 f1 f9 e7 65 b9 f9 e3 36 6c 57 ca 13 17 3e b0 72 6b fb 86 5d 2f c1 11 63 a7 4d a8 7d 60 c1 1c 74 1a 72 a0 47 b7 c8 b8 ab 3d 6b e0 d6 47 9f 39 f4 c7 69 93 a6 8d a9 af 1b 18 78 44 cc 6d 88 71 46 68 8a c7 2b 3f 5e 8f 48 74 25 99 9c 41 76 40 f1 13 76 79 34 89 06 5f 07 61 83 50 c4 d4 0a fb f1 5b bf 2e 69 e8 be 41 e3 12 7b 71 3f b7 e0 7e 5a 40 32 c8 21 7e 85 31 9a 54 53 16 4a 90 c9 10 a7 37 69 f8 7e 1e 4e 9f 94 a4 ca 88 cf 60 32 32 62 95 4e 17 c0 fd cd 23 7e 5a 93 bc 7d 03 ad 49 b8 90 49 fd 24 9b de 34 ab 1f 0a 91 a6 07 6a Data Ascii: luX$TN03oR>G<[Pblw]e:#G8'op0mo8Ncr*je6lW>rk]/cM}`trG=kG9ixDmqFh+?^Ht%Av@vy4_aP[.iA{q?~Z@2!~1TSJ7i~N`22bN#~Z}II$4j
2024-10-17 12:27:20 UTC	2545	IN	Data Raw: b5 38 aa 36 4a 79 a3 44 e2 ae 65 84 96 11 da 30 c2 62 24 29 33 72 2f c8 df 18 b1 f1 4d 91 f6 27 48 93 ea 6c ef a2 ed 1d b6 cf 36 b0 bd ab b3 7d 16 46 47 47 89 dd dd 26 ec be a1 cd 85 db 2e da 3c c3 e6 59 b4 79 47 5b 77 b6 b3 c3 ce 52 5f 64 d8 39 c3 ce d9 66 6c ec 3a d9 58 eb 4f a9 45 87 87 ea 37 af c3 a4 5a c8 f4 5b 61 cc 19 91 cb 13 b9 3c 91 cb 13 b5 3c 51 cb 13 b1 44 97 0c 3d 32 a2 93 44 26 89 4a 12 91 24 12 49 f4 91 c8 e3 19 6f 46 34 91 48 22 51 44 22 88 27 72 78 a2 86 67 3c 19 d1 c2 13 2d 3c e3 c9 36 a8 ed f2 8a 7a 50 88 9f 9b 8a 9d 49 a8 09 5c 88 8b ad 21 ff bb 10 07 0f 0d b9 bb 3d ee 9d 18 e2 5d 1e ed 2b 21 af ba 10 d3 8a 78 26 b1 6c 49 c8 87 21 76 a9 c1 b5 fa 55 aa a5 bf 23 ff 01 fe 27 dc dd 13 9f 3c 95 8b 0f 95 84 ac 78 d3 7b c5 aa c0 73 47 cf 1d Data Ascii: 86JyDe0b$)3r/M'Hl6}FGG&.<YyG[wR_d9fl:XOE7Z[a<<QD=2D&J$IoF4H"QD"'rxg<-<6zPI\!=]+!x&lI!vU#'<x{sG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	400	OUT	GET /forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:20 UTC	734	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:19 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 89265 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "a08f9ae077288cdd836ccf6cfee07e4e" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:49 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 6c633eb6151f922e4fb736b9bd0066f3 z-origin-id: ex1-c47e118b25ee4a9e8d0ebbca75211d9e Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:20 UTC	15650	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?win
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 66 6f 72 28 3b 6c 3b 29 7b 66 6f 72 28 61 3d 65 3b 61 3d 61 5b 6c 5d 3b 29 Data Ascii: t"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){for(;l;){for(a=e;a=a[l];)
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 Data Ascii: ng"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f Data Ascii: :u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.remo
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e Data Ascii: speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.
2024-10-17 12:27:20 UTC	8079	IN	Data Raw: 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d Data Ascii: }),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-17 12:27:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=101897 Date: Thu, 17 Oct 2024 12:27:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-17 12:27:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:19 UTC	398	OUT	GET /forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:20 UTC	734	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:20 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 74461 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "8291598a2a5e82e1baa86741eaf37e17" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:28 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 0f5c6995c5a009a62a7223afd88583db z-origin-id: ex1-0a10069cac164465837c74cc1e2d74ae Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:20 UTC	15650	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 26 26 61 2e 66 6e 26 26 61 2e 66 6e 2e 73 65 6c 65 63 74 32 26 26 61 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 29 76 61 72 20 62 3d 61 2e 66 6e 2e 73 65 6c 65 63 74 32 2e 61 6d 64 3b 76 61 72 20 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 2c 64 3b Data Ascii: !function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var c;return function(){var a,c,d;
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 61 6e 3e 27 29 2c 61 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 65 2e 5f 5f 73 75 70 65 72 5f 5f 2e 62 69 6e 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 64 3d 61 2e 69 64 2b 22 2d 63 6f 6e 74 61 69 6e 65 72 22 3b 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 66 69 6e 64 28 22 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 72 65 6e 64 65 72 65 64 22 29 2e 61 74 74 72 28 22 69 64 22 2c 64 29 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 61 74 74 72 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 64 29 2c 74 68 69 73 2e 24 73 65 6c 65 63 74 69 6f 6e 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 Data Ascii: an>'),a},e.prototype.bind=function(a,b){var c=this;e.__super__.bind.apply(this,arguments);var d=a.id+"-container";this.$selection.find(".select2-selection__rendered").attr("id",d),this.$selection.attr("aria-labelledby",d),this.$selection.on("mousedown",fu
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 22 cf 89 22 2c 22 cf 82 22 3a 22 cf 83 22 7d 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 61 74 61 2f 62 61 73 65 22 2c 5b 22 2e 2e 2f 75 74 69 6c 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 63 29 7b 62 2e 5f 5f 73 75 70 65 72 5f 5f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 7d 72 65 74 75 72 6e 20 61 2e 45 78 74 65 6e 64 28 62 2c 61 2e 4f 62 73 65 72 76 61 62 6c 65 29 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 75 72 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 60 63 75 72 72 65 6e 74 60 20 6d 65 74 68 6f 64 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 63 68 69 6c 64 20 63 6c 61 73 73 Data Ascii: "","":""}}),b.define("select2/data/base",["../utils"],function(a){function b(a,c){b.__super__.constructor.call(this)}return a.Extend(b,a.Observable),b.prototype.current=function(a){throw new Error("The `current` method must be defined in child class
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 76 61 72 20 63 3d 30 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 62 5b 64 5d 3b 65 2e 63 68 69 6c 64 72 65 6e 3f 63 2b 3d 61 28 65 2e 63 68 69 6c 64 72 65 6e 29 3a 63 2b 2b 7d 72 65 74 75 72 6e 20 63 7d 28 63 2e 64 61 74 61 2e 72 65 73 75 6c 74 73 29 3c 74 68 69 73 2e 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 29 26 26 62 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 7d 2c 62 7d 29 2c 62 2e 64 65 66 69 6e 65 28 22 73 65 6c 65 63 74 32 2f 64 72 6f 70 64 6f 77 6e 2f 73 65 6c 65 63 74 4f 6e 43 6c 6f 73 65 22 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: var c=0,d=0;d<b.length;d++){var e=b[d];e.children?c+=a(e.children):c++}return c}(c.data.results)<this.minimumResultsForSearch)&&b.call(this,c)},b}),b.define("select2/dropdown/selectOnClose",[],function(){function a(){}return a.prototype.bind=function(a,b,
2024-10-17 12:27:20 UTC	9659	IN	Data Raw: 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 64 61 74 61 41 64 61 70 74 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 3d 6e 75 6c 6c 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 32 20 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 69 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 Data Ascii: n.destroy(),this.dropdown.destroy(),this.results.destroy(),this.dataAdapter=null,this.selection=null,this.dropdown=null,this.results=null},e.prototype.render=function(){var b=a('<span class="select2 select2-container"><span class="selection"></span><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49765	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:20 UTC	408	OUT	GET /forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:20 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:20 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 143468 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "19b645f10467ef6b8c188b1757726b38" Content-Language: en-US Last-Modified: Fri, 30 Aug 2024 07:22:57 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 58330a5fd6f2c65f1be447a68a467e0a z-origin-id: ex1-2dc93f7c8aa84d318520b9f6a496b612 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:20 UTC	15649	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 66 61 63 74 6f 72 79 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 61 63 74 6f 72 79 29 3a 66 61 63 74 6f 72 79 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 76 61 72 20 75 75 69 64 2c 72 65 6d 6f 76 65 44 61 74 61 2c 65 76 65 6e 74 54 79 70 65 2c 6f 72 69 67 3b 66 75 6e 63 74 69 6f 6e 20 66 6f 63 75 73 61 62 6c 65 28 65 6c 65 6d 65 6e 74 2c 69 73 54 61 62 49 6e 64 65 78 4e 6f 74 4e 61 4e 29 7b 76 61 72 20 6d 61 70 2c 6d 61 70 4e 61 6d 65 2c 69 6d 67 2c 6e 6f 64 65 4e 61 6d 65 3d 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 Data Ascii: !function(factory){"function"==typeof define&&define.amd?define(["jquery"],factory):factory(jQuery)}(function($){var uuid,removeData,eventType,orig;function focusable(element,isTabIndexNotNaN){var map,mapName,img,nodeName=element.nodeName.toLowerCase();re
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 72 65 74 75 72 6e 20 74 68 61 74 2e 5f 6d 6f 75 73 65 4d 6f 76 65 28 65 76 65 6e 74 29 7d 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 72 65 74 75 72 6e 20 74 68 61 74 2e 5f 6d 6f 75 73 65 55 70 28 65 76 65 6e 74 29 7d 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 44 65 6c 65 67 61 74 65 29 2e 62 69 6e 64 28 22 6d 6f 75 73 65 75 70 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 29 2c 65 76 65 6e 74 2e 70 Data Ascii: egate=function(event){return that._mouseMove(event)},this._mouseUpDelegate=function(event){return that._mouseUp(event)},this.document.bind("mousemove."+this.widgetName,this._mouseMoveDelegate).bind("mouseup."+this.widgetName,this._mouseUpDelegate),event.p
2024-10-17 12:27:20 UTC	16384	IN	Data Raw: 72 3d 24 28 5b 5d 29 2c 69 6e 70 75 74 2e 68 61 73 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 7c 7c 28 74 68 69 73 2e 5f 61 74 74 61 63 68 6d 65 6e 74 73 28 69 6e 70 75 74 2c 69 6e 73 74 29 2c 69 6e 70 75 74 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 2e 6b 65 79 64 6f 77 6e 28 74 68 69 73 2e 5f 64 6f 4b 65 79 44 6f 77 6e 29 2e 6b 65 79 70 72 65 73 73 28 74 68 69 73 2e 5f 64 6f 4b 65 79 50 72 65 73 73 29 2e 6b 65 79 75 70 28 74 68 69 73 2e 5f 64 6f 4b 65 79 55 70 29 2c 74 68 69 73 2e 5f 61 75 74 6f 53 69 7a 65 28 69 6e 73 74 29 2c 24 2e 64 61 74 61 28 74 61 72 67 65 74 2c 22 64 61 74 65 70 69 63 6b 65 72 22 2c 69 6e 73 74 29 2c 69 6e 73 74 2e 73 65 74 74 69 6e 67 73 2e Data Ascii: r=$([]),input.hasClass(this.markerClassName)\|\|(this._attachments(input,inst),input.addClass(this.markerClassName).keydown(this._doKeyDown).keypress(this._doKeyPress).keyup(this._doKeyUp),this._autoSize(inst),$.data(target,"datepicker",inst),inst.settings.
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 65 70 69 63 6b 65 72 2e 5f 6d 61 69 6e 44 69 76 49 64 7c 7c 30 21 3d 3d 24 74 61 72 67 65 74 2e 70 61 72 65 6e 74 73 28 22 23 22 2b 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 6d 61 69 6e 44 69 76 49 64 29 2e 6c 65 6e 67 74 68 7c 7c 24 74 61 72 67 65 74 2e 68 61 73 43 6c 61 73 73 28 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 7c 7c 24 74 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 7c 7c 21 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 64 61 74 65 70 69 63 6b 65 72 53 68 6f 77 69 6e 67 7c 7c 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 69 6e 44 69 61 6c 6f 67 26 26 24 2e 62 6c 6f 63 6b 55 49 29 26 26 28 21 24 74 Data Ascii: epicker._mainDivId\|\|0!==$target.parents("#"+$.datepicker._mainDivId).length\|\|$target.hasClass($.datepicker.markerClassName)\|\|$target.closest("."+$.datepicker._triggerClass).length\|\|!$.datepicker._datepickerShowing\|\|$.datepicker._inDialog&&$.blockUI)&&(!$t
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 65 74 28 69 6e 73 74 2c 22 6d 6f 6e 74 68 4e 61 6d 65 73 53 68 6f 72 74 22 29 2c 62 65 66 6f 72 65 53 68 6f 77 44 61 79 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 62 65 66 6f 72 65 53 68 6f 77 44 61 79 22 29 2c 73 68 6f 77 4f 74 68 65 72 4d 6f 6e 74 68 73 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 73 68 6f 77 4f 74 68 65 72 4d 6f 6e 74 68 73 22 29 2c 73 65 6c 65 63 74 4f 74 68 65 72 4d 6f 6e 74 68 73 3d 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 22 73 65 6c 65 63 74 4f 74 68 65 72 4d 6f 6e 74 68 73 22 29 2c 64 65 66 61 75 6c 74 44 61 74 65 3d 74 68 69 73 2e 5f 67 65 74 44 65 66 61 75 6c 74 44 61 74 65 28 69 6e 73 74 29 2c 68 74 6d 6c 3d 22 22 2c 72 6f 77 3d 30 3b 72 6f 77 3c 6e 75 6d 4d 6f 6e 74 68 73 5b 30 5d 3b 72 6f 77 2b 2b 29 7b 66 Data Ascii: et(inst,"monthNamesShort"),beforeShowDay=this._get(inst,"beforeShowDay"),showOtherMonths=this._get(inst,"showOtherMonths"),selectOtherMonths=this._get(inst,"selectOtherMonths"),defaultDate=this._getDefaultDate(inst),html="",row=0;row<numMonths[0];row++){f
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 48 61 73 68 29 7d 2c 5f 63 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 2c 69 6e 64 65 78 29 7b 69 66 28 21 74 68 69 73 2e 5f 6b 65 79 53 6c 69 64 69 6e 67 26 26 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 6c 69 64 69 6e 67 29 7b 76 61 72 20 75 69 48 61 73 68 3d 7b 68 61 6e 64 6c 65 3a 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 69 6e 64 65 78 5d 2c 76 61 6c 75 65 3a 74 68 69 73 2e 76 61 6c 75 65 28 29 7d 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 73 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 73 2e 6c 65 6e 67 74 68 26 26 28 75 69 48 61 73 68 2e 76 61 6c 75 65 3d 74 68 69 73 2e 76 61 6c 75 65 73 28 69 6e 64 65 78 29 2c 75 69 48 61 73 68 2e 76 61 6c 75 65 73 3d 74 68 69 73 2e 76 61 6c 75 65 73 28 29 29 2c 74 68 69 73 2e Data Ascii: Hash)},_change:function(event,index){if(!this._keySliding&&!this._mouseSliding){var uiHash={handle:this.handles[index],value:this.value()};this.options.values&&this.options.values.length&&(uiHash.value=this.values(index),uiHash.values=this.values()),this.
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3f 65 6c 65 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 6c 65 6d 2c 6e 75 6c 6c 29 3a 65 6c 65 6d 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 2c 73 74 79 6c 65 73 3d 7b 7d 3b 69 66 28 73 74 79 6c 65 26 26 73 74 79 6c 65 2e 6c 65 6e 67 74 68 26 26 73 74 79 6c 65 5b 30 5d 26 26 73 74 79 6c 65 5b 73 74 79 6c 65 5b 30 5d 5d 29 66 6f 72 28 6c 65 6e 3d 73 74 79 6c 65 2e 6c 65 6e 67 74 68 3b 6c 65 6e 2d 2d 3b 29 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 74 79 6c 65 5b 6b 65 79 3d 73 74 79 6c 65 5b 6c 65 6e 5d 5d 26 26 28 73 74 79 6c 65 73 5b 24 2e 63 61 6d 65 6c 43 61 73 65 28 6b 65 79 Data Ascii: .ownerDocument.defaultView?elem.ownerDocument.defaultView.getComputedStyle(elem,null):elem.currentStyle,styles={};if(style&&style.length&&style[0]&&style[style[0]])for(len=style.length;len--;)"string"==typeof style[key=style[len]]&&(styles[$.camelCase(key
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 32 2c 64 69 61 6c 43 6f 64 65 2c 70 72 69 6f 72 69 74 79 29 7b 64 69 61 6c 43 6f 64 65 20 69 6e 20 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 7c 7c 28 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 5b 64 69 61 6c 43 6f 64 65 5d 3d 5b 5d 29 3b 76 61 72 20 69 6e 64 65 78 3d 70 72 69 6f 72 69 74 79 7c 7c 30 3b 74 68 69 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 5b 64 69 61 6c 43 6f 64 65 5d 5b 69 6e 64 65 78 5d 3d 69 73 6f 32 7d 2c 5f 70 72 6f 63 65 73 73 41 6c 6c 43 6f 75 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 43 6f 75 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6c 6f 77 65 72 43 61 73 65 4f 6e 6c 79 43 6f 75 6e 74 72 69 65 73 3d 74 68 69 73 2e 6f 70 74 69 6f Data Ascii: 2,dialCode,priority){dialCode in this.countryCodes\|\|(this.countryCodes[dialCode]=[]);var index=priority\|\|0;this.countryCodes[dialCode][index]=iso2},_processAllCountries:function(){if(this.options.onlyCountries.length){var lowerCaseOnlyCountries=this.optio
2024-10-17 12:27:21 UTC	13131	IN	Data Raw: 6e 75 6d 65 72 69 63 43 68 61 72 73 2e 6c 65 6e 67 74 68 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 64 69 61 6c 43 6f 64 65 7d 2c 5f 67 65 74 46 75 6c 6c 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 76 61 6c 3d 24 2e 74 72 69 6d 28 74 68 69 73 2e 74 65 6c 49 6e 70 75 74 2e 76 61 6c 28 29 29 2c 64 69 61 6c 43 6f 64 65 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 43 6f 75 6e 74 72 79 44 61 74 61 2e 64 69 61 6c 43 6f 64 65 2c 6e 75 6d 65 72 69 63 56 61 6c 3d 74 68 69 73 2e 5f 67 65 74 4e 75 6d 65 72 69 63 28 76 61 6c 29 2c 6e 6f 72 6d 61 6c 69 7a 65 64 56 61 6c 3d 22 31 22 3d 3d 6e 75 6d 65 72 69 63 56 61 6c 2e 63 68 61 72 41 74 28 30 29 3f 6e 75 6d 65 72 69 63 56 61 6c 3a 22 31 22 2b 6e 75 6d 65 72 69 63 56 61 6c 3b 72 65 74 75 72 6e 28 Data Ascii: numericChars.length))break}return dialCode},_getFullNumber:function(){var val=$.trim(this.telInput.val()),dialCode=this.selectedCountryData.dialCode,numericVal=this._getNumeric(val),normalizedVal="1"==numericVal.charAt(0)?numericVal:"1"+numericVal;return(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49766	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:20 UTC	402	OUT	GET /forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:21 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:20 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 152732 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "a54bd9359de4d4853020af3b56295683" Content-Language: en-US Last-Modified: Thu, 03 Oct 2024 05:46:09 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 1668e45c6ec445e74cd6f6b531f9d49f z-origin-id: ex1-471e987584304f95af5bd1550fde0d6c Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:21 UTC	15649	IN	Data Raw: 76 61 72 20 5a 46 43 6f 6e 73 74 61 6e 74 73 3d 7b 53 41 56 45 5f 52 45 43 4f 52 44 5f 53 54 41 54 55 53 3a 31 7d 2c 5a 46 48 74 74 70 3d 7b 47 45 54 3a 22 47 45 54 22 2c 50 4f 53 54 3a 22 50 4f 53 54 22 2c 44 45 4c 45 54 45 3a 22 44 45 4c 45 54 45 22 2c 50 55 54 3a 22 50 55 54 22 7d 2c 5a 46 4d 69 6d 65 54 79 70 65 3d 7b 41 50 50 4c 49 43 41 54 49 4f 4e 5f 4a 53 4f 4e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 2c 5a 46 46 6f 72 6d 46 69 65 6c 64 3d 7b 41 44 44 52 45 53 53 3a 7b 4d 41 50 5f 49 4e 46 4f 3a 22 5f 4d 61 70 5f 49 6e 66 6f 22 2c 43 4f 55 4e 54 52 59 3a 7b 4b 45 59 3a 22 5f 43 6f 75 6e 74 72 79 22 7d 2c 53 54 41 54 45 3a 7b 4b 45 59 3a 22 5f 52 65 67 69 6f 6e 22 7d 2c 43 49 54 59 3a 7b 4b 45 59 3a 22 5f 43 69 74 79 22 7d 2c 41 Data Ascii: var ZFConstants={SAVE_RECORD_STATUS:1},ZFHttp={GET:"GET",POST:"POST",DELETE:"DELETE",PUT:"PUT"},ZFMimeType={APPLICATION_JSON:"application/json"},ZFFormField={ADDRESS:{MAP_INFO:"_Map_Info",COUNTRY:{KEY:"_Country"},STATE:{KEY:"_Region"},CITY:{KEY:"_City"},A
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 75 72 6e 20 64 61 74 65 76 61 6c 7d 2c 74 68 69 73 2e 63 6f 6e 76 65 72 74 54 6f 47 65 6e 65 72 61 6c 44 61 74 65 54 69 6d 65 5f 64 64 4d 4d 4d 79 79 79 79 68 68 6d 6d 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 74 69 6d 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 7b 69 66 28 74 79 70 65 6f 66 20 76 61 6c 75 65 21 3d 52 65 73 70 6f 6e 73 65 4b 65 79 2e 55 4e 44 45 46 49 4e 45 44 26 26 22 22 21 3d 76 61 6c 75 65 29 7b 76 61 72 20 73 70 6c 69 74 49 6e 64 65 78 3d 76 61 6c 75 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 29 2c 64 61 74 65 3d 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 73 70 6c 69 74 49 6e 64 65 78 29 2c 74 69 6d 65 3d 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 73 70 6c 69 74 49 6e 64 65 78 2b 31 29 3b 64 61 74 65 3d Data Ascii: urn dateval},this.convertToGeneralDateTime_ddMMMyyyyhhmm=function(value,timeFormat,dateLocale){if(typeof value!=ResponseKey.UNDEFINED&&""!=value){var splitIndex=value.indexOf(" "),date=value.substring(0,splitIndex),time=value.substring(splitIndex+1);date=
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 66 28 6e 75 6c 6c 21 3d 65 6d 61 69 6c 56 61 6c 75 65 26 26 22 22 3d 3d 21 65 6d 61 69 6c 56 61 6c 75 65 29 7b 76 61 72 20 65 6d 61 69 6c 41 72 72 61 79 3d 65 6d 61 69 6c 56 61 6c 75 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 6d 61 69 6c 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 67 65 74 45 6d 61 69 6c 52 65 67 65 78 28 29 2e 74 65 73 74 28 24 2e 74 72 69 6d 28 65 6d 61 69 6c 41 72 72 61 79 5b 69 5d 29 29 7c 7c 28 63 68 65 63 6b 3d 31 29 7d 72 65 74 75 72 6e 20 30 3d 3d 63 68 65 63 6b 7d 72 65 74 75 72 6e 21 30 7d 2c 74 68 69 73 2e 76 61 6c 69 64 61 74 65 4c 61 74 69 74 75 64 65 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 61 74 69 74 75 64 65 29 7b 72 65 74 75 72 6e 21 21 2f 5e 28 28 5c 2d 7c 5c 2b 29 7b 30 Data Ascii: f(null!=emailValue&&""==!emailValue){var emailArray=emailValue.split(",");for(i=0;i<emailArray.length;i++){getEmailRegex().test($.trim(emailArray[i]))\|\|(check=1)}return 0==check}return!0},this.validateLatitudeFormat=function(latitude){return!!/^((\-\|\+){0
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 75 72 72 65 6e 74 44 61 74 65 45 6c 65 6d 5b 31 5d 2c 63 75 72 72 65 6e 74 44 61 74 65 45 6c 65 6d 5b 30 5d 29 7d 65 6c 73 65 20 69 66 28 35 3d 3d 6c 69 6d 69 74 54 79 70 65 29 69 66 28 74 79 70 65 6f 66 20 6d 69 6e 4c 69 6d 69 74 21 3d 52 65 73 70 6f 6e 73 65 4b 65 79 2e 55 4e 44 45 46 49 4e 45 44 26 26 22 22 21 3d 6d 69 6e 4c 69 6d 69 74 29 7b 76 61 72 20 64 61 74 65 45 6c 65 6d 3d 5a 46 55 74 69 6c 2e 73 70 6c 69 74 44 61 74 65 56 61 6c 28 6d 69 6e 4c 69 6d 69 74 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 3b 6d 69 6e 44 74 4c 69 6d 69 74 3d 6e 65 77 20 44 61 74 65 28 64 61 74 65 45 6c 65 6d 5b 32 5d 2c 64 61 74 65 45 6c 65 6d 5b 31 5d 2c 64 61 74 65 45 6c 65 6d 5b 30 5d 29 7d 65 6c 73 65 20 6d 69 6e 44 74 4c 69 6d 69 74 3d 67 Data Ascii: urrentDateElem[1],currentDateElem[0])}else if(5==limitType)if(typeof minLimit!=ResponseKey.UNDEFINED&&""!=minLimit){var dateElem=ZFUtil.splitDateVal(minLimit,dateFormat,dateLocale);minDtLimit=new Date(dateElem[2],dateElem[1],dateElem[0])}else minDtLimit=g
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 46 6f 72 6d 61 74 2e 48 4f 55 52 53 5f 31 32 2e 43 4f 44 45 7c 7c 22 64 64 2d 6d 6d 6d 2d 79 79 79 79 22 21 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 22 64 64 2d 6d 6d 6d 6d 2d 79 79 79 79 22 21 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 22 6d 6d 6d 6d 2d 64 64 2d 79 79 79 79 22 21 3d 3d 64 61 74 65 46 6f 72 6d 61 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 28 73 70 6c 69 74 44 61 74 65 54 69 6d 65 49 6e 64 65 78 3d 5a 46 55 74 69 6c 2e 67 65 74 53 70 6c 69 74 49 6e 64 65 78 6f 66 44 61 74 65 54 69 6d 65 28 6d 69 6e 4c 69 6d 69 74 29 29 3b 64 61 74 65 45 6c 65 6d 3d 5a 46 55 74 69 6c 2e 73 70 6c 69 74 44 61 74 65 56 61 6c 28 6d 69 6e 4c 69 6d 69 74 2e 73 75 62 73 74 72 69 Data Ascii: Format.HOURS_12.CODE\|\|"dd-mmm-yyyy"!=dateFormat.toLowerCase()&&"dd-mmmm-yyyy"!=dateFormat.toLowerCase()&&"mmmm-dd-yyyy"!==dateFormat.toLowerCase()\|\|(splitDateTimeIndex=ZFUtil.getSplitIndexofDateTime(minLimit));dateElem=ZFUtil.splitDateVal(minLimit.substri
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 72 69 67 67 65 72 46 6f 72 6d 52 65 73 69 7a 65 28 64 69 66 66 48 67 68 74 2c 69 66 72 61 6d 65 53 63 72 6f 6c 6c 52 65 73 65 74 29 7b 76 61 72 20 74 65 6d 70 48 65 69 67 68 74 3d 30 3b 64 69 66 66 48 67 68 74 26 26 28 74 65 6d 70 48 65 69 67 68 74 3d 64 69 66 66 48 67 68 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 73 69 7a 65 66 6f 72 6d 22 29 26 26 31 3d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 73 69 7a 65 66 6f 72 6d 22 29 2e 76 61 6c 75 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 7a 66 52 65 73 69 7a 65 46 6f 72 6d 49 66 72 61 6d 65 26 26 7a 66 52 65 73 69 7a 65 46 6f 72 6d 49 66 72 61 6d 65 28 74 65 6d 70 Data Ascii: }}function triggerFormResize(diffHght,iframeScrollReset){var tempHeight=0;diffHght&&(tempHeight=diffHght),document.getElementById("resizeform")&&1==document.getElementById("resizeform").value&&"function"==typeof zfResizeFormIframe&&zfResizeFormIframe(temp
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 66 69 6e 64 28 22 73 65 6c 65 63 74 5b 6e 61 6d 65 3d 73 6c 6f 74 73 5d 22 29 3b 24 28 73 65 6c 65 63 74 49 6e 54 69 6d 65 50 69 63 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 46 55 74 69 6c 2e 73 65 74 44 61 74 65 54 69 6d 65 28 63 6c 69 65 6e 74 44 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 2c 74 69 6d 65 46 6f 72 6d 61 74 29 7d 29 2c 24 28 73 65 6c 65 63 74 49 6e 54 69 6d 65 50 69 63 6b 65 72 44 72 6f 70 64 6f 77 6e 29 2e 73 65 6c 65 63 74 32 28 7b 74 68 65 6d 65 3a 22 64 65 66 61 75 6c 74 20 6c 69 76 65 44 61 74 65 54 69 6d 65 44 72 6f 70 64 6f 77 6e 20 6c 69 76 65 54 69 6d 65 52 61 6e 67 65 57 69 64 74 68 20 64 72 6f 70 64 6f 77 Data Ascii: kerDropdown).find("select[name=slots]");$(selectInTimePickerDropdown).on("change",function(){ZFUtil.setDateTime(clientDateFormat,dateLocale,timeFormat)}),$(selectInTimePickerDropdown).select2({theme:"default liveDateTimeDropdown liveTimeRangeWidth dropdow
2024-10-17 12:27:21 UTC	16384	IN	Data Raw: 2c 32 36 36 3a 22 50 45 4e 22 2c 32 36 37 3a 22 50 48 50 22 2c 32 36 38 3a 22 50 4c 4e 22 2c 32 36 39 3a 22 50 54 45 22 2c 32 37 30 3a 22 51 41 52 22 2c 32 37 31 3a 22 52 4f 4e 22 2c 32 37 32 3a 22 52 4f 4c 22 2c 32 37 33 3a 22 52 55 42 22 2c 32 37 34 3a 22 53 41 52 22 2c 32 37 35 3a 22 53 47 44 22 2c 32 37 36 3a 22 53 4b 4b 22 2c 32 37 37 3a 22 53 49 54 22 2c 32 37 38 3a 22 5a 41 52 22 2c 32 37 39 3a 22 4b 52 57 22 2c 32 38 30 3a 22 45 53 50 22 2c 32 38 31 3a 22 4c 4b 52 22 2c 32 38 32 3a 22 53 44 44 22 2c 32 38 33 3a 22 53 45 4b 22 2c 32 38 34 3a 22 43 48 46 22 2c 32 38 35 3a 22 54 57 44 22 2c 32 38 36 3a 22 54 48 42 22 2c 32 38 37 3a 22 54 54 44 22 2c 32 38 38 3a 22 54 4e 44 22 2c 32 39 30 3a 22 41 45 44 22 2c 32 39 31 3a 22 47 42 50 22 2c 32 39 32 3a Data Ascii: ,266:"PEN",267:"PHP",268:"PLN",269:"PTE",270:"QAR",271:"RON",272:"ROL",273:"RUB",274:"SAR",275:"SGD",276:"SKK",277:"SIT",278:"ZAR",279:"KRW",280:"ESP",281:"LKR",282:"SDD",283:"SEK",284:"CHF",285:"TWD",286:"THB",287:"TTD",288:"TND",290:"AED",291:"GBP",292:
2024-10-17 12:27:22 UTC	16384	IN	Data Raw: 6f 76 69 6e 61 22 2c 42 57 3a 22 42 6f 74 73 77 61 6e 61 22 2c 42 56 3a 22 42 6f 75 76 65 74 20 49 73 6c 61 6e 64 22 2c 42 52 3a 22 42 72 61 7a 69 6c 22 2c 49 4f 3a 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 56 47 3a 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 42 4e 3a 22 42 72 75 6e 65 69 22 2c 42 47 3a 22 42 75 6c 67 61 72 69 61 22 2c 42 46 3a 22 42 75 72 6b 69 6e 61 20 46 61 73 6f 22 2c 42 49 3a 22 42 75 72 75 6e 64 69 22 2c 4b 48 3a 22 43 61 6d 62 6f 64 69 61 22 2c 43 4d 3a 22 43 61 6d 65 72 6f 6f 6e 22 2c 43 41 3a 22 43 61 6e 61 64 61 22 2c 43 56 3a 22 43 61 70 65 20 56 65 72 64 65 22 2c 42 51 3a 22 43 61 72 69 62 62 65 61 6e 20 4e 65 74 68 65 72 6c 61 6e 64 73 22 Data Ascii: ovina",BW:"Botswana",BV:"Bouvet Island",BR:"Brazil",IO:"British Indian Ocean Territory",VG:"British Virgin Islands",BN:"Brunei",BG:"Bulgaria",BF:"Burkina Faso",BI:"Burundi",KH:"Cambodia",CM:"Cameroon",CA:"Canada",CV:"Cape Verde",BQ:"Caribbean Netherlands"
2024-10-17 12:27:22 UTC	6011	IN	Data Raw: 65 79 44 6f 77 6e 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 2c 5a 46 55 74 69 6c 2e 63 6c 6f 73 65 48 6f 76 65 72 54 65 78 74 50 6f 70 75 70 28 29 2c 24 28 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 29 2e 73 68 6f 77 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 4f 6e 4b 65 79 44 6f 77 6e 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 6d 6f 6e 74 68 59 65 61 72 50 69 63 6b 65 72 2c 64 61 74 65 46 6f 72 6d 61 74 2c 64 61 74 65 4c 6f 63 61 6c 65 29 7b 24 28 69 6e 70 75 74 45 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 22 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 69 66 28 31 Data Ascii: eyDown(inputElement,monthYearPicker,dateFormat,dateLocale),ZFUtil.closeHoverTextPopup(),$(monthYearPicker).show()})}function callOnKeyDown(inputElement,monthYearPicker,dateFormat,dateLocale){$(inputElement).off("keydown").on("keydown",function(event){if(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49768	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:23 UTC	639	OUT	GET /forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://forms.zohopublic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:23 UTC	717	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:23 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "90b027430294ec8a2b0b53acc000fbaf" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:43 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 00241bda9b051794026fcdfe25cfa530 z-origin-id: ex1-c8daeef6333143f7abd6f79f8c13ab84 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:23 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0e ff ff ff 54 ff ff ff 9e ff ff ff d5 ff ff ff ee ff ff ff f0 ff ff ff ef ff ff ff f0 ff ff ff e4 ff ff ff b2 ff ff ff 5e ff ff ff 77 ff ff ff c5 ff ff ff eb ff ff ff f0 ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff f0 ff ff ff ee ff ff ff d5 ff ff ff 9e ff Data Ascii: 00 %6 % h6(0` $T^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49770	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:23 UTC	396	OUT	GET /forms/js/formslive.a52d1c28698e28f4751854660c45525a.js HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:23 UTC	735	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:23 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 978393 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "1437d1caf235e36b94ab1a58e31052cf" Content-Language: en-US Last-Modified: Mon, 14 Oct 2024 12:53:04 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 1d59294750162018f1cff3309c429831 z-origin-id: ex1-7095db3538bb42ca94efb96139fda8cf Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:23 UTC	15649	IN	Data Raw: 2f 2f 20 24 49 64 3a 20 24 0a 2f 2a 2a 0a 20 2a 20 49 4d 50 4f 52 54 41 4e 54 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 6f 6d 70 72 65 73 73 65 64 20 6a 73 20 66 69 6c 65 20 69 6e 63 6c 75 64 65 73 20 5a 6f 68 6f 20 46 6f 72 6d 73 20 46 6f 72 6d 73 2f 52 65 70 6f 72 74 20 6c 69 76 65 20 6a 73 2e 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 5a 46 4c 69 76 65 46 6f 72 6d 46 6f 63 75 73 48 61 6e 64 65 72 4f 6e 4e 61 76 69 67 61 74 69 6f 6e 28 61 63 74 69 6f 6e 54 79 70 65 2c 70 61 67 65 4e 6f 29 7b 74 68 69 73 2e 61 63 74 69 6f 6e 54 79 70 65 3d 61 63 74 69 6f 6e 54 79 70 65 2c 74 68 69 73 2e 70 61 67 65 4e 6f 3d 70 61 67 65 4e 6f 7d 66 75 6e 63 74 69 6f 6e 20 5a 46 4c 69 76 65 46 69 65 6c 64 46 6f 63 75 73 48 61 6e 64 65 72 28 66 69 65 6c 64 45 6c 65 6d 2c 66 6f Data Ascii: // $Id: $/** * IMPORTANT NOTE: This compressed js file includes Zoho Forms Forms/Report live js. */function ZFLiveFormFocusHanderOnNavigation(actionType,pageNo){this.actionType=actionType,this.pageNo=pageNo}function ZFLiveFieldFocusHander(fieldElem,fo
2024-10-17 12:27:23 UTC	16384	IN	Data Raw: 7b 76 61 72 20 63 6f 6d 70 74 79 70 65 3d 24 28 74 68 69 73 2e 66 69 65 6c 64 45 6c 65 6d 29 2e 61 74 74 72 28 22 63 6f 6d 70 74 79 70 65 22 29 2c 63 6f 6d 70 54 79 70 65 49 6e 74 3d 70 61 72 73 65 49 6e 74 28 63 6f 6d 70 74 79 70 65 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 46 49 4c 45 5f 55 50 4c 4f 41 44 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 49 4d 41 47 45 5f 55 50 4c 4f 41 44 29 2c 75 70 6c 6f 61 64 46 69 65 6c 64 73 2e 70 75 73 68 28 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4d 45 44 49 41 5f 55 50 Data Ascii: {var comptype=$(this.fieldElem).attr("comptype"),compTypeInt=parseInt(comptype),uploadFields=[];return uploadFields.push(ZFFieldTypeConstants.FILE_UPLOAD),uploadFields.push(ZFFieldTypeConstants.IMAGE_UPLOAD),uploadFields.push(ZFFieldTypeConstants.MEDIA_UP
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 6d 28 24 28 69 6e 70 75 74 45 6c 65 6d 29 2e 76 61 6c 28 29 29 2c 76 61 6c 75 65 4a 73 6f 6e 5b 24 28 65 6c 65 6d 29 2e 61 74 74 72 28 22 63 6f 6d 70 6e 61 6d 65 22 29 5d 3d 76 65 72 43 6f 64 65 4a 73 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 74 72 75 63 74 44 65 63 69 6d 61 6c 46 69 65 6c 64 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 2c 66 72 6f 6d 52 65 76 69 65 77 29 7b 76 61 72 20 69 6e 70 56 61 6c 3d 24 2e 74 72 69 6d 28 24 28 65 6c 65 6d 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 22 29 2e 76 61 6c 28 29 29 2c 64 65 63 69 6d 61 6c 46 6f 72 6d 61 74 3d 24 28 65 6c 65 6d 29 2e 61 74 74 72 28 22 64 65 63 69 6d 61 6c 66 6f 72 6d 61 74 22 29 2c 72 65 46 6f 72 6d 61 74 74 65 64 56 61 6c 3d 5a 46 55 74 69 6c 2e 67 65 74 52 65 66 6f 72 6d 61 74 74 65 64 Data Ascii: m($(inputElem).val()),valueJson[$(elem).attr("compname")]=verCodeJson}function constructDecimalField(valueJson,elem,fromReview){var inpVal=$.trim($(elem).find("input").val()),decimalFormat=$(elem).attr("decimalformat"),reFormattedVal=ZFUtil.getReformatted
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 28 72 65 73 70 4a 73 6f 6e 29 7b 69 66 28 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 22 29 2e 73 68 6f 77 28 29 2c 69 73 53 74 61 6e 64 61 72 64 46 6f 72 6d 28 29 26 26 69 73 45 6d 62 65 64 64 65 64 46 6f 72 6d 28 29 29 7b 76 61 72 20 70 6f 70 75 70 48 65 69 67 68 74 3d 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 43 6f 6e 74 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 30 29 3b 73 65 74 50 6f 70 75 70 50 6f 73 69 74 69 6f 6e 4e 65 61 72 52 65 66 45 6c 65 6d 28 24 28 22 23 70 61 79 70 61 6c 43 6b 6f 75 74 41 63 74 69 6f 6e 44 69 76 43 6f 6e 74 22 29 2c 24 28 22 64 69 76 5b 65 6c 6e 61 6d 65 3d 66 6f 6f 74 65 72 5d 3a 76 69 73 69 62 6c 65 22 29 2c 2d 31 2a 70 6f 70 75 70 48 65 69 67 68 74 2c 21 30 Data Ascii: (respJson){if($("#paypalCkoutActionDiv").show(),isStandardForm()&&isEmbeddedForm()){var popupHeight=$("#paypalCkoutActionDivCont").outerHeight(!0);setPopupPositionNearRefElem($("#paypalCkoutActionDivCont"),$("div[elname=footer]:visible"),-1*popupHeight,!0
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 54 49 4d 45 3f 63 6f 6e 73 74 72 75 63 74 44 61 74 65 54 69 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 54 49 4d 45 3f 63 6f 6e 73 74 72 75 63 74 54 69 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4e 41 4d 45 3f 63 6f 6e 73 74 72 75 63 74 4e 61 6d 65 28 76 61 6c 75 65 4a 73 6f 6e 2c 65 6c 65 6d 2c 66 72 6f 6d 52 65 76 69 65 77 29 3a 63 6f 6d 70 74 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 Data Ascii: eJson,elem):comptype===ZFFieldTypeConstants.DATETIME?constructDateTime(valueJson,elem):comptype==ZFFieldTypeConstants.TIME?constructTime(valueJson,elem):comptype==ZFFieldTypeConstants.NAME?constructName(valueJson,elem,fromReview):comptype==ZFFieldTypeCons
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 73 2e 52 45 53 54 52 49 43 54 5f 53 50 45 43 49 46 49 43 26 26 69 73 44 6f 6d 61 69 6e 45 78 69 73 74 73 28 65 6d 61 69 6c 56 61 6c 75 65 2c 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 29 72 65 74 75 72 6e 20 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 3d 73 65 74 64 6f 6d 61 69 6e 56 61 6c 75 65 73 28 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 2c 65 6d 61 69 6c 45 72 72 41 72 72 61 79 5b 30 5d 3d 5a 46 55 74 69 6c 2e 72 65 70 6c 61 63 65 50 61 72 61 6d 73 28 5a 46 4c 69 76 65 45 72 72 6f 72 43 6f 6e 73 74 61 6e 74 73 2e 72 65 73 74 72 69 63 74 65 64 64 6f 6d 61 69 6e 2c 72 65 73 74 72 69 63 74 65 64 44 6f 6d 61 69 6e 29 2c 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 4e 75 6d 62 65 72 28 65 Data Ascii: s.RESTRICT_SPECIFIC&&isDomainExists(emailValue,restrictedDomain))return restrictedDomain=setdomainValues(restrictedDomain),emailErrArray[0]=ZFUtil.replaceParams(ZFLiveErrorConstants.restricteddomain,restrictedDomain),!1}}return!0}function validateNumber(e
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 24 28 70 61 72 65 6e 74 45 6c 65 6d 29 2e 63 6c 6f 73 65 73 74 28 27 75 6c 5b 65 6c 6e 61 6d 65 3d 22 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 22 5d 27 29 2e 61 74 74 72 28 22 70 61 67 65 5f 6e 6f 22 29 3b 73 68 6f 77 41 6e 64 48 69 64 65 50 61 67 65 28 70 61 67 65 4e 75 6d 29 2c 73 65 74 4e 65 65 64 44 61 74 61 46 6f 72 45 72 72 6f 72 28 70 61 67 65 4e 75 6d 2c 69 73 53 74 61 6e 64 61 72 64 46 6f 72 6d 28 29 3f 24 28 22 23 66 6f 72 6d 42 6f 64 79 44 69 76 22 29 2e 66 69 6e 64 28 22 64 69 76 5b 65 6c 6e 61 6d 65 3d 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 5d 22 29 2e 6c 65 6e 67 74 68 3a 24 28 22 23 66 6f 72 6d 42 6f 64 79 44 69 76 22 29 2e 66 69 6e 64 28 22 75 6c 5b 65 6c 6e 61 6d 65 3d 66 6f 72 6d 42 6f 64 79 55 4c 4e 61 6d 65 5d 22 29 2e 6c 65 6e 67 Data Ascii: $(parentElem).closest('ul[elname="formBodyULName"]').attr("page_no");showAndHidePage(pageNum),setNeedDataForError(pageNum,isStandardForm()?$("#formBodyDiv").find("div[elname=formBodyULName]").length:$("#formBodyDiv").find("ul[elname=formBodyULName]").leng
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 75 6c 61 74 69 6f 6e 54 79 70 65 2e 44 41 59 53 29 2c 65 78 70 72 65 73 73 69 6f 6e 41 72 72 2e 70 75 73 68 28 74 6f 6b 65 6e 29 2c 74 65 6d 70 54 6f 6b 65 6e 3d 3d 44 61 74 65 43 61 6c 63 75 6c 61 74 69 6f 6e 54 79 70 65 2e 43 4f 55 4e 54 26 26 28 69 73 54 65 6d 70 54 6f 6b 65 6e 43 6f 6e 74 61 69 6e 73 43 6f 75 6e 74 3d 21 30 29 2c 74 65 6d 70 54 6f 6b 65 6e 3d 22 22 7d 7d 22 22 21 3d 74 65 6d 70 54 6f 6b 65 6e 26 26 28 74 65 6d 70 54 6f 6b 65 6e 3d 3d 44 61 74 65 43 61 6c 63 75 6c 61 74 69 6f 6e 54 79 70 65 2e 46 4f 52 4d 53 43 55 52 52 45 4e 54 44 41 54 45 3f 65 78 70 72 65 73 73 69 6f 6e 41 72 72 2e 70 75 73 68 28 5a 46 55 74 69 6c 2e 63 6f 6e 76 65 72 74 54 6f 47 65 6e 65 72 61 6c 44 61 74 65 5f 64 64 4d 4d 4d 79 79 79 79 28 5a 46 4c 69 76 65 2e 66 Data Ascii: ulationType.DAYS),expressionArr.push(token),tempToken==DateCalculationType.COUNT&&(isTempTokenContainsCount=!0),tempToken=""}}""!=tempToken&&(tempToken==DateCalculationType.FORMSCURRENTDATE?expressionArr.push(ZFUtil.convertToGeneralDate_ddMMMyyyy(ZFLive.f
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 63 68 61 6e 67 65 22 2c 22 69 6e 70 75 74 22 2c 65 76 61 6c 43 68 6f 69 63 65 45 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 65 6c 73 65 20 69 66 28 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 4d 55 4c 54 49 50 4c 45 5f 43 48 4f 49 43 45 29 24 28 6c 69 45 6c 65 6d 29 2e 6f 6e 28 22 63 68 61 6e 67 65 22 2c 22 73 65 6c 65 63 74 22 2c 65 76 61 6c 43 68 6f 69 63 65 45 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 65 6c 73 65 20 69 66 28 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 54 49 4d 45 7c 7c 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 70 65 43 6f 6e 73 74 61 6e 74 73 2e 44 41 54 45 7c 7c 63 6f 6d 70 54 79 70 65 3d 3d 5a 46 46 69 65 6c 64 54 79 Data Ascii: change","input",evalChoiceExpression());else if(compType==ZFFieldTypeConstants.MULTIPLE_CHOICE)$(liElem).on("change","select",evalChoiceExpression());else if(compType==ZFFieldTypeConstants.DATETIME\|\|compType==ZFFieldTypeConstants.DATE\|\|compType==ZFFieldTy
2024-10-17 12:27:24 UTC	16384	IN	Data Raw: 6e 65 78 74 50 61 67 65 55 6c 29 2c 66 6f 63 75 73 46 69 72 73 74 46 69 65 6c 64 4f 6e 50 61 67 65 4e 61 76 28 6e 65 78 74 50 61 67 65 4e 6f 29 2c 63 68 65 63 6b 50 61 67 65 47 54 4d 28 6e 65 78 74 50 61 67 65 4c 69 29 2c 73 65 74 53 69 67 6e 61 74 75 72 65 45 6c 65 6d 57 69 64 74 68 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 73 65 74 4d 61 74 72 69 78 45 6c 65 6d 57 69 64 74 68 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 73 65 74 4d 61 74 72 69 78 45 6c 65 6d 48 65 69 67 68 74 28 6e 65 78 74 50 61 67 65 55 6c 29 2c 74 72 69 67 67 65 72 46 6f 72 6d 52 65 73 69 7a 65 28 21 31 2c 21 30 29 7d 29 3b 65 6c 73 65 20 24 28 66 6f 72 6d 44 69 76 29 2e 66 69 6e 64 28 22 75 6c 5b 65 6c 6e 61 6d 65 3d 66 6f 6f 74 65 72 5d 5b 70 61 67 65 5f 6e 6f 3d 22 2b 70 61 67 65 4e 6f 2b Data Ascii: nextPageUl),focusFirstFieldOnPageNav(nextPageNo),checkPageGTM(nextPageLi),setSignatureElemWidth(nextPageUl),setMatrixElemWidth(nextPageUl),setMatrixElemHeight(nextPageUl),triggerFormResize(!1,!0)});else $(formDiv).find("ul[elname=footer][page_no="+pageNo+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	89.36.170.147	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:24 UTC	399	OUT	GET /forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico HTTP/1.1 Host: static.zohocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-17 12:27:25 UTC	717	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:24 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close X-Content-Type-Options: nosniff Cache-Control: public, max-age=7776000, immutable ETag: "90b027430294ec8a2b0b53acc000fbaf" Content-Language: en-US Last-Modified: Fri, 29 Mar 2024 10:00:43 GMT Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * Vary: Accept-Encoding strict-transport-security: max-age=15768000 Timing-Allow-Origin: * x-cache: HIT nb-request-id: 11695ce23d5ee086f1903d63327db341 z-origin-id: ex1-78845c7979184451afbb535ca52a1ea6 Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000 Accept-Ranges: bytes
2024-10-17 12:27:25 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0e ff ff ff 54 ff ff ff 9e ff ff ff d5 ff ff ff ee ff ff ff f0 ff ff ff ef ff ff ff f0 ff ff ff e4 ff ff ff b2 ff ff ff 5e ff ff ff 77 ff ff ff c5 ff ff ff eb ff ff ff f0 ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff ef ff ff ff f0 ff ff ff ee ff ff ff d5 ff ff ff 9e ff Data Ascii: 00 %6 % h6(0` $T^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49779	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:32 UTC	891	OUT	POST /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE/records HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive Content-Length: 12 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/zoho.forms-v1+json Content-Type: application/json X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://forms.zohopublic.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:32 UTC	12	OUT	Data Raw: 7b 22 45 6d 61 69 6c 22 3a 22 22 7d Data Ascii: {"Email":""}
2024-10-17 12:27:33 UTC	389	IN	HTTP/1.1 200 Server: ZGS Date: Thu, 17 Oct 2024 12:27:33 GMT Content-Type: application/json;charset=utf-8 Content-Length: 195 Connection: close X-Content-Type-Options: nosniff X-Frame-Options: DENY Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:33 UTC	195	IN	Data Raw: 7b 22 6f 70 65 6e 5f 74 68 61 6e 6b 79 6f 75 5f 70 61 67 65 5f 55 52 4c 5f 69 6e 22 3a 31 2c 22 65 6e 63 6f 64 65 64 5f 73 74 72 69 6e 67 22 3a 22 6f 74 70 35 4c 54 68 5a 65 59 72 41 38 42 58 65 58 32 52 53 6f 5f 34 66 66 78 7a 43 4d 35 51 34 76 4d 34 6d 30 32 56 65 64 6c 45 22 2c 22 74 68 61 6e 6b 79 6f 75 5f 70 61 67 65 5f 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 72 6b 6c 2d 69 70 6c 6b 2d 67 72 74 65 73 2e 75 73 2d 73 65 61 2d 31 2e 6c 69 6e 6f 64 65 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 61 6e 74 75 2e 68 74 6d 6c 22 2c 22 72 65 64 69 72 65 63 74 5f 74 79 70 65 22 3a 32 7d Data Ascii: {"open_thankyou_page_URL_in":1,"encoded_string":"otp5LThZeYrA8BXeX2RSo_4ffxzCM5Q4vM4m02VedlE","thankyou_page_URL":"https://trkl-iplk-grtes.us-sea-1.linodeobjects.com/antu.html","redirect_type":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:34 UTC	486	OUT	GET /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE/records HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:34 UTC	301	IN	HTTP/1.1 302 Server: ZGS Date: Thu, 17 Oct 2024 12:27:34 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Location: https://forms.zohopublic.com/showerror Strict-Transport-Security: max-age=63072000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49783	136.143.182.97	443	2056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:27:34 UTC	411	OUT	GET /showerror HTTP/1.1 Host: forms.zohopublic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
2024-10-17 12:27:35 UTC	607	IN	HTTP/1.1 400 Server: ZGS Date: Thu, 17 Oct 2024 12:27:35 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff Set-Cookie: zfccn=c0c94799-d8e1-4dd2-90ab-0ad3b0c9859a;path=/;SameSite=None;Secure;priority=high Set-Cookie: _zcsr_tmp=c0c94799-d8e1-4dd2-90ab-0ad3b0c9859a;path=/;SameSite=Strict;Secure;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT vary: accept-encoding Content-Language: en-US Strict-Transport-Security: max-age=63072000
2024-10-17 12:27:35 UTC	15777	IN	Data Raw: 31 64 65 61 0d 0a 3c 21 2d 2d 20 24 49 64 3a 20 24 20 2d 2d 3e 0a 3c 73 76 67 20 73 74 79 6c 65 3d 22 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 0a 0a 3c 21 2d 2d 64 65 6c 65 74 65 5f 69 63 6f 6e 20 73 74 61 72 74 73 20 68 65 72 65 2d 2d 3e 0a 0a 3c 21 2d 2d 64 65 6c 65 74 65 5f 69 63 6f 6e 20 65 6e 64 73 20 68 65 72 65 2d 2d 3e 0a 0a 3c 21 2d 2d 72 65 66 72 65 73 68 5f 69 63 6f 6e 20 73 74 61 72 74 73 20 68 65 72 65 2d 2d 3e 0a 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 72 65 66 72 65 73 68 5f 69 63 6f 6e 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 3c 70 61 74 68 20 20 64 3d 22 4d 31 37 2e 36 37 32 20 36 2e 33 32 38 6c 32 2e 33 34 34 2d 32 2e 33 34 34 76 37 2e 30 33 31 68 2d 37 2e 30 33 31 6c 33 2e 32 33 34 2d 33 2e 32 33 34 63 2d Data Ascii: 1dea... $Id: $ --><svg style=" display:none;">...delete_icon starts here-->...delete_icon ends here-->...refresh_icon starts here--><symbol id="refresh_icon" viewBox="0 0 24 24"><path d="M17.672 6.328l2.344-2.344v7.031h-7.031l3.234-3.234c-
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 2d 31 20 31 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 36 35 20 31 36 2e 37 63 2d 30 2e 34 20 30 2d 30 2e 38 35 2d 30 2e 31 35 2d 31 2e 32 2d 30 2e 34 6c 2d 31 32 2e 35 2d 39 2e 35 63 2d 30 2e 34 35 2d 30 2e 33 35 2d 30 2e 35 2d 30 2e 39 35 2d 30 2e 32 2d 31 2e 34 20 30 2e 33 35 2d 30 2e 34 35 20 30 2e 39 35 2d 30 2e 35 20 31 2e 34 2d 30 2e 32 6c 31 32 2e 34 35 20 39 2e 35 20 31 32 2e 34 35 2d 39 2e 35 63 30 2e 34 35 2d 30 2e 33 35 20 31 2e 30 35 30 2d 30 2e 32 35 20 31 2e 34 20 30 2e 32 73 30 2e 32 35 20 31 2e 30 35 30 2d 30 2e 32 20 31 2e 34 6c 2d 31 32 2e 35 20 39 2e 35 63 2d 30 2e 32 35 20 30 2e 32 35 2d 30 2e 37 20 30 2e 34 2d 31 2e 31 20 30 2e 34 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 34 Data Ascii: -1 1z"></path><path d="M15.65 16.7c-0.4 0-0.85-0.15-1.2-0.4l-12.5-9.5c-0.45-0.35-0.5-0.95-0.2-1.4 0.35-0.45 0.95-0.5 1.4-0.2l12.45 9.5 12.45-9.5c0.45-0.35 1.050-0.25 1.4 0.2s0.25 1.050-0.2 1.4l-12.5 9.5c-0.25 0.25-0.7 0.4-1.1 0.4z"></path><path d="M24.4
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 2d 34 2e 38 32 38 68 2d 37 2e 35 38 34 63 2d 30 2e 37 36 33 20 30 2d 31 2e 33 38 31 20 30 2e 36 32 2d 31 2e 33 38 31 20 31 2e 33 38 34 76 31 35 2e 38 35 32 63 30 20 30 2e 37 36 35 20 30 2e 36 31 34 20 31 2e 33 38 34 20 31 2e 33 37 38 20 31 2e 33 38 34 6c 37 2e 30 37 36 2d 30 7a 4d 38 20 31 37 2e 39 33 31 68 2d 36 2e 36 32 31 63 2d 30 2e 33 37 36 20 30 2d 30 2e 36 39 2d 30 2e 33 30 37 2d 30 2e 36 39 2d 30 2e 36 38 37 76 2d 31 35 2e 38 36 38 63 30 2d 30 2e 33 37 33 20 30 2e 33 30 37 2d 30 2e 36 38 37 20 30 2e 36 38 37 2d 30 2e 36 38 37 68 36 2e 39 76 33 2e 34 34 34 63 30 20 30 2e 37 37 32 20 30 2e 36 31 37 20 31 2e 33 38 33 20 31 2e 33 37 38 20 31 2e 33 38 33 68 32 2e 37 36 76 37 2e 30 33 39 63 2d 30 2e 33 32 39 2d 30 2e 30 39 33 2d 30 2e 36 37 36 2d 30 2e Data Ascii: -4.828h-7.584c-0.763 0-1.381 0.62-1.381 1.384v15.852c0 0.765 0.614 1.384 1.378 1.384l7.076-0zM8 17.931h-6.621c-0.376 0-0.69-0.307-0.69-0.687v-15.868c0-0.373 0.307-0.687 0.687-0.687h6.9v3.444c0 0.772 0.617 1.383 1.378 1.383h2.76v7.039c-0.329-0.093-0.676-0.
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 33 2e 30 37 33 6c 30 2e 39 30 35 2d 30 2e 39 30 35 20 31 32 2e 36 36 20 31 32 2e 36 36 2d 30 2e 39 30 35 20 30 2e 39 30 35 63 2d 30 2e 38 30 34 2d 30 2e 37 39 33 2d 31 2e 36 31 33 2d 31 2e 35 38 2d 32 2e 34 31 32 2d 32 2e 33 37 39 2d 30 2e 39 37 31 20 30 2e 34 30 32 2d 32 2e 30 31 30 20 30 2e 36 30 32 2d 33 2e 31 31 34 20 30 2e 36 30 32 2d 33 2e 35 38 35 20 30 2d 36 2e 36 33 31 2d 32 2e 32 30 39 2d 37 2e 38 37 32 2d 35 2e 33 35 39 20 30 2e 35 36 39 2d 31 2e 34 30 35 20 31 2e 35 30 37 2d 32 2e 36 31 31 20 32 2e 36 38 2d 33 2e 35 34 39 2d 30 2e 36 35 31 2d 30 2e 36 35 31 2d 31 2e 32 39 33 2d 31 2e 33 31 38 2d 31 2e 39 34 31 2d 31 2e 39 37 34 7a 4d 31 38 2e 35 35 20 31 35 2e 30 31 34 63 2d 30 2e 34 36 38 20 30 2d 30 2e 39 30 35 20 30 2e 31 30 31 2d 31 2e 33 Data Ascii: 3.073l0.905-0.905 12.66 12.66-0.905 0.905c-0.804-0.793-1.613-1.58-2.412-2.379-0.971 0.402-2.010 0.602-3.114 0.602-3.585 0-6.631-2.209-7.872-5.359 0.569-1.405 1.507-2.611 2.68-3.549-0.651-0.651-1.293-1.318-1.941-1.974zM18.55 15.014c-0.468 0-0.905 0.101-1.3
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 39 2d 30 2e 32 20 35 2e 34 20 30 20 38 2e 39 20 35 2e 34 20 39 2e 39 20 37 2d 30 2e 35 20 30 2e 39 2d 31 2e 31 20 31 2e 38 2d 31 2e 38 20 32 2e 35 2d 30 2e 34 20 30 2e 34 2d 30 2e 33 20 31 2e 31 20 30 2e 31 20 31 2e 34 20 30 2e 32 20 30 2e 32 20 30 2e 34 20 30 2e 32 20 30 2e 36 20 30 2e 32 20 30 2e 33 20 30 20 30 2e 36 2d 30 2e 31 20 30 2e 38 2d 30 2e 34 20 30 2e 39 2d 31 20 31 2e 36 2d 32 2e 32 20 32 2e 33 2d 33 2e 34 20 30 2e 32 2d 30 2e 33 20 30 2e 32 2d 30 2e 36 20 30 2d 30 2e 39 2d 30 2e 32 2d 30 2e 32 2d 34 2e 34 2d 38 2e 34 2d 31 31 2e 39 2d 38 2e 34 2d 30 2e 38 20 30 2d 31 2e 36 20 30 2e 31 2d 32 2e 33 20 30 2e 33 2d 30 2e 36 20 30 2e 31 2d 30 2e 39 20 30 2e 36 2d 30 2e 38 20 31 2e 32 20 30 2e 32 20 30 2e 35 20 30 2e 37 20 30 2e 38 20 31 2e 32 20 Data Ascii: 9-0.2 5.4 0 8.9 5.4 9.9 7-0.5 0.9-1.1 1.8-1.8 2.5-0.4 0.4-0.3 1.1 0.1 1.4 0.2 0.2 0.4 0.2 0.6 0.2 0.3 0 0.6-0.1 0.8-0.4 0.9-1 1.6-2.2 2.3-3.4 0.2-0.3 0.2-0.6 0-0.9-0.2-0.2-4.4-8.4-11.9-8.4-0.8 0-1.6 0.1-2.3 0.3-0.6 0.1-0.9 0.6-0.8 1.2 0.2 0.5 0.7 0.8 1.2
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 32 2e 36 35 31 2d 31 30 2e 39 39 35 20 31 30 2e 39 39 35 2d 32 2e 36 35 31 2d 32 2e 36 35 31 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 32 33 34 20 34 2e 31 33 37 6c 2d 31 2e 33 32 36 20 31 2e 33 32 36 20 36 2e 36 32 38 20 36 2e 36 32 38 20 31 2e 33 32 36 2d 31 2e 33 32 36 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 2e 35 30 37 20 31 39 2e 33 35 35 6c 2d 32 2e 37 30 33 20 37 2e 36 34 35 63 2d 30 2e 31 32 31 20 30 2e 33 34 31 2d 30 2e 30 33 35 20 30 2e 37 32 20 30 2e 32 32 31 20 30 2e 39 37 35 20 30 2e 32 36 33 20 30 2e 32 36 33 20 30 2e 36 34 38 20 30 2e 33 33 38 20 30 2e 39 37 35 20 30 2e 32 32 31 6c 37 2e 36 34 36 2d 32 2e 37 30 33 2d 36 2e 31 33 38 2d 36 2e 31 33 38 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c Data Ascii: 2.651-10.995 10.995-2.651-2.651z"></path><path d="M21.234 4.137l-1.326 1.326 6.628 6.628 1.326-1.326z"></path><path d="M6.507 19.355l-2.703 7.645c-0.121 0.341-0.035 0.72 0.221 0.975 0.263 0.263 0.648 0.338 0.975 0.221l7.646-2.703-6.138-6.138z"></path><
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 36 2d 31 2e 30 34 30 2d 30 2e 39 36 73 2d 31 2e 30 34 30 20 30 2e 34 2d 31 2e 30 34 30 20 30 2e 39 36 76 39 2e 34 34 63 30 20 30 2e 34 38 20 30 2e 34 38 20 30 2e 39 36 20 31 2e 30 34 30 20 30 2e 39 36 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 09 09 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 33 36 20 32 36 2e 34 63 30 2e 35 36 20 30 20 31 2e 30 34 30 2d 30 2e 34 20 31 2e 30 34 30 2d 30 2e 39 36 76 2d 39 2e 34 34 63 30 2d 30 2e 34 38 2d 30 2e 34 38 2d 30 2e 39 36 2d 31 2e 30 34 30 2d 30 2e 39 36 73 2d 31 2e 30 34 30 20 30 2e 34 2d 31 2e 30 34 30 20 30 2e 39 36 76 39 2e 34 34 63 2d 30 2e 30 38 30 20 30 2e 34 38 20 30 2e 34 20 30 2e 39 36 20 31 2e 30 34 30 20 30 2e 39 36 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 3c 73 79 6d 62 6f 6c 20 Data Ascii: 6-1.040-0.96s-1.040 0.4-1.040 0.96v9.44c0 0.48 0.48 0.96 1.040 0.96z"></path><path d="M21.36 26.4c0.56 0 1.040-0.4 1.040-0.96v-9.44c0-0.48-0.48-0.96-1.040-0.96s-1.040 0.4-1.040 0.96v9.44c-0.080 0.48 0.4 0.96 1.040 0.96z"></path></symbol><symbol
2024-10-17 12:27:35 UTC	16384	IN	Data Raw: 2e 33 35 36 2d 30 2e 38 2d 30 2e 38 2d 30 2e 38 68 2d 34 2e 33 38 38 63 2d 32 2e 32 34 34 20 30 2d 34 2e 30 36 33 20 31 2e 38 36 39 2d 34 2e 30 36 33 20 34 2e 31 36 39 76 32 33 2e 36 36 33 63 30 20 32 2e 33 20 31 2e 38 31 39 20 34 2e 31 36 39 20 34 2e 30 35 30 20 34 2e 31 36 39 68 31 35 2e 34 35 63 30 2e 34 34 34 20 30 20 30 2e 38 2d 30 2e 33 35 36 20 30 2e 38 2d 30 2e 38 73 2d 30 2e 33 35 36 2d 30 2e 38 2d 30 2e 38 2d 30 2e 38 76 30 7a 4d 32 38 2e 36 35 36 20 30 68 2d 34 2e 35 33 31 63 2d 30 2e 34 34 34 20 30 2d 30 2e 38 20 30 2e 33 35 36 2d 30 2e 38 20 30 2e 38 73 30 2e 33 35 36 20 30 2e 38 20 30 2e 38 20 30 2e 38 68 34 2e 35 33 31 63 31 2e 32 38 31 20 30 20 32 2e 33 36 39 20 31 2e 31 37 35 20 32 2e 33 36 39 20 32 2e 35 36 39 76 31 31 2e 30 33 31 63 30 Data Ascii: .356-0.8-0.8-0.8h-4.388c-2.244 0-4.063 1.869-4.063 4.169v23.663c0 2.3 1.819 4.169 4.050 4.169h15.45c0.444 0 0.8-0.356 0.8-0.8s-0.356-0.8-0.8-0.8v0zM28.656 0h-4.531c-0.444 0-0.8 0.356-0.8 0.8s0.356 0.8 0.8 0.8h4.531c1.281 0 2.369 1.175 2.369 2.569v11.031c0
2024-10-17 12:27:36 UTC	16384	IN	Data Raw: 33 35 2d 33 2e 33 33 34 63 2d 30 2e 34 31 2d 30 2e 34 30 39 2d 31 2e 30 37 34 2d 30 2e 34 31 2d 31 2e 34 38 34 20 30 73 2d 30 2e 34 31 20 31 2e 30 37 34 20 30 20 31 2e 34 38 34 6c 34 2e 30 37 37 20 34 2e 30 37 36 63 30 2e 32 30 35 20 30 2e 32 30 35 20 30 2e 34 37 33 20 30 2e 33 30 37 20 30 2e 37 34 32 20 30 2e 33 30 37 73 30 2e 35 33 38 2d 30 2e 31 30 32 20 30 2e 37 34 32 2d 30 2e 33 30 37 63 30 2e 30 30 31 2d 30 2e 30 30 31 20 30 2e 30 30 31 2d 30 2e 30 30 32 20 30 2e 30 30 32 2d 30 2e 30 30 33 6c 38 2e 39 39 2d 38 2e 39 38 39 63 30 2e 34 31 2d 30 2e 34 31 20 30 2e 34 31 2d 31 2e 30 37 34 20 30 2d 31 2e 34 38 34 73 2d 31 2e 30 37 34 2d 30 2e 34 31 2d 31 2e 34 38 34 20 30 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 79 6d 62 6f 6c 3e 0a 09 3c 73 79 6d 62 6f Data Ascii: 35-3.334c-0.41-0.409-1.074-0.41-1.484 0s-0.41 1.074 0 1.484l4.077 4.076c0.205 0.205 0.473 0.307 0.742 0.307s0.538-0.102 0.742-0.307c0.001-0.001 0.001-0.002 0.002-0.003l8.99-8.989c0.41-0.41 0.41-1.074 0-1.484s-1.074-0.41-1.484 0z"></path></symbol><symbo
2024-10-17 12:27:36 UTC	16384	IN	Data Raw: 34 2e 36 31 38 63 2d 30 2e 36 38 31 20 30 2d 31 2e 32 34 33 20 30 2e 35 36 32 2d 31 2e 32 34 33 20 31 2e 32 34 33 73 30 2e 35 36 32 20 31 2e 32 34 33 20 31 2e 32 34 33 20 31 2e 32 34 33 68 34 2e 36 31 38 63 30 2e 36 38 31 20 30 20 31 2e 32 34 33 2d 30 2e 35 36 32 20 31 2e 32 34 33 2d 31 2e 32 34 33 20 30 2d 30 2e 37 31 2d 30 2e 35 36 32 2d 31 2e 32 34 33 2d 31 2e 32 34 33 2d 31 2e 32 34 33 7a 4d 31 38 2e 33 30 34 20 33 30 2e 39 36 34 68 2d 34 2e 36 31 38 63 2d 30 2e 31 31 38 20 30 2d 30 2e 32 33 37 2d 30 2e 30 38 39 2d 30 2e 32 33 37 2d 30 2e 32 33 37 73 30 2e 30 38 39 2d 30 2e 32 33 37 20 30 2e 32 33 37 2d 30 2e 32 33 37 68 34 2e 36 31 38 63 30 2e 31 31 38 20 30 20 30 2e 32 33 37 20 30 2e 30 38 39 20 30 2e 32 33 37 20 30 2e 32 33 37 73 2d 30 2e 31 31 38 Data Ascii: 4.618c-0.681 0-1.243 0.562-1.243 1.243s0.562 1.243 1.243 1.243h4.618c0.681 0 1.243-0.562 1.243-1.243 0-0.71-0.562-1.243-1.243-1.243zM18.304 30.964h-4.618c-0.118 0-0.237-0.089-0.237-0.237s0.089-0.237 0.237-0.237h4.618c0.118 0 0.237 0.089 0.237 0.237s-0.118

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:04 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 14 Oct 2024 13:20:05 GMT ETag: "0x8DCEC52EAEA89D6" x-ms-request-id: 841c68bc-001e-0014-43d9-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122804Z-16b659b44994gzgd4bz42hx7vg00000008zg0000000077z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:04 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-17 12:28:04 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-17 12:28:05 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:06 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:06 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38849ee3-801e-008c-2cd8-1e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122806Z-r197bdfb6b49q495mwvq3xv6v000000009yg000000001md1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:06 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 1958fb0e-301e-0020-0cd8-1e6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122806Z-16b659b449999m8hsuhyf00exs00000009r0000000009m22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:06 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:06 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 4075f338-701e-0021-2ed8-1e3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122806Z-r197bdfb6b4xcpkzeah6r2svr000000001hg00000000cu24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:06 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:06 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 29c5db94-a01e-006f-7bd8-1e13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122806Z-r197bdfb6b429k2srg5tfm6hnn000000013g000000003nap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:06 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:06 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2bfbe8ba-001e-00ad-34d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122806Z-16b659b4499stprh7pcpsc0x3n0000000at0000000009b1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:07 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3d3525b4-b01e-0001-72d8-1e46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122807Z-16b659b4499f5gh931bbxe97rs00000008mg000000008pra x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:07 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: dd01a525-501e-0064-08d8-1e1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122807Z-r197bdfb6b4cz6xrsdncwtgzd400000009vg00000000duv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:07 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ad3de8e9-901e-0064-05d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122807Z-15b8d89586fmhkw4gksnr1w3ds00000003f0000000009xyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:07 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:07 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 52ecfd05-901e-0029-01d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122807Z-16b659b44999mb85a5wquzbrz800000007pg000000002v7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:07 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:07 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 01fc4235-701e-0032-5afa-1fa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122807Z-r197bdfb6b4xcpkzeah6r2svr000000001qg000000003qug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:07 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:08 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 72511314-001e-0046-64d8-1eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122808Z-r197bdfb6b42sc4ddemybqpm140000000a1g000000000k1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:08 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 52ecab4f-901e-0029-78d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122808Z-16b659b4499w2mwkzdhtwtt78c0000000a9000000000e7ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:08 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 84133f47-001e-0014-21d8-1e5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122808Z-16b659b4499xhcppz4ucy307n400000007gg00000000cnqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:08 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 2ef95996-601e-0070-2cd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122808Z-16b659b4499v5jm96nrcwszga000000008eg000000008dqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:08 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ad3e2c7c-901e-0064-12d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122808Z-15b8d89586fhl2qtt2ydkugwts000000039g00000000bb11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:09 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c8d8fd80-d01e-005a-2dd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122809Z-16b659b4499stprh7pcpsc0x3n0000000aq000000000ep59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:09 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ad3e2dfb-901e-0064-71d8-1ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122809Z-15b8d89586f989rks44whx5v7s00000003hg00000000aesq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:09 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fe1afdc6-601e-00ab-1fd8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122809Z-16b659b4499sg56vuc9t9dmdq40000000bs0000000009dtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:09 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:09 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 7ef348a1-e01e-0051-48d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122809Z-16b659b4499lfw4zscvav76bhn000000088g000000005vdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:09 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 22e262fd-c01e-008d-23d8-1e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122810Z-16b659b44998rw28css0tq67fn0000000b7g000000002k5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: c7f49864-601e-003d-6fd8-1e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122810Z-16b659b4499tswxxb16erk3cdn0000000a8g00000000a0ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 96577f27-301e-0099-1ad8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122810Z-15b8d89586fst84k5f3z220tec00000003eg00000000bky3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 72fae4a7-c01e-000b-6fd8-1ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122810Z-r197bdfb6b46dlbhxh69g4rk5g00000009sg000000008nff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ff358c34-401e-0064-2ed8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122811Z-15b8d89586fzhrwg5nzgg1z60000000003eg00000000bpwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a14da665-f01e-003f-4ed8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122811Z-16b659b4499hxwq55c3fxf2tmw0000000b2000000000bxah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b1f13374-201e-0085-05d8-1e34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122811Z-15b8d89586fcvr6pym2snavm4w00000003mg000000007sh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 783e1ebc-401e-00ac-5ed8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122811Z-16b659b44994sn4705n0hqcu3c00000007k000000000a771 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff35c8d8-401e-0064-01d8-1e54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122811Z-16b659b449999m8hsuhyf00exs00000009qg00000000bn36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 619deb8e-b01e-005c-5ed8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122812Z-16b659b4499qzkzdaxyf40k2c000000008q000000000bf1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:12 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: dd484488-801e-0035-08d8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122812Z-15b8d89586flspj6f2320qac9400000003g00000000090d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: bf33885d-601e-00ab-1dea-1f66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122812Z-r197bdfb6b4xcpkzeah6r2svr000000001g000000000fgyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 2a2929eb-001e-0065-08d8-1e0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122812Z-16b659b4499v5jm96nrcwszga000000008e0000000008zst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf620005-f01e-0052-67d8-1e9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122812Z-r197bdfb6b4lbgfqheuaxfm7xn000000060g00000000byvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 90ca98f1-701e-001e-52d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122813Z-16b659b4499lfw4zscvav76bhn000000083g00000000ee98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:13 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 68e1e18e-f01e-005d-01d8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122813Z-16b659b4499f5gh931bbxe97rs00000008m0000000009akr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 78411580-401e-00ac-1cd8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122813Z-r197bdfb6b4t7wszfv34ug09fs00000003g00000000016ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 52ecbb12-901e-0029-18d8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122813Z-16b659b4499j6g8p9q09hdsh10000000094g000000009ve2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:13 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: fe1c9c5c-601e-00ab-47d8-1e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122813Z-15b8d89586f42m67uh3prmsdrs00000003q0000000003r16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: d34f4ef6-701e-0053-0cd8-1e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122814Z-16b659b4499gh2srh1fh903xkw00000009tg000000004ghs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 37c2ad28-001e-0049-5fd8-1e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122814Z-r197bdfb6b4qpk6v9629ad4b5s00000001r000000000bysm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d34f521c-701e-0053-12d8-1e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122814Z-16b659b4499hn29ks1ddp5hvac0000000b0g00000000cnrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 109545d4-501e-007b-46d8-1e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122814Z-r197bdfb6b4sn8wg20e97vn7ps00000009v000000000aq0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 279cc631-801e-00a3-30d8-1e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122814Z-15b8d89586fcvr6pym2snavm4w00000003rg00000000068u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 36b25424-c01e-0082-46d8-1eaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122815Z-r197bdfb6b46gt25cvgp1aw0w800000001ug0000000026fb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:15 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6c57f1bb-d01e-0017-65d8-1eb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122815Z-16b659b4499sg56vuc9t9dmdq40000000bsg000000007b4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 9657db4b-301e-0099-40d8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122815Z-16b659b44994gzgd4bz42hx7vg00000008zg0000000078u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: aa24ed06-601e-0002-21d8-1ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122815Z-16b659b4499gh2srh1fh903xkw00000009sg000000007cx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:15 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e0ad141f-c01e-0079-14d8-1ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122815Z-16b659b4499bnwsctrq8dt6ghw000000087000000000dwch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: a14daed5-f01e-003f-49d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122816Z-16b659b4499sg56vuc9t9dmdq40000000bs0000000009e1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 68e3779b-f01e-005d-74d8-1e13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122816Z-16b659b44994c5rr2b3ze9shcc0000000940000000000um0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: bf620502-f01e-0052-01d8-1e9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122816Z-r197bdfb6b4lbgfqheuaxfm7xn000000060000000000c19m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ef599ff9-401e-0048-1e92-1f0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122816Z-15b8d89586flspj6f2320qac9400000003hg000000006wns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 9658ea3f-301e-0099-7cd8-1e6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122816Z-16b659b4499w2mwkzdhtwtt78c0000000a9g00000000eg26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: dd489f40-801e-0035-5bd8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122817Z-15b8d89586fsx9lfqmgrbzpgmg00000003p0000000005dze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:16 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1edf1d90-301e-000c-38d8-1e323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122817Z-16b659b4499xhcppz4ucy307n400000007h000000000bwg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 783e300b-401e-00ac-05d8-1e0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122817Z-15b8d89586fbt6nfd56ex08ru400000003q0000000003q9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:17 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:17 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 746b139f-101e-00a2-24d8-1e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122817Z-15b8d89586fwzdd8ab09pbrekn00000003eg0000000036m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:17 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:17 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 90caf802-701e-001e-1cd8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122817Z-16b659b44994sn4705n0hqcu3c00000007mg00000000777t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:17 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: caad3713-c01e-0034-63d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122818Z-15b8d89586flspj6f2320qac9400000003kg000000004q8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8dd076ce-301e-0000-26d8-1eeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122819Z-r197bdfb6b4kq4j58bsux2hzu00000000680000000000p64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c7f33fb6-601e-003d-2ed8-1e6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122818Z-16b659b4499gfl4fdbx49yxptw0000000bm00000000049vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0c00d68f-601e-0084-7bd8-1e6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122818Z-16b659b4499mk7vv3349cr2qug0000000b3g000000001h3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9dcec3f4-001e-002b-5ad8-1e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122819Z-15b8d89586flspj6f2320qac9400000003eg00000000b0kf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 8d8985e4-f01e-0085-0bd8-1e88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122819Z-15b8d89586fzhrwg5nzgg1z60000000003k0000000006awe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: dd485b55-801e-0035-4fd8-1e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122820Z-16b659b4499sg56vuc9t9dmdq40000000bng00000000ec9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1bf948da-901e-007b-08d8-1eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122820Z-r197bdfb6b4kzncfk35mqx2yu400000009w0000000003eq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a14db6d3-f01e-003f-58d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122819Z-16b659b4499pnh69zuen6a54mc000000095g000000007b10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:20 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 2bfc10a8-001e-00ad-20d8-1e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122820Z-15b8d89586flzzksd4nk2msxr40000000300000000001mwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: c8d91fae-d01e-005a-7cd8-1e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122820Z-16b659b4499lfw4zscvav76bhn0000000880000000006t20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: d4bc84b0-b01e-0097-04d8-1e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-15b8d89586f2hk2885zk3a4enc00000003k00000000021sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2ef97735-601e-0070-7dd8-1ea0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-16b659b4499hxwq55c3fxf2tmw0000000b40000000008y2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 6747bc6b-c01e-0066-50d8-1ea1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-r197bdfb6b488ks5g2m20m5xu400000009vg000000005rxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: feceab2e-401e-0016-43d8-1e53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-16b659b4499mcktpfn1m4deuag00000007u0000000005d10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e480f9bd-101e-0017-1cd8-1e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-r197bdfb6b4qpk6v9629ad4b5s00000001qg00000000c94v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9004b710-501e-005b-4cd8-1ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-r197bdfb6b4xcpkzeah6r2svr000000001hg00000000curm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:22 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5f41cc58-a01e-0002-73d8-1e5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122821Z-r197bdfb6b488ks5g2m20m5xu400000009sg00000000a5us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:22 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 9909a593-401e-0029-54d8-1e9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-15b8d89586fx2hlt035xdehq5800000003m000000000bbdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 90036c96-501e-005b-11d8-1ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-r197bdfb6b4kzncfk35mqx2yu400000009w0000000003euy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:22 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9b251af-601e-0032-17d8-1eeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-r197bdfb6b49q495mwvq3xv6v000000009xg000000003x8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:22 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: fee0003c-701e-005c-53d8-1ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-r197bdfb6b4b582bwynewx7zgn00000001r000000000e3nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:23 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: f8617515-201e-0071-0ed8-1eff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-15b8d89586fx2hlt035xdehq5800000003ng0000000069dv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a6b4c62a-c01e-0014-36d8-1ea6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122822Z-r197bdfb6b4kq4j58bsux2hzu0000000060g00000000c7dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:23 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 746ae867-101e-00a2-15d8-1e9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122823Z-15b8d89586fs9clcebkvq6f0sc00000003eg0000000080eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a14e0af2-f01e-003f-22d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122823Z-16b659b4499qzkzdaxyf40k2c000000008u0000000002hpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:23 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: bad49cb7-701e-0097-62d8-1eb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122823Z-r197bdfb6b4lbgfqheuaxfm7xn000000060000000000c1mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:23 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 59a6cbd7-d01e-0065-41d8-1eb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122823Z-15b8d89586fcvr6pym2snavm4w00000003ng0000000067tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:23 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 725408ed-901e-005b-0a92-1f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122823Z-15b8d89586ff5l62quxsfe8ugg00000003h0000000002kyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:24 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 52eece22-901e-0029-4cd8-1e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122824Z-16b659b4499lfw4zscvav76bhn000000084000000000dxdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:24 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 630882ef-001e-0049-7ebc-1f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122824Z-r197bdfb6b4b582bwynewx7zgn00000001vg000000005bap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 20e62c17-a01e-000d-57d8-1ed1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-15b8d89586fdmfsgn8gw8tkkbc00000003dg0000000055e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: fee0b0cd-701e-005c-07d8-1ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-r197bdfb6b4lbgfqheuaxfm7xn0000000670000000000gn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:25 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: db3d69cc-a01e-0070-02d8-1e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-r197bdfb6b4kq4j58bsux2hzu0000000063g0000000093ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: caae80db-c01e-0034-21d8-1e2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-r197bdfb6b49k6rshrw4zhxpu000000009t000000000by39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:25 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 3d354aa7-b01e-0001-62d8-1e46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-15b8d89586flzzksd4nk2msxr400000002tg00000000bwy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:25 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 7ef1cc09-e01e-0051-19d8-1e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122825Z-15b8d89586f57l94wp7c4y4r2w00000003r000000000120g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:25 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 038cab76-201e-00aa-04d8-1e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122826Z-15b8d89586fnsf5zv100scmx1000000003dg000000009382 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:26 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 4d3d3a44-601e-0070-6c92-1fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122826Z-15b8d89586f6nn8zwfkdy3t04s00000003d0000000006gsz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:26 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: ae2fb09b-d01e-007a-377f-1ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122826Z-r197bdfb6b4b582bwynewx7zgn00000001ug0000000073eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:26 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 37bf9419-001e-0049-58d8-1e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122826Z-16b659b44994gzgd4bz42hx7vg000000090g0000000041xr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 90cb1d1e-701e-001e-57d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122826Z-16b659b4499qzkzdaxyf40k2c000000008tg00000000415w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: db8f54bd-e01e-0003-6ad8-1e0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-r197bdfb6b46dlbhxh69g4rk5g00000009q000000000cu70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:26 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 619dcaab-b01e-005c-28d8-1e4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-15b8d89586flspj6f2320qac9400000003fg000000009399 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a14dcc21-f01e-003f-11d8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-15b8d89586f42m67uh3prmsdrs00000003k000000000avfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: e1d8db9a-401e-0048-7bd8-1e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-16b659b4499hxwq55c3fxf2tmw0000000b2g00000000ba7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: f00285e3-001e-0079-5ad8-1e12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-r197bdfb6b4vlqfn9hfre6k1s800000001tg0000000011mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 4f3c0613-901e-0083-7ed8-1ebb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-16b659b4499mcktpfn1m4deuag00000007r000000000arzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 37381563-b01e-0053-60d8-1ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-r197bdfb6b4kkrkjmxpfy2et1000000009ug00000000bp4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:27 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 31a4ddbd-d01e-007a-58d8-1ef38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-16b659b4499w2mwkzdhtwtt78c0000000aag00000000ah90 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:27 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a235b62e-001e-0082-0cd8-1e5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122827Z-15b8d89586f2hk2885zk3a4enc00000003b000000000f8fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:28 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 90cac500-701e-001e-74d8-1ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122828Z-15b8d89586f2hk2885zk3a4enc00000003kg000000000xrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:28 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: a14f1cd6-f01e-003f-2ad8-1ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122828Z-15b8d89586fdmfsgn8gw8tkkbc00000003e0000000004qc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:28 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a02fc908-501e-00a0-62d8-1e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122828Z-r197bdfb6b4k6h5j1g5mvtmsmn00000001eg00000000f592 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:28 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: d6ae7f49-501e-008c-58d8-1ecd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122828Z-16b659b4499qzkzdaxyf40k2c000000008rg0000000087kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:28 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 8f2f9f45-501e-008f-59d8-1e9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122828Z-16b659b44994gzgd4bz42hx7vg000000091000000000395x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-17 12:28:29 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-17 12:28:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 17 Oct 2024 12:28:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 038d01e8-201e-00aa-60d8-1e3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241017T122829Z-15b8d89586f8nxpt6pvtkfw3pg00000003dg000000009w5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-17 12:28:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Target ID:	0
Start time:	08:27:05
Start date:	17/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:27:08
Start date:	17/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2356,i,18173129807580164366,9435219555007815731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:27:11
Start date:	17/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE HTTP/1.1Host: forms.zohopublic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /formstatic/fonts?family=Open+Sans:400,700i,700,600i,600,400i,300i,300 HTTP/1.1Host: forms.zohopublic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
Source: global traffic	HTTP traffic detected: GET /forms/css/formsthirdparty.2755260429cd02c98112dac6f4b5b8ce.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/formslive.4541489581c036f067c268383cc864b0.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/themes/custom.d603ed592e55f07d313b63112b930fbf.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/themes/media.b20eef0c12d546fd2a56cc4a7809f324.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/themes/media/customMedia.bdbbc9b6f964ee4f4c1d1debd83b0068.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/warning-info.607d397302b1f344f8d8df1258004046.png HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/loader.79de1b954774690fff0e7345d82faa25.gif HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/warning-info.607d397302b1f344f8d8df1258004046.png HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/loader.79de1b954774690fff0e7345d82faa25.gif HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png HTTP/1.1Host: forms.zohopublic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
Source: global traffic	HTTP traffic detected: GET /forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formslive.a52d1c28698e28f4751854660c45525a.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /infracon/downloadlogoperma?filepath=/zf-themes-zf/zf-customthemes-zf/1724128437112_open.png HTTP/1.1Host: forms.zohopublic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
Source: global traffic	HTTP traffic detected: GET /forms/images/check-mark-outline.e44509047a0a79fb604be98bb10ec5bc.png HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nunitoregular/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.zohopublic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opensans/font.woff HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.zohopublic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formstplivejs.5598e1e583c1d09fc270b76b7bc87fed.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /forms/js/formsselect.b9384dcadf2bc7b3816527891df599f6.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formsthirdpartylivejs.62943a8ee9919d8253e7be70bab3de1c.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formscommonlive.91b37333794152e1a396b0c012393284.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.zohopublic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/js/formslive.a52d1c28698e28f4751854660c45525a.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/favicon.f337ba4df49f92f0a9af92e5d6e998bf.ico HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE/records HTTP/1.1Host: forms.zohopublic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
Source: global traffic	HTTP traffic detected: GET /showerror HTTP/1.1Host: forms.zohopublic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_383aeadb58=9d9e7dfed5f5cfcfd4ca4c26db70a196
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: forms.zohopublic.com
Source: global traffic	DNS traffic detected: DNS query: static.zohocdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: webfonts.zohowebstatic.com
Source: global traffic	DNS traffic detected: DNS query: trkl-iplk-grtes.us-sea-1.linodeobjects.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://forms.zohopublic.com/infracon/form/Admin365/formperma/soOC4wKkJUgax5Rc4KZNGEn7_-YDqfLh02-40-_JjCE