Edit tour

Windows Analysis Report
http://www.ritana.de/

Overview

General Information

Sample URL:	http://www.ritana.de/
Analysis ID:	1541611
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,10452880359700180572,15123100688171886197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ritana.de/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49830 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:50133 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49830 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.ritana.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/reset.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/base.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/tipTip.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/short-code.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/prettyPhoto.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/css3.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /css/slider.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/autocomplete/autocomplete.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /custom.css HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.6.4.min.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/jquery.nivo.slider.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/cufon-yui.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/TitilliumText.font.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/Kaffeesatz.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/cufon-replace.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/scripts.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/custom.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/jquery.nivo.slider.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/cufon-yui.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/shortcode.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.6.4.min.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/cufon-replace.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/init_js.php HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/autocomplete/autocomplete.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/custom.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/Kaffeesatz.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/main.js HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/slider_umzug.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/TitilliumText.font.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/shortcode.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/scripts.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/init_js.php HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_fernwartung.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/teaser_shaddow.jpg HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_partner.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/background.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/slider-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/autocomplete/autocomplete.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/loading.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/slider.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /js/main.js HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/logo.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/slider_umzug.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/seperator-980.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/top-full-width-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/text-field-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_bildung.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_business_01.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_partner.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/teaser_shaddow.jpg HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_fernwartung.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/loading.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/slider-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/background.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/preloader-dark.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/drop-down-arr.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/slide-overlay.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sprite-menu.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/slider_service.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/img_7755_02.jpg HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_5_01.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/radiofx_front_01.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/djukebox_front.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/facebook_32.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/seperator-980.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/top-full-width-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/text-field-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_bildung.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/teaser_business_01.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_twitter.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_xmood.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_winschool.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_xschool.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_hdguard.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sprite-menu.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/slide-overlay.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/drop-down-arr.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/preloader-dark.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/img_7755_02.jpg HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /uploads/slider_service.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_inis.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/logo-footer.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/seperator-980-50-opa.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/css/base.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_x.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_y.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_next.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_prev.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/default_thumb.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_5_01.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/djukebox_front.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/radiofx_front_01.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/icons/facebook_32.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_twitter.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_winschool.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_xschool.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/contentPattern.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_hdguard.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_xmood.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/app_32_inis.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/logo-footer.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/seperator-980-50-opa.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_x.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_y.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/default_thumb.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternTop.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_next.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/sprite_prev.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/default/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternLeft.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternRight.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/contentPattern.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternBottom.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/default_thumbnail.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sprite-shortcode.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_rounded/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/exclamation.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/bullet_red_alt.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/information.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/tick_circle.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/dark_square/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/cross_circle.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/cross_grey_small.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/sprite.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_square/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternTop.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternLeft.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternRight.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/button-light.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/light-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/btnNext.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/black-btn-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/preloader-light.gif HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sp.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/btnPrevious.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/button-highlight.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sprite-shortcode.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/default_thumbnail.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/prettyPhoto/facebook/contentPatternBottom.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/video-light.jpg HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/maginifier-light.jpg HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/bullet_red_alt.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/information.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/sp-fade.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/404-shadow.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/icons/tick_circle.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/cross_grey_small.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/cross_circle.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/exclamation.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/button-light.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/black-btn-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/favicon.png HTTP/1.1Host: www.ritana.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ritana.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sp.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/button-highlight.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/preloader-light.gif HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/video-light.jpg HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/light-bg.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/404-shadow.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/sp-fade.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/maginifier-light.jpg HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /images/icons/favicon.png HTTP/1.1Host: www.ritana.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.ritana.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: </div>',image_markup:'<img id="fullResImage" src="{path}" />',flash_markup:'<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="{width}" height="{height}"><param name="wmode" value="{wmode}" /><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="movie" value="{path}" /><embed src="{path}" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="{width}" height="{height}" wmode="{wmode}"></embed></object>',quicktime_markup:'<object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" codebase="http://www.apple.com/qtactivex/qtplugin.cab" height="{height}" width="{width}"><param name="src" value="{path}"><param name="autoplay" value="{autoplay}"><param name="type" value="video/quicktime"><embed src="{path}" height="{height}" width="{width}" autoplay="{autoplay}" type="video/quicktime" pluginspage="http://www.apple.com/quicktime/download/"></embed></object>',iframe_markup:'<iframe src ="{path}" width="{width}" height="{height}" frameborder="no"></iframe>',inline_markup:'<div class="pp_inline">{content}</div>',custom_markup:'',social_tools:'<div class="twitter"><a href="http://twitter.com/share" class="twitter-share-button" data-count="none">Tweet</a><script type="text/javascript" src="http://platform.twitter.com/widgets.js"></script></div><div class="facebook"><iframe src="http://www.facebook.com/plugins/like.php?locale=en_US&href={location_href}&layout=button_count&show_faces=true&width=500&action=like&font&colorscheme=light&height=23" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:500px; height:23px;" allowTransparency="true"></iframe></div>'},pp_settings);var matchedObjects=this,percentBased=false,pp_dimensions,pp_open,pp_contentHeight,pp_contentWidth,pp_containerHeight,pp_containerWidth,windowHeight=$(window).height(),windowWidth=$(window).width(),pp_slideshow;doresize=true,scroll_pos=_get_scroll();$(window).unbind('resize.prettyphoto').bind('resize.prettyphoto',function(){_center_overlay();_resize_overlay();});if(pp_settings.keyboard_shortcuts){$(document).unbind('keydown.prettyphoto').bind('keydown.prettyphoto',function(e){if(typeof $pp_pic_holder!='undefined'){if($pp_pic_holder.is(':visible')){switch(e.keyCode){case 37:$.prettyPhoto.changePage('previous');e.preventDefault();break;case 39:$.prettyPhoto.changePage('next');e.preventDefault();break;case 27:if(!settings.modal) equals www.facebook.com (Facebook)
Source: chromecache_287.2.dr	String found in binary or memory: </div>',image_markup:'<img id="fullResImage" src="{path}" />',flash_markup:'<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="{width}" height="{height}"><param name="wmode" value="{wmode}" /><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="movie" value="{path}" /><embed src="{path}" type="application/x-shockwave-flash" allowfullscreen="true" allowscriptaccess="always" width="{width}" height="{height}" wmode="{wmode}"></embed></object>',quicktime_markup:'<object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" codebase="http://www.apple.com/qtactivex/qtplugin.cab" height="{height}" width="{width}"><param name="src" value="{path}"><param name="autoplay" value="{autoplay}"><param name="type" value="video/quicktime"><embed src="{path}" height="{height}" width="{width}" autoplay="{autoplay}" type="video/quicktime" pluginspage="http://www.apple.com/quicktime/download/"></embed></object>',iframe_markup:'<iframe src ="{path}" width="{width}" height="{height}" frameborder="no"></iframe>',inline_markup:'<div class="pp_inline">{content}</div>',custom_markup:'',social_tools:'<div class="twitter"><a href="http://twitter.com/share" class="twitter-share-button" data-count="none">Tweet</a><script type="text/javascript" src="http://platform.twitter.com/widgets.js"></script></div><div class="facebook"><iframe src="http://www.facebook.com/plugins/like.php?locale=en_US&href={location_href}&layout=button_count&show_faces=true&width=500&action=like&font&colorscheme=light&height=23" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:500px; height:23px;" allowTransparency="true"></iframe></div>'},pp_settings);var matchedObjects=this,percentBased=false,pp_dimensions,pp_open,pp_contentHeight,pp_contentWidth,pp_containerHeight,pp_containerWidth,windowHeight=$(window).height(),windowWidth=$(window).width(),pp_slideshow;doresize=true,scroll_pos=_get_scroll();$(window).unbind('resize.prettyphoto').bind('resize.prettyphoto',function(){_center_overlay();_resize_overlay();});if(pp_settings.keyboard_shortcuts){$(document).unbind('keydown.prettyphoto').bind('keydown.prettyphoto',function(e){if(typeof $pp_pic_holder!='undefined'){if($pp_pic_holder.is(':visible')){switch(e.keyCode){case 37:$.prettyPhoto.changePage('previous');e.preventDefault();break;case 39:$.prettyPhoto.changePage('next');e.preventDefault();break;case 27:if(!settings.modal) equals www.twitter.com (Twitter)
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: movie='http://www.youtube.com/embed/'+movie_id;(getParam('rel',pp_images[set_position]))?movie+="?rel="+getParam('rel',pp_images[set_position]):movie+="?rel=1";if(settings.autoplay)movie+="&autoplay=1";toInject=settings.iframe_markup.replace(/{width}/g,pp_dimensions['width']).replace(/{height}/g,pp_dimensions['height']).replace(/{wmode}/g,settings.wmode).replace(/{path}/g,movie);break;case'vimeo':pp_dimensions=_fitToViewport(movie_width,movie_height);movie_id=pp_images[set_position];var regExp=/http:\/\/(www\.)?vimeo.com\/(\d+)/;var match=movie_id.match(regExp);movie='http://player.vimeo.com/video/'+match[2]+'?title=0&byline=0&portrait=0';if(settings.autoplay)movie+="&autoplay=1;";vimeo_width=pp_dimensions['width']+'/embed/?moog_width='+pp_dimensions['width'];toInject=settings.iframe_markup.replace(/{width}/g,vimeo_width).replace(/{height}/g,pp_dimensions['height']).replace(/{path}/g,movie);break;case'quicktime':pp_dimensions=_fitToViewport(movie_width,movie_height);pp_dimensions['height']+=15;pp_dimensions['contentHeight']+=15;pp_dimensions['containerHeight']+=15;toInject=settings.quicktime_markup.replace(/{width}/g,pp_dimensions['width']).replace(/{height}/g,pp_dimensions['height']).replace(/{wmode}/g,settings.wmode).replace(/{path}/g,pp_images[set_position]).replace(/{autoplay}/g,settings.autoplay);break;case'flash':pp_dimensions=_fitToViewport(movie_width,movie_height);flash_vars=pp_images[set_position];flash_vars=flash_vars.substring(pp_images[set_position].indexOf('flashvars')+10,pp_images[set_position].length);filename=pp_images[set_position];filename=filename.substring(0,filename.indexOf('?'));toInject=settings.flash_markup.replace(/{width}/g,pp_dimensions['width']).replace(/{height}/g,pp_dimensions['height']).replace(/{wmode}/g,settings.wmode).replace(/{path}/g,filename+'?'+flash_vars);break;case'iframe':pp_dimensions=_fitToViewport(movie_width,movie_height);frame_url=pp_images[set_position];frame_url=frame_url.substr(0,frame_url.indexOf('iframe')-1);toInject=settings.iframe_markup.replace(/{width}/g,pp_dimensions['width']).replace(/{height}/g,pp_dimensions['height']).replace(/{path}/g,frame_url);break;case'ajax':doresize=false;pp_dimensions=_fitToViewport(movie_width,movie_height);doresize=true;skipInjection=true;$.get(pp_images[set_position],function(responseHTML){toInject=settings.inline_markup.replace(/{content}/g,responseHTML);$pp_pic_holder.find('#pp_full_res')[0].innerHTML=toInject;_showContent();});break;case'custom':pp_dimensions=_fitToViewport(movie_width,movie_height);toInject=settings.custom_markup;break;case'inline':myClone=$(pp_images[set_position]).clone().append('<br clear="all" />').css({'width':settings.default_width}).wrapInner('<div id="pp_full_res"><div class="pp_inline"></div></div>').appendTo($('body')).show();doresize=false;pp_dimensions=_fitToViewport($(myClone).width(),$(myClone).height());doresize=true;$(myClone).remove();toInject=settings.inline_markup.replace(/{content}/g,$(pp_images[set_position]).ht

Source: global traffic	DNS traffic detected: DNS query: www.ritana.de
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://bassistance.de/jquery-plugins/jquery-plugin-validation/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://cherne.net/brian/resources/jquery.hoverIntent.html
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://dev.jquery.com/ticket/2114
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/accept
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/creditcard
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/date
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/dateDE
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/dateISO
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/digits
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/email
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/equalTo
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/max
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/maxlength
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/min
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/minlength
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/number
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/numberDE
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/range
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/rangelength
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/remote
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/required
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Methods/url
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/addMethod
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/element
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/form
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/resetForm
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/setDefaults
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/Validator/showErrors
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/blank
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/filled
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/rules
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/unchecked
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/valid
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation/validate
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://github.com/jquery/jquery/blob/master/GPL-LICENSE.txt
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://github.com/jquery/jquery/blob/master/MIT-LICENSE.txt
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://github.com/razorjack/quicksand
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_227.2.dr, chromecache_224.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_227.2.dr, chromecache_224.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://marcarea.com/).
Source: chromecache_232.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	String found in binary or memory: http://nivo.dev7studios.com
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://platform.twitter.com/widgets.js
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://player.vimeo.com/video/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://projects.scottsplayground.com/email_address_validation/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://projects.scottsplayground.com/iri/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://razorjack.net/quicksand
Source: chromecache_236.2.dr, chromecache_186.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_157.2.dr	String found in binary or memory: http://twitter.com/
Source: chromecache_234.2.dr, chromecache_157.2.dr	String found in binary or memory: http://twitter.com/javascripts/blogger.js
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://twitter.com/share
Source: chromecache_234.2.dr, chromecache_157.2.dr	String found in binary or memory: http://twitter.com/statuses/user_timeline/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.apple.com/qtactivex/qtplugin.cab
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.apple.com/quicktime/download/
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.filamentgroup.com
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.filamentgroup.com/examples/preloadImages/index_v2.php
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.filamentgroup.com/lab/update_automatically_preload_images_from_css_with_jquery/
Source: chromecache_287.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.no-margin-for-errors.com)
Source: chromecache_287.2.dr, chromecache_232.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.quirksmode.org/dom/w3c_css.html
Source: chromecache_261.2.dr, chromecache_287.2.dr	String found in binary or memory: http://www.youtube.com/embed/
Source: chromecache_112.2.dr, chromecache_236.2.dr	String found in binary or memory: http://yanone.de/typedesign/
Source: chromecache_112.2.dr, chromecache_236.2.dr	String found in binary or memory: http://yanone.de/typedesign/).
Source: chromecache_177.2.dr, chromecache_182.2.dr	String found in binary or memory: https://www.ritana.de
Source: chromecache_177.2.dr, chromecache_182.2.dr	String found in binary or memory: https://www.ritana.de/admin
Source: chromecache_177.2.dr, chromecache_182.2.dr	String found in binary or memory: https://www.ritana.de/uploads

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:50133 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/316@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,10452880359700180572,15123100688171886197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ritana.de/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,10452880359700180572,15123100688171886197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.ritana.de	156.67.232.199	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.ritana.de/images/text-field-bg.png	false	unknown
https://www.ritana.de/images/icons/app_32_twitter.png	false	unknown
https://www.ritana.de/images/bullet_red_alt.png	false	unknown
https://www.ritana.de/images/loading.gif	false	unknown
https://www.ritana.de/images/prettyPhoto/dark_rounded/contentPattern.png	false	unknown
https://www.ritana.de/images/prettyPhoto/light_square/sprite.png	false	unknown
https://www.ritana.de/css/prettyPhoto.css	false	unknown
https://www.ritana.de/css/slider.css	false	unknown
https://www.ritana.de/images/icons/app_32_inis.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/btnPrevious.png	false	unknown
https://www.ritana.de/images/light-bg.png	false	unknown
https://www.ritana.de/images/sprite.png	false	unknown
https://www.ritana.de/css/reset.css	false	unknown
https://www.ritana.de/js/cufon-yui.js	false	unknown
https://www.ritana.de/images/prettyPhoto/default/sprite.png	false	unknown
https://www.ritana.de/uploads/teaser_business_01.png	false	unknown
https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png	false	unknown
https://www.ritana.de/images/prettyPhoto/dark_square/sprite.png	false	unknown
https://www.ritana.de/images/prettyPhoto/light_rounded/loader.gif	false	unknown
https://www.ritana.de/images/seperator-980.png	false	unknown
https://www.ritana.de/images/404-shadow.png	false	unknown
https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png	false	unknown
https://www.ritana.de/images/icons/information.png	false	unknown
https://www.ritana.de/images/prettyPhoto/light_rounded/btnPrevious.png	false	unknown
https://www.ritana.de/images/prettyPhoto/default/sprite_next.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/loader.gif	false	unknown
https://www.ritana.de/images/slide-overlay.png	false	unknown
https://www.ritana.de/css/tipTip.css	false	unknown
https://www.ritana.de/images/video-light.jpg	false	unknown
https://www.ritana.de/images/icons/app_32_hdguard.png	false	unknown
https://www.ritana.de/	false	unknown
https://www.ritana.de/images/icons/app_32_xmood.png	false	unknown
https://www.ritana.de/js/TitilliumText.font.js	false	unknown
https://www.ritana.de/images/preloader-dark.gif	false	unknown
https://www.ritana.de/css/css3.css	false	unknown
https://www.ritana.de/images/prettyPhoto/default/sprite_y.png	false	unknown
https://www.ritana.de/images/logo.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/contentPatternLeft.png	false	unknown
https://www.ritana.de/images/prettyPhoto/dark_square/loader.gif	false	unknown
https://www.ritana.de/js/autocomplete/autocomplete.css	false	unknown
https://www.ritana.de/js/scripts.js	false	unknown
https://www.ritana.de/images/prettyPhoto/dark_rounded/loader.gif	false	unknown
https://www.ritana.de/images/black-btn-bg.png	false	unknown
https://www.ritana.de/images/icons/tick_circle.png	false	unknown
https://www.ritana.de/images/sprite-menu.png	false	unknown
https://www.ritana.de/images/prettyPhoto/dark_rounded/btnPrevious.png	false	unknown
https://www.ritana.de/js/jquery-1.6.4.min.js	false	unknown
https://www.ritana.de/images/preloader-light.gif	false	unknown
https://www.ritana.de/images/seperator-980-50-opa.png	false	unknown
https://www.ritana.de/images/prettyPhoto/default/default_thumb.png	false	unknown
https://www.ritana.de/js/Kaffeesatz.js	false	unknown
https://www.ritana.de/images/sprite-shortcode.png	false	unknown
https://www.ritana.de/images/button-highlight.png	false	unknown
https://www.ritana.de/js/init_js.php	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/default_thumbnail.gif	false	unknown
https://www.ritana.de/images/icons/cross_circle.png	false	unknown
https://www.ritana.de/images/icons/app_32_xschool.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/btnNext.png	false	unknown
https://www.ritana.de/images/icons/app_32_winschool.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/contentPatternTop.png	false	unknown
https://www.ritana.de/images/prettyPhoto/facebook/contentPatternRight.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://docs.jquery.com/Plugins/Validation/Methods/rangelength	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://www.filamentgroup.com	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://www.quirksmode.org/dom/w3c_css.html	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/dateDE	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/equalTo	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/digits	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_287.2.dr, chromecache_232.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
http://www.youtube.com/embed/	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
https://www.ritana.de/uploads	chromecache_177.2.dr, chromecache_182.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/rules	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/email	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/url	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Validator/addMethod	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://dev.jquery.com/ticket/2114	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/filled	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://yanone.de/typedesign/).	chromecache_112.2.dr, chromecache_236.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/maxlength	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://player.vimeo.com/video/	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/range	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/required	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://platform.twitter.com/widgets.js	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/min	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/validate	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://github.com/jquery/jquery/blob/master/MIT-LICENSE.txt	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://cherne.net/brian/resources/jquery.hoverIntent.html	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://www.gnu.org/licenses/gpl.html	chromecache_287.2.dr	false		unknown
http://projects.scottsplayground.com/iri/	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/max	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/valid	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Validator/setDefaults	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://www.filamentgroup.com/lab/update_automatically_preload_images_from_css_with_jquery/	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://jquery.org/license	chromecache_227.2.dr, chromecache_224.2.dr	false	URL Reputation: safe	unknown
http://docs.jquery.com/Plugins/Validation/Methods/creditcard	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://twitter.com/statuses/user_timeline/	chromecache_234.2.dr, chromecache_157.2.dr	false		unknown
http://www.no-margin-for-errors.com)	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Validator/resetForm	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/accept	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/Methods/number	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown
http://docs.jquery.com/Plugins/Validation/unchecked	chromecache_261.2.dr, chromecache_287.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.67.232.199	www.ritana.de	Germany	15817	MITTWALD-ASMittwaldCMServiceGmbHundCoKGDE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541611
Start date and time:	2024-10-25 00:44:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.ritana.de/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/316@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.184.206, 64.233.184.84, 34.104.35.123, 216.58.206.42, 142.250.185.74, 142.250.186.106, 142.250.186.170, 142.250.185.234, 142.250.184.234, 142.250.185.170, 172.217.18.10, 172.217.18.106, 172.217.23.106, 142.250.185.106, 172.217.16.202, 142.250.185.202, 216.58.206.74, 216.58.212.138, 142.250.185.138, 20.12.23.50, 199.232.214.172, 192.229.221.95, 13.95.31.18, 20.242.39.171, 199.232.210.172
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.ritana.de/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:45:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9774724439871285
Encrypted:	false
SSDEEP:	48:8p2dST+y2HtidAKZdA19ehwiZUklqehpy+3:8xjcOy
MD5:	EE1698EC57CD9EC1D7A1B2C98E6A887C
SHA1:	9CC813F8A14C53EA3F687C92817AD57CFB1D9CC5
SHA-256:	E29B01D5B50212615BECED056344FD92504292D02D67DA159DFB27587D709F12
SHA-512:	BEEFE5FFB43D629E3598078AF96096E5BB9044FA3EC141942C492463BBF2C854785C778E0ACCED78401D73A00941921C39AD9A3A9E509F9ACE2BD181F16FB694
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....4.`f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:45:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9938899417441496
Encrypted:	false
SSDEEP:	48:8Md2dST+y2HtidAKZdA1weh/iZUkAQkqeh+y+2:8M1ju9QDy
MD5:	F6905275507BEF469B156EAB492B60EC
SHA1:	F10350405DF63759FD23FEE58996AE85953E2DFF
SHA-256:	4DCB2B9D395C0CE226E706071FA588BF83A6F16F1E93E35AC9AA30B4F3AAE93B
SHA-512:	13C452B2EF0ECA9D2CE26C632482BF8CB549749136E88257F93CAB4688801297696D704525E07664B900742514252785E2BC21E363989F7F664EF77A55F06A60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......`f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006452083133786
Encrypted:	false
SSDEEP:	48:8xy2dST+ysHtidAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xsjQnyy
MD5:	189DEED680042382FE5703E9E6013789
SHA1:	C049A8CBE5F245487B36E8EC01268B2B881E3420
SHA-256:	BD7C1C47980EFA9A04628A84A745948AF72B9DA03CFCFCC4A2586A9491A4B236
SHA-512:	E191D0EE0B5EF3787D13E224DE6CB4CEE3D1B454E171F35456DF38C09BE7F04D42BE9A70B1CF2D131D10F876808613A72FC0DF1400DD387C3B5118BE0F515406
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:45:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9914312761081074
Encrypted:	false
SSDEEP:	48:8mW2dST+y2HtidAKZdA1vehDiZUkwqehqy+R:87j1wy
MD5:	1FE676813B0C1CCAA3ABA4A679F74D77
SHA1:	1A846B1E7A86A7CF27F48EEDD72C03561E5D2CAB
SHA-256:	A15421732FD82657F47B3AED7FC6BB1E6BA7BB3D9D230D0FE11213826214CC7D
SHA-512:	5CA092E6F8D06BCD06F99A3115C62D87082284BE93B09482B0E6FCF00EE86C82196FE29DBBAC13A2439F23111E1F51A87DACC72BADC96EC8079E3B9F2F356884
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......`f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:45:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.980915555659385
Encrypted:	false
SSDEEP:	48:8Hu2dST+y2HtidAKZdA1hehBiZUk1W1qehcy+C:8ojl98y
MD5:	8993017696F8C232AC757F30FBD696FE
SHA1:	E873C44D2C16C87F44261FB3702DE49286FE5106
SHA-256:	4118853BF03F0BEC8443D60B5698EB1422402EFD5CBF62995365FE20AF7E4687
SHA-512:	76453DD3AA0FF439D042FE42B2A380E443CE71F3F632C04CCAAFC67E6013AA5B7B3CF9998ADFDC8B19838DAF13FAF1BD1A3D4E744DE5AF5BAF98560F0E724AE9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E..`f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:45:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989782330008019
Encrypted:	false
SSDEEP:	48:8B2dST+y2HtidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8Jj5T/TbxWOvTbyy7T
MD5:	A5826236ABE9CD991594B7F9F114BC46
SHA1:	40E7495F46BBF336749389F0A19FBB81466DB764
SHA-256:	73C790446F18E36025048BF8C4CD34EED200C62A20599C7CB84AEA9633E58877
SHA-512:	A0FC56F75B497FCB7AB9EC1095D6119B615C6509A2E7168AFF23CFC5AF30BEDCA8C6E13DA31025F05FD58376B3959497163315EF113FBFCA3D6548E10599650E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x..`f&..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IXY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........$..P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	7.560482113192412
Encrypted:	false
SSDEEP:	12:6v/72r1sKg+5VXBsHjqiqXRqbhgCiOcH1b9lrkIXlsXueHCs8jpUZ2BB2vhyc:31ZVPixpulrwNOUQBKAc
MD5:	785E6140FAD654B5DD8C1F1560C32AD0
SHA1:	8C26EB9A5151C74176E6CE1D5D8C52396DEFD434
SHA-256:	E38162787105CD62FCE2F776F510B70E5871542F8C8D44D6C58FE458715E0D31
SHA-512:	D16AE56ECE6B01EFF88E5F4D736EFEC84915386AE68D4858E47A199BC57C9C9563F9D12A090C6626B4BA458D0DDB42C9FF283F87756BC7EECCCCB5DDD3C11B1F
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/exclamation.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...n.@.......8...G#.&...R.8...B.BA q..P....x.^.....$P...!.......1...XI.4....;;.Y....1.O......2.'..]..iN...s.[...G9.(.....<..u..X2J.%iu.M.....;."wG.....5..(..iU9UZ.....G_a..7.........!.L..;.....0......p..k#....B.iD...3..f....$.A..i-..ly.}&54...T..../\....x...V.l...U..G.3V5.}h.Q.....[......ss.V....6...v...........CM.+.;..\|....yC/..{.W.G=.......d.K...2............=[.,?z.R."...q?a<G.T.f.Y.5.%A.eQR....)..H......k&...Z.X.eZzE...8...S\l.^...{....A,.f*o..[...{.b..../..(.....J.5r..V1..8.o.....,...P.....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	725
Entropy (8bit):	7.615134656310076
Encrypted:	false
SSDEEP:	12:6v/72rGeI+sGwyF+9Bc5e1Gbdaj/jo2lKBJnsV913fH9WZSXpT87rkf6pJ3N:3Ge/7w895e1AmHuJnopfHvu7ry6pdN
MD5:	709AE837DA392374063D1E937F90797E
SHA1:	C5C69E46328B154AF8856B9168668057AEED87B1
SHA-256:	ABD072C2549041D3D70242E15F561CE56F7F7F016BFA3A01AB4024F62C8E6871
SHA-512:	B0DEDB95ADE96784C32BC23B295292A3AB700795C4EF77229EC1D517DEBFDF07D0771D10A4A5CC8185F99EDF5C57EC6A14FEE2AA9DD3AFBE6BA90EAEAABF3450
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...wIDATx...k.A...dw..f.jRIR./...-5("..(X.x.o....z...<y..U...K...4.J[...Q..&.....:o.mS/.\|...}..7K. ...5.... 1.."g$.......B;oUj..@&.?@..&.W.Z..1j....'.....9...X`..f._./~..v...S.7....N.$......BP.m.......T..t...l..-..I..>...e....r.a.z...q...\(.7.&....e.+6....o...K.F.....m..".[...i.?]Bfg.....ei.^o.@..A..K.}.....>W...{.g...g.=.. .....\..x...l..;...A.Tl:.....&...sb;...B.P4=.u].5n.iU@T.....j.6.<..$(.D.)..%R{.\.e.tV0..\..[8H.\s....L&!......:2.].V.....e...u.B!...(..kceu....Qu...LMU<.cZ..*u..2\....Q....MW..&.A..._!.".v..f........Od.}i.....sq.V....'.M...E....EF..bGr.;u.H.t.OE...A.......AjC.<2...m.....DYX.d......u0`...B....IEND.B`.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3
Category:	dropped
Size (bytes):	3405
Entropy (8bit):	7.5994652439199815
Encrypted:	false
SSDEEP:	96:L4ZczcbSO11VidLp0fNKf2jlU12QEH4sJ:OSFEi/0lKf2jugHJ
MD5:	FC6104A3523AF79BF4313E6C54F78D2E
SHA1:	01780F0F88E2380BA5D591AE56B6828D66262AAE
SHA-256:	67E733C7B7C6867C85CDC81E21AD2703AAD224F7C2DFC971189A0660D8264687
SHA-512:	DE59D8FB7A6ACAA269059FA11D38F5898BAFC6D5B4EF560C03F8F4CC76AB7E34B48D48B00E10131C5B1A7D733916646376754D3896FD9AB9192C75D37DA2AC56
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F1174072068119109F8FE27718D5A" xmpMM:DocumentID="xmp.did:04FC9C640DF811E1B609FE351224DB5B" xmpMM:InstanceID="xmp.iid:04FC9C630DF811E1B609FE351224DB5B" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D1C87E325206811A6138A31EE5F34E6" stRef:documentID="xmp.did:F77F1174072068119109F8FE27718D5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1737
Entropy (8bit):	7.109246561518601
Encrypted:	false
SSDEEP:	48:T/4HaRZBFylUzyUOn1X9BNAnkj3hkZ9iO:T/majqloyUOn1t/AnoR2oO
MD5:	DD6B7B0BF5C3AF22499ABC0A9EE1E1B2
SHA1:	E8C0018145D616FAC4DEB460D9C1D9C9DD4D3302
SHA-256:	0EDDAAB3B8CB0B15D81D62E5AE5960329C3E576EA78DC321B20734AB20271847
SHA-512:	8A4C36E3FDB61782F6FC9BF78140C96AA729B4E1120BDA34995A90C9D827395E1460F744DF17779091D206629664467B997E19A7A6E54E07135AB89E454DF601
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/loading.gif
Preview:	GIF89a..................```@@@DDDnnn........$$$(((000666>>>jjj......rrr...........PPP^^^......:::.........\\\\|\|\|.......hhh...fff...FFF.....................xxx................................................................zzz......LLLRRRZZZbbbBBB<<<...vvv222...**...XXX,,,......NNN......ddd444..........~~~......VVV...JJJHHH"""..................&&&...888ttt......ppp TTTlll............!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,...................#)-....$..6:7....%+/.70=6......6.........=?=.....3@?......;E.....7A>......B;.....>CD......;+.F... &.03.8.<..!'.14.,<.."P...F.`.....!.......,..................;.WX.[]...<.U.Y-\$_&.JOSH..TJ^*\.G.P..2...#..7.HKQ..:6..L=.FF.'M.....NA.:b..I...T@..?.R../.D..924I.::/E`..A&V,Z.JCaT.T9Ij...........!.......,.....................i.^,...C.K.....jl.8^ghQ..CRk..."dN<.h-P..c.f...m].,.>.Jnj.2H0.T.-..43..5.G.`eC.6:...f..:=.G5.AT770./.6.@C(CBA;@/.F..r. ..Z.@.!.......,..................?(..N!lG..9..'.g[jNJ.A#Hl.F=B].O<.T&28.f_L;.9V

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.681840584214431
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtVdDlFtU6qziwAX8D3PH/l2up:6v/lhPUujnDspVeziwAXCXkup
MD5:	C2E5C4EC6FC9EE4E49C79FF7E18C9695
SHA1:	BD82394085B160314184D610A7106C0557922DF4
SHA-256:	41960505E78C2519594AF3BDEA17DDC116413FE313E98C5B206BAD5ABD1E7718
SHA-512:	3F4193C48FF0ECBCDC15A14BCD3443061F2B92BB4DC2019E54FC41462BB01BDAD915574D24AE354496FDDBE2CB60819E0560578A70FC7CB7C9FCA8AA859D31C5
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/contentPatternTop.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...0IDATx.bd``h`."`b.2.5p...` .={NS...@0.)...7.....j1..;T......IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2802
Entropy (8bit):	7.89034976047261
Encrypted:	false
SSDEEP:	48:9pz0Yvoyx9m/arteG/zWHba+sZdAvrCzh8x32RjXm:9KwmiUe+OdA2zh8Krm
MD5:	F4459B22DB83170FCD271289C8941A69
SHA1:	48247BD64707DDF242831C44F053FF7104F96463
SHA-256:	5726D4C5C83437E9FF07322002699A82210BDD0EEF4DF9833F38735455414A83
SHA-512:	84C30647A089FD47F8632739E30D8F3459EAE1D34DE94B6D9F88DAF2F1725C667CE345D5E93772AA46DFB80D8292C436CADD33D59C20755194D9A1FA47D2EAD8
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/logo-footer.png
Preview:	.PNG........IHDR.......!.....^#.P....sBIT....\|.d.....pHYs.................tEXtSoftware.www.inkscape.org..<....oIDATx..{pT.......!.).#@Q...Q.UTl..d.n.d.A4...2Vm.........c..S.m..... .B.>@.(.......G $.f..?n6.1$..,).o.........s...U..r7.. .......N.O.......,..v......'.$.q..hC..;.......$..4...I.;!V$I.=...wR>....C.$....uR^..N.!I.COs..;)/M..I.F2.Nr^....<.W...I."..9`...v.q.....0.....K.B=..L...+[.MXm.......m.,,..L.......K_.....J%e..b.W.....jK#V"~Q.r.@m...m.."`.0....(..X.T.....<.\.r...1y.....Y.iq..J.....@.............mb"....\|..L...& ..K....?..=..\ ...2.P.).$6.`<5i....CA]..c4...zb....x_...+uRh..R.}@TGo`6.ctt...X.wG.......^...c]....be......0J%...&..>.................R.!`...0.@m.HE.m.b..!~.m.X]}.8..3....9.M.r........p...{..F6}.........r.~Xm.R...39...pl...X.m-.3..xQ6..X..X;V/...b.....3.\|F.e....t.....-.5...S.M]..j..v...9_...f......`f7.0...>_.D.......j.....].4./.&%@_...+...]J........#..]....iE.^P.rrW..!.s.~Z....1......l:........_b...g).....).......~.e_.Y.P

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_rounded/btnPrevious.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2733
Entropy (8bit):	7.896887275532658
Encrypted:	false
SSDEEP:	48:zsnzKam3v3NFRjUS1m/G9nkfsKLXKC3dAZP0uf985kSX8:zsnzKlPPqSQ/ykf9LXVAp
MD5:	98C53AAD1F8FE4D767763CA959CA52C5
SHA1:	216E76AF46CA250D9435690A099A8F0ADF1E6824
SHA-256:	7F1E7FB0975FA69F8D6818CA6972A39AB527C74E28AB461F7F6F2B0FC42963F5
SHA-512:	FB4567A1146C1286DA78D040CC26AB76D86455A11400C4E1FA70A4E0CB7BE5D988714BDBED9C4C400F128C67441F62B70F20209DB74987CF217CD9E9DC5993AF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...tIDATh....W....Q.].=.....k.v.....G..,0..(.A..`....a..+.`e....8$...6.......3.g.....E....~...8...[....8..S%...f...w.H..VQ\|Z.w.,p.\|..D.q......e..N.N.a\....(}Q.5.:.V..3. ........R0.lX..OhS.f....9D..q....q.G....DN...S....!&4T......5~.9q.E..Fk......u......k...(.H.-.NH...7............o}.fx.....X.R.0.6....]/..v?.....=..c........;.....E........b...m.@.v6.E.l....O.g..i.~..}....>.....ZCw.,..)?..1. ..;X...'.C.R[..".p.(.a`.....g...S._..AO.XAfO...,..g............9{.=.v.%.nD""I..;.}....r......E5.d...~`He2d.)..>...7.. ..P............1Db1:.:_?.4{.yZ.2.^=Ca....F.M2.`..2.......n.)...-.....u+.`..~n.....n...~.K...E.....\........W^yl..4.'N..J)..^..a...$.i.1..d..\.....).A...]V...O.......7.z.Cb..i/.7...\|..7......r.g.-._..aA{..........cT{...3.I\../.bi.... ....t.z....uB!..b\.vc.'. N.>m...\|....l.8J.L..S.........Q..q.(....lo.G.......2...y..Z.f.C6.b.X"...L&i.k..M.X.?....Ma}......"./]..3..<..q......o*...u..n............di..J

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1396
Entropy (8bit):	6.8287532146891134
Encrypted:	false
SSDEEP:	24:8d1hpunQWwh82lYSKw3nGmKEVam+T3ZyJ3Vqk3QGGJLglAYmgO/3pKVZ:MitvnLjmKEwm+0J34bxJLPYQhKVZ
MD5:	614D19C74741EC29023F7E0659427616
SHA1:	7B6877B0F52E05EBA307B7286E15A968ACE3B655
SHA-256:	8B2F453D57F98AE67A6D75D62EE51FB147CEC72D2269A04D136EC8D1941BF273
SHA-512:	DDA261B5F29D9AACE8EE50F972D0BFC6E8CEE931F821AE49A138005B90A3604844BD7D395F27868CEFDC338ED1F5EF489CA1135CE388ED4A68C927EC3E301149
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/404-shadow.png
Preview:	.PNG........IHDR................8....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:6B9AAC0407D611E19C25F4BCE5661907" xmpMM:InstanceID="xmp.iid:6B9AAC0307D611E19C25F4BCE5661907" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:335D0C2BD307E11191718D0074A5BB52" stRef:documentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Qwz.....IDATx..m.. ..{....o_...Y.0V:V..9.....w.6H..

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.598793808013235
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtVdYhpw5iRHtPIp7u8fldp:6v/lhPUujnDspVu/w8R+VDdp
MD5:	A6FAB9B4551A6274D71703B610EB6ABD
SHA1:	1FB515AE27F5202449663F9BE6B5EA7094A4DAD0
SHA-256:	565ED0E8265B719692EFF0E31356ECE9C4E4B9DDD753B0858E0C2277668D184D
SHA-512:	33372D0B150E86CC019EAE74C1D9A601176050FB6AEA5E78043F0E0AF788F181BDBA5E7914408061E86D369055677CD45316F5F529D622CD6DD1A2CE942DFFCF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/contentPatternBottom.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...0IDATx.b....T.L.T.....H.`.w..j.......2j...@....h..........IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	5.496651090080585
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtPAkxelRR2kdj07yiY3E5T/lH1p:6v/lhPUujnDspPAkUgG6yiPRVp
MD5:	74BFB933F639E76971CA5DB1AE612011
SHA1:	A4AB4B832B155068C3DF28DC9894B725CAC83228
SHA-256:	2F47A984B0A0F656080DCF3B87CC75D2000344512007B2CBDBDEC790F92C23DB
SHA-512:	640E59DB14069F5922DCFD6A772B491848AC95A6B2F093267C5CB3B065449AB5A96C1C4E238D1F696DC37BFB98F3AB5BD152D86E33921C1DF97B50AF6BB89590
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/contentPatternRight.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...*IDATx.b......##c#......`..Q.G..5p...b @........a......IEND.B`.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4531
Entropy (8bit):	7.915661579984555
Encrypted:	false
SSDEEP:	96:7cx1xO+ELlH7owXpeCqtDz7cUalmoJXM9/yaL9D0v/CIdtxzc:mTwlLSsllm4M9/ymyCIdtxzc
MD5:	ED9AA20CAF6E07793857DA5BB099E5AD
SHA1:	494363D48F4191A5583AEADCB51EBDB596D4F39D
SHA-256:	3E1AE9E8CB4A2E7AA5875B6ED08B09C18656FAF5AB07D137CC8A869CAF046398
SHA-512:	85E71AEDA6DC4B0AEC203273F977A2AB5E3B78F14A5D40AEA4AFF9EA024C65FB9A06F5B0C1CC2AED82831EFA51C3D0D37D5B293A2A521B64D61A1274461D6E64
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/teaser_bildung.png
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....0IDATx...ip]g}...9w_t...r./.dKv,)..'$d!)K:.2Mi!.t.vh.t(..L......JK)0]..(Ky....B..b[^#.e..+.J.....}..Zb.D1...ut.=.s~..?.9J.'..l.!.....!~QH..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!.....y..x......b.r:u...mv.N7.\|..Dl.vK....Jo..b....R.N......t....L.l.H,.%....#.....w..I...-.q[.\|l.^.&..\|..+7.............b.W...]...73......w...P...t..:w...G..y{.N.>{..&....wT].F..\|x...W..s..0...^..P..w.dw.dw...p9......=.YQ.`......&..w..oq....B~[.u.G...+Mv.mN.-.}........d...$U...fny..1C..f..T......+..;.S...}.x(H..g6......JEN..I...]Y. .._Z ](0...L&.m;U.........?..b....6.3\|gf...Nc.u.Z.yzh..8.....'...\|..y.}......r.81..l...&...7d[.&M.....;...\|....<..K_..].hv8YH........T!..f.).o^.....B...l<.O.n...d..~l&3..,q!.b.....p[..r...gY..8....1...........x....A.2i......p[.D.........E.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32042), with CRLF line terminators
Category:	downloaded
Size (bytes):	65916
Entropy (8bit):	4.426296006161936
Encrypted:	false
SSDEEP:	1536:IqhIsgtipzlj/sK+fv4eqNgX/7iHRzIHRdyr:lhIvYpzlj/s34eqNgX/+xzIHT+
MD5:	3B91A5CFCBC973EB8C85C9D40F58FB6C
SHA1:	3E95F680026714FB4CB1E9B96E593B90143045B0
SHA-256:	CD7905830F5CD7B5DE3E4F005D039FF16084B705642C01A95D1E6D30C75B6509
SHA-512:	F93D97B093D06D73DE3227921767A67AC7ECE621E8FF7A44B5B185A9237313C573723C05C5F686CA190F4E7628EC03B91F307E4587D645AEA56D965D5301D9FA
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/Kaffeesatz.js
Preview:	/!.. The following copyright notice may not be removed under any circumstances... * .. * Copyright:.. * Copyright (c) 2010, Yanone (http://yanone.de/typedesign/). All rights reserved... * This Font Software is licensed under the SIL Open Font License, Version 1.1... * This license is available with a FAQ at: http://scripts.sil.org/OFL.. * .. * Trademark:.. * Yanone Kaffeesatz is a trademark of Yanone.. * .. * Description:.. * Yanone Kaffeesatz was first published in 2004 and is Yanone's first ever.. * finished typeface. Its Bold is reminiscent of 1920s coffee house typography,.. * while the rather thin fonts bridge the gap to present times. Lacking self.. * confidence and knowledge about the type scene Yanone decided to publish the.. * family for free under a Creative Commons License. A decision that should turn.. * out one of the best he ever made. It has been downloaded over 100,000 times to.. * date from this website alone, and you can witness Kaffeesatz use on German.. * fresh-w

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.896642385384456
Encrypted:	false
SSDEEP:	24:z1hpunQWwjx82lY2T32HEVhOlCltqpCFyJ3Vh2CgtqPCqGMpqe:5itNn2VfOBnJ3fnTT4e
MD5:	6F58C438AC242839ECAD3761EB008D60
SHA1:	189B6C48DA8CCD0E7221B96E61001215B7B58990
SHA-256:	DBEA1CBAA36EEF19F154C9A8077238C2A4E7189229D40EC9C31967BECD75D8A9
SHA-512:	E9B28834FE26DBB3FA8610435F0D188392F3A796A7585D84F844E3C38BC2A328688663A910EB042D12B724C1C1017085FEC02C3E79EAF80DDAA1502EF1B34025
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:A8DF32F30CFB11E1882FBC8B5B4B0CC1" xmpMM:DocumentID="xmp.did:A8DF32F40CFB11E1882FBC8B5B4B0CC1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A8DF32F10CFB11E1882FBC8B5B4B0CC1" stRef:documentID="xmp.did:A8DF32F20CFB11E1882FBC8B5B4B0CC1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.4....-IDATx.b....b. `..0.?.._..."..a.&K...$.... ..q. u........IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 119, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3507
Entropy (8bit):	7.9237730290016835
Encrypted:	false
SSDEEP:	96:j9mg4Z8bNJvHfnl2xATaJvFvTCbBdjN+3BDsu:5l4uF2xxFTYniB7
MD5:	6B25600839837ED891E1D2F17BA01C28
SHA1:	1DA373E3DB998FA1A7EF9AD0ACC802949B1FE190
SHA-256:	EC6447BF74951685AD6773AD32A9A9123AF6FED69FC20EEFCAA33956F315EEBC
SHA-512:	1DE235E61422FB9847522701F57E9E12DFB296C801521934022F6E10D7F4F5C5C69B9628E965AA94E3010F35D7F29DE5477393F2E43B1319E4CE5A79402F43E8
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_square/sprite.png
Preview:	.PNG........IHDR...L...w.......E....tEXtSoftware.Adobe ImageReadyq.e<...UIDATx..]il......`...`@F..}E2...... ....".....h#.B.....vI..EX.o$..?"-!.. ..PVd....22`q.`np.WTM......gzF.J.]..z_...u.x........n....6.....eTK...Z...N.%.J.(P.{.^.z.......o.f.y.. .'....)..7n....ZyeUVVr..?..k...`.XA.>..!H.L+.(..`1...P.v.Svv6.YYY......7m.t...So.t...t..}..S0...1.4..../8P...k..AO .P...m.N....r...G$....X.i+1.`.i.Q'.....`.s.<y.={.:I..Uq...4(d...>.Y.L.7........Dp.?..Y.,;I.3....v/_.d---.T.$HN...~....Y.N.:t.j6+...Oss3z%.......T.(>..c..t...}.....j..!.<'r.j.......a....3.{.v...v.M...Y..PA.%. x....N.ki...........h..cG6c.......UUK.XS.L.G...z.....>.u.w..2..&..&...\....O(z..5VWW.&M...............'...\|>.K...>.u.....6\|.p.bCC..z.*......-c.V..w.r.t..>r.dA.L.B..9~.8{..il.C..x.......~4....L.d.....Z .W.^l..\Y(..K.,a..>deee...(...<.Z.f........p.B.`....F9P.-..j..l....8w.\...!C..C.l]...vrET....@...S.dJ.`.F.....g......W.x...G.....s....Y.]......\|_.?....?~<.......&>.h///......w....

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2836
Entropy (8bit):	7.868077796195666
Encrypted:	false
SSDEEP:	48:F/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODKeY:FSDZ/I09Da01l+gmkyTt6Hk8nTKeY
MD5:	9A3597B824F9FA67E028D5077554A39F
SHA1:	FD2782DDD6F1C0C91C4011FEEA6B36D0D3A3FAF6
SHA-256:	D432429C726DEC34CDE76CDF3FA9288E889114C5BDD63190A8416915DFB0C0B3
SHA-512:	894C21911058E9EB4AE0A56164D90F8D8DF2C55CE5044FE8EC3B068B02D2AD061625E3C1100AFD6A51D4CCCFF6053A9F04E6C23F4B8BD7217E0902D77B50D565
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/cross_grey_small.png
Preview:	.PNG........IHDR..............RW.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 80, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1365
Entropy (8bit):	6.681171889178052
Encrypted:	false
SSDEEP:	24:k1he91Wwh82lYSKwxqCiVSCdT3ouyJ3VkmGDaEKEvIg9QTu5lE:qqQvnLnCicCdIJ3bIVvI0au5+
MD5:	C7F0D3375638022B9812C23AFE4D8DAA
SHA1:	0FE9380268AC0E136EE6E3AE802CED0A9835CC13
SHA-256:	01E0E14D43599F4DEAF26B4DF24FA8D50255EE37AB9A33ECA454A776011CACE1
SHA-512:	6B4FE18D73630BDF585966EA528664EB992A88FF840033AEEDCE3201916FDDCCFEE144DA7F35EB946CBDABC4B668644B34160E167C5FAA261A36409A65319EB0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:348745D64AE5E2118FE4AE946BB41E5B" xmpMM:DocumentID="xmp.did:F2DD9A92E56411E2A594A053E3703C48" xmpMM:InstanceID="xmp.iid:F2DD9A91E56411E2A594A053E3703C48" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:378745D64AE5E2118FE4AE946BB41E5B" stRef:documentID="xmp.did:348745D64AE5E2118FE4AE946BB41E5B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx...AN.0...I..\.q..H.....ka.#\|..m+....

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 147, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6682
Entropy (8bit):	7.899011676321073
Encrypted:	false
SSDEEP:	192:7NFP7WLCe/SjT9ExKtzBMwEzWkJlHqKV36:HP7WL7qvfPKasHqKVq
MD5:	F814686DCA4830164D3F8D2C949B42CF
SHA1:	F0F45CE2B45ECA186BB02F479DF5128E0CC99C48
SHA-256:	009EA272018963349C464E648FC440CFBC0065C9D220DCD9E79FB12047E387A2
SHA-512:	D6F68A8376EEEDE8CC020146E7D93C2ED66DED06CB611D9879EB44662172A2F6142A26789C098F2DE035F30A39B0F7682978852E526A5B9C8967FCC98F3057B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............B.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:275503303E8511E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:24283CC43E8311E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.GI...JIDATx..].p.E....W.c....0 .`I.2.z7..E......

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/loader.gif
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3129
Entropy (8bit):	7.8536903297611325
Encrypted:	false
SSDEEP:	48:5Npa9j9OdonXW2Nf4FSOm0VkIVcfble+9Txo+V1nN3FwUoGMVkcTgAwnKsqi:7Y4OwFSONNcfbsA9NBzhorgAcqi
MD5:	1C790FE253FE185086C70F8D26A44466
SHA1:	90000F3B0627327F71F3E475B3EB176E09CC0475
SHA-256:	9CBE0B59D56ED3BDBCB0B63002334C611D574F2FB2496D436D276F4860D2D5FE
SHA-512:	F85336AE234A21A4DB0CD50D092563C9018E9BF49F29A24F88766D741C03D42CA9627BF7E132B77A8123C100F6FEE8FCDC3B7FB2DF8A3F1743D6C3616C02A2EE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/teaser_fernwartung.png
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<.....IDATx...Ml..}....+.....%eJ$-J......j$5..5.\..0....E.......R.m.K...K/5\4...i.....I.$[V-J4EJ.E...r_./......RKI.-....9....<....y..^...6B.....B. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(.vW`+O..3..B...l.~6w..R.....axj..#..,...H.na.......4~.[`....=0:2..=.L:I.m_...5zp.u.8:....B^.p.:2...=O.T..~....q...b..m..k..].\....x..xY\.R.m4.m.T.u...q{.....X7....T.z.<.A...i...l.o*...t.<..5......@....SQm.....\,.sm...:....:v..8.Tmi..k..}~V..-...7].y}.j5R.E.\....a..C.........h4.n.K...S.kUg.W.>............^4..K..../.a.C.Q.[Y..y...0.......EN,/..x.!...0.o^..y.<.........m...R.;e.....x.....'04......C;.z...vnm....H...l..O.p.y..y....xx..7f.xf.8..c<7...F.P.,~x.m6.5^=..Q_..R......o......M.7...l."._..o.M./......}.....k..m....yyzS..=\|s.....m..M%W....w.j?w.t.4....g...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1111
Entropy (8bit):	7.711636199708589
Encrypted:	false
SSDEEP:	24:Ce3OK5CUFYuxJIk7dU9yT4bLelAStXYYyr46wxWpWUka:CeeK5COeSIL5GrUpbka
MD5:	198225452EFAC1317BD3547214963C42
SHA1:	D6BE16DD6C258BC7D72B1ECFC606F5644156B091
SHA-256:	6D339742E25AAFB60C0523A5B16A4B91BC7EA8DEBC5019CDAA51D137DA728CDF
SHA-512:	5B07D9C48CF9FAF4CC61B638C43E75039DE6C20E75B6C7B094C131416408399D8C9B9FE5C5786F404BBCB33313E0B866F3EC016DFCB4FA83101867D77A2B0694
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........C!.....tEXtSoftware.www.inkscape.org..<.....IDATX..W.o.U.....4.K....!....".@.qH.$...8!8T...JH.Z.^.............P(.r.!...$+l.vm..}o.=....:..n.f.....7...3....l6;n.C.a.s,.....W....B.%&q.R......F..{.0.^.[..=..955..4A. .A.@.....c....).)Qr.pn.....[Z..r....f.e.y...gf ........<...k.k.......o_..i.....^.[x......zC....;J.....W.....X..X.:..@...:.(6.3f.....OY.A..5+p.0..4M......J.Y......-I.....'.8..NU...m&1......b...1..#.Cx......`..\|...oQ..A...Q..A.b{.c`.M..`.B'N..r4.".\|..K.xj41..R2Z.@..!......@.6..I..%.O%..0...i...1j.6..'.......A.^8..)....o.V!dg...J_.C.Q.....Ib.F<..........h4=...w..1...H.>.T<.$1.<4[.o.1.Am....Q.'......v.J%1..84.....6cJ.R.............C.."bf..=.K..NTr..,......... .(...cI.A.y4..e.s...yh.<...v=f..Z._/..Y...y....P..u..j8..p...c 0..f7Ju\..Gh.q....kK............@HN.......C[..}P.o:.@J...<.......P<..{..~.=*.%!..........BL..f..........P.e..E..t&..@.\.../...w6.;.N..Q..J.m.,6K.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	137
Entropy (8bit):	5.583576004642109
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtOhXfCCm/kCQ3lp1p:6v/lhPUujnDspW6Cm/jQNp
MD5:	3B7F995669AD8CBF24ACCCB8F1D70F4D
SHA1:	A9891643F551233C3F230EAA5836E9FA7426D128
SHA-256:	C9183C4EA5F592F5DB89558B91ABC45D6D10CA383F1CE41233900B1CBACFF308
SHA-512:	93836ADCEF608D7F08E3B59F94502EA04DA52E845FF658F83E422D7F30130002C135AEBDA547495E9F9DFA5FBE6C9DC2DF483CAA225D8CD48F891BD70A1D38CE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/contentPatternLeft.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...+IDATx.bd``h` ........&.*.Q.G..5p..Q...........$.8.\|....IEND.B`.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 279 x 553, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	21745
Entropy (8bit):	7.867718073230694
Encrypted:	false
SSDEEP:	384:xJXE05ScNhBPPrDThLtsvZi2oAZT2J5/l+zFgq8hD0tdIigR5cEkxtpfm:T35SchRT/hpsvo2o8ajlQL8h0ds5pkxO
MD5:	141C5087D8870B7172AE716B7B8F3CC3
SHA1:	A04E5759E87FB7222D428C5AD7183E1CF6305FFD
SHA-256:	43F8D30D456624A760B22770391A63CABE32CE45FE994AE2A23BEB7A53F3D320
SHA-512:	E6D4D2CB462973E0C1D94EB0BC40273D5DEA63D921B73F95EAEEF2AECAE9FED20D971070D6CB78AEC02A47DA78B08E77AF1DDFB125FA65D34035DCB9D8C80BAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)......)......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	256436
Entropy (8bit):	7.989592117320458
Encrypted:	false
SSDEEP:	6144:oROSlP2tM1lvC4jHoZm44d1n9mlg5QcIwuFWOgVtsCkQEdx:4OStcHC344d1n9mi5JIwuF2V+CV+
MD5:	24AE9752226F8F0E957E1F5B45075A11
SHA1:	5FC7381D111B7877407A0C980C0A69BC0FFA4662
SHA-256:	B468A7D4C21EE69B454D33618FCA723B62C3B934AF5E0775632A1AF6F90AE704
SHA-512:	E1A0E36AE09E27ADF5FF6444CA4139E74914090568112FDECF3A566B59BFDBF1FD101F810CDA88389777B7971410FF0D5CCC042B2F2755A5A53F534E3E32422D
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/slider_service.png
Preview:	.PNG........IHDR.......r.....:K......sBIT....\|.d.....pHYs..%!..%!...G.....tEXtSoftware.www.inkscape.org..<... .IDATx..y...Y&...^.}.-.e[.c.vb.N...0!$a...}..}.......I..1\|.00.@ ....!d!..o..X..E.%k_.....k9....[.}e..ut..O......Vu..}..=.'>..+V.H...............-.......+q.UWmz.................\|...o.R..ppppppppppppppx!................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9...n.......:.,....n........../.5..vpppppx..o.>4.............'N...._..:........<C).U.V...pppppp.7...E....vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#.................

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 33, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1537
Entropy (8bit):	7.068903278128782
Encrypted:	false
SSDEEP:	24:Xy1hpunQWwjx82lY2T3gVhHLyJ3V/CsbGowPLctzEOh8x8wgfWFYN65eIdQO7sk8:XwitNn2c2J3hTwPkz5hL85B98
MD5:	8A3E7C798030574D519D3D167A5E6D5D
SHA1:	BB6969321F5D03B674519D1E23787FB92C1879BE
SHA-256:	82DDBF7FD3FD6B045FC6667A94A3DAD1301A1B7572BC9C8003B9DF22D46FB2BA
SHA-512:	B8156B549079C34225CB61CE0284650C45B396DB7381C36AD631F7543201F1931E2B328B3B83FA7B6B992B2DEDC88DC377317861F05DEFB0386641CDBDFAE316
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...!.......o.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:D3B1BA623E8711E08E6F9312EF314E02" xmpMM:DocumentID="xmp.did:D3B1BA633E8711E08E6F9312EF314E02"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D3B1BA603E8711E08E6F9312EF314E02" stRef:documentID="xmp.did:D3B1BA613E8711E08E6F9312EF314E02"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>J..L...uIDATx..."A.....]q...D<.".}...C...*.....7.C....e;x.?HUdD._.....t:}.........z.z...,...l6.l6..W..b.Z].......

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	5.288771627179966
Encrypted:	false
SSDEEP:	24:1FRZQ7X2SBloG7p9WsscUbwsqai5hsmfMmpuEGVTe:XkTokyjcUEsG5p7MK
MD5:	2A8594A62D92D2397DA89900EA357D47
SHA1:	7A620CBA6A1CF17069E0A7146CDF14322D325F09
SHA-256:	42441D5448DBB2CD53BD7102F46AB7729ED8E501E69C0A996036AD0312F8F000
SHA-512:	69C415AE80511A5931673E49E768871E316B91314A76653F3C51C32D0FEE540D07121A5FA98C148DDB71FB617B98CE67875D52B17114ADE50766AB2728702341
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/cufon-replace.js
Preview:	//Cufon Replacement....// var fontName = 'TitilliumText25L';..var fontName = 'Yanone Kaffeesatz';....Cufon('#body-content h1,#body-content h2,#body-content h3,#body-content h4,#body-content h5,#body-content h6,.comment-heading a', {..fontFamily: fontName,..textShadow: '0px 1px 0px #FFF'..});......Cufon('#body-content h1.first-word', {..fontFamily: fontName,..color: '-linear-gradient(#7f7f7f, 0.55=#717171,0.56=#535353, #5b5b5b)',..textShadow: '0px 1px 0px #FFF'..});....Cufon('#body-content h1.first-word strong,#error-404 h1', {..fontFamily: fontName,..fontWeight:'bold',..color: '-linear-gradient(#3faba9, 0.55=#3faba9,0.56=#3faba9,#3faba9 )',..textShadow: '0px 1px 0px #FFF'..});....Cufon('#footer-content h3', {..fontFamily: fontName,..textShadow: '0px 1px 0px #000'....});....Cufon.replace(".nivo-caption h1",{fontFamily: fontName});

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 28, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1017
Entropy (8bit):	5.861819166972373
Encrypted:	false
SSDEEP:	24:n01hpunQWwh82lYSKwl8LIEVGYT3ZyJ3VsExqG71:n6itvnLLV0J3Jca1
MD5:	F62FFC68E8EB2A5147DFEAE12ABBAF03
SHA1:	2718A14170155A89D75F612E5261B07961C1E46F
SHA-256:	243B0D572EC737C1931A50A3246E59B3636C4DC7F6D150FB89C9FBBFE5EF185F
SHA-512:	46AFB45F72952EE2BA9F1A236C802266AC1CD6DBEDBFD4B0740907DC812E17A4299E2C4A387EDA3F71A0381DF9E94B3972B8A0AE09AA83DBC1E015260C7C1AFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............./?B.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2C8FE46F73A11E0ADFF9AFB3722E0EC" xmpMM:InstanceID="xmp.iid:A2C8FE45F73A11E0ADFF9AFB3722E0EC" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#..s...+IDATx.bLMMeb```...?...............ld>...0.nNB

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.681840584214431
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtVdDlFtU6qziwAX8D3PH/l2up:6v/lhPUujnDspVeziwAXCXkup
MD5:	C2E5C4EC6FC9EE4E49C79FF7E18C9695
SHA1:	BD82394085B160314184D610A7106C0557922DF4
SHA-256:	41960505E78C2519594AF3BDEA17DDC116413FE313E98C5B206BAD5ABD1E7718
SHA-512:	3F4193C48FF0ECBCDC15A14BCD3443061F2B92BB4DC2019E54FC41462BB01BDAD915574D24AE354496FDDBE2CB60819E0560578A70FC7CB7C9FCA8AA859D31C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...0IDATx.bd``h`."`b.2.5p...` .={NS...@0.)...7.....j1..;T......IEND.B`.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1405
Entropy (8bit):	7.819104626920053
Encrypted:	false
SSDEEP:	24:C1c9/T8Poa88GS9fxv6MGC0qWvBtOEsNrvrwQlCsVAZHmKKMOf:C1ctIvP7BGC0qUOE49CaAZHK9f
MD5:	8B8CE7DA7146B46A7F80E6218B6259B1
SHA1:	BCB01B9377D915342CAAF82604E73AA5462B8A4A
SHA-256:	969B6B07E5C708BE9B75A472FBD033D21EB01E84F9CF675AF5582F2ACDC6C8AA
SHA-512:	430A55B3FA708088893904A98CED6F24799588E2649344936F160B6C4D4CF3E384E360870035E74DEE6E00DA5A083B8BA78210A25DEACA91D6B0AAAA218C37E8
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_twitter.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........v.V....tEXtSoftware.www.inkscape.org..<.....IDATX...[lTE...s.{..m...JD...PK....E..x!&x{R.hT._L..Mx.F}C.....L...b@.ZHZ@...[K.e[.[....{...mi./9..\|3.\|..... ...P..!f.#...D..[(T4..X..z...}}}].B)E}..'.-..u..e....5.^..q............n^.h?.'u...?......5.W..w.x<.@..^.zoM..........E...k.').\|.'.s.h4.u.....^.\......v.p......NP..p..S.:.~...:...T..l..N......`..I.....a{..~..l.....6.H..' .....^.C..W..@Sbn.n....x....p[FB.+...g4.%/W...kzn.[.l,q.I..d..]......I..[.v=........v.[.8N..lk.fy]..N@.E...na..0..9.Z.-...0...:......x.6.@.).Y...j..k....7Mu.H.....cli..%fR.+..9@D.<}G.......F.e....?...R>.+.>h..1....n...i.(,..7.T...j...!A.W..2....=U...T.....bb..~2.en.QR...4V.....>..<.\|...1..k.t..t.[^......Zb..r../p..........j...8.6.?..O...TET....m.C#.P9IG..ty.H.c.^..M..@...+.V...!l...pJ..*C.....05..3.h..<~}x....2...7$.x.d.P.'.i~.q8..bK..(....3i.........jfW.Z....w.Rc.C.T.0;.(:........,X.5a..FF;[fMz....).&q.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.141643219073113
Encrypted:	false
SSDEEP:	48:HJzvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:HJDYJndGU7nyp1RXplkHdAiv6
MD5:	4297900AE2D9D0C4EB00D1C15462FB19
SHA1:	2E0EDDEA4A764BA0A1F9903DB38542A795547F3C
SHA-256:	CCD39B8BA77B46E92151135AC4749D1FA2E03FB5BC30B475C9CA11B8C95EF64E
SHA-512:	0E5B6ED82D692A88D619D6C36C1AEA902FFBDD329029FBC99576EDBC69DC3D4D52A63E745225BB9896CA94D4F19B8322DDFBAEBDBEA6C5596234206CF9CFE4B4
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_square/loader.gif
Preview:	GIF89a.......222...XXX555JJJpppCCC...]]]...PPPwwwccc;;;......jjj.............................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1376
Entropy (8bit):	6.7575529024702075
Encrypted:	false
SSDEEP:	24:+Aw1hpunQWwh82lYSKw86PVAT34yJ3V7P3YGXKtgLmlS+cuc9Uob:NOitvnLZ8SfJ3VgsKtgLWcF
MD5:	BF55EA7DEDE2004166DC4024C5B5528C
SHA1:	2BD1C91D22805DB7E36176439DA03F8167B19753
SHA-256:	0BAB08FA3983682B543C484A6A891D0ED725F83FF3E81EFA42A198546C4DAEA2
SHA-512:	41A7174F0E08A68E7C91C0D7A1696DAE672869054A6755658D00202946C58215A55822ADD1700441BF069E54EC12A8439CFE760739DC912632504D71B52CAE1B
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/sprite_prev.png
Preview:	.PNG........IHDR...............e.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:D3B1BA5F3E8711E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:D3B1BA5E3E8711E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118BF2F6B511368090" stRef:documentID="xmp.did:07801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.H.>....IDATx..j.P....A..Q..<.Ppr."....Q_.P...J.1

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2525
Entropy (8bit):	7.830198599933574
Encrypted:	false
SSDEEP:	48:5Np8MdRRRI5d+aggj+zXXeVsROhLlvAcg0rI/g1dbQHDlHCRRR3u:7LRRREsa9+usRO9VNOhCRRRe
MD5:	198FDF9954C176D736BB75FB1F5C6602
SHA1:	921CA001C2BFD5AD93C21F296B0D0FE31D337122
SHA-256:	2C811352EBB362020EE1C0F9591DD1B34D0D05D595690BA2A8FE34D240432BA4
SHA-512:	1452C81A4D4245589ADDD1F58AE99803288D5743983048131DA2CABD26778A5AE7D6ABD5259177D9C4A576D9C1CA6782266936E8E3E299E5E0363D110D300791
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/teaser_business_01.png
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....ZIDATx....o........k{...8.s....8...N.$....Z@m.CUQ.J.R......;T@.....P.M.T...p4$......+....{N_.....p.....xvw..j.;.<.VSS...`_...\......D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P......._.a.G._..\.v8D......./.N..I...#}....#.......m3......uQ.W>......+....s.>~.4g........G...l.d......%. ..,.T...~...g.T;N&.@dA.5.....G..Q._y..m..y..?....83L7..A.v.. PY._..+. ..._4B.9~..;;..../...)........<K.q..vQ..b.f"...M..!.1..G...FH.>.../y.E., .a...j.p.L......zq/......}......WH.:.@....\......k..M.Q..%.e..:..xv7.'N.h..ys(..P}-v4B....#.2..e.....S.v...W..,...I.w1..^..p.cY..\F...k..\|6.....F.`.,.........k...(..A..FB....Fq......,Y.@~.Y.h.Rj.w....k.......3..... T_....;.}C..D.4.j.....F...F..;.8...4Su..... .PO.....Kh.`..D.].P\|.R.~..Y<.\|6.....W.o\?c...z.V..E..b1.h.+..h....H....3>M.W\|.:..C.t..\2I....

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2456
Entropy (8bit):	7.889708035419822
Encrypted:	false
SSDEEP:	48:SXa90/hBcp/h46Pk/JOXdY/u4UTwUZm5CuouxXgyPtjlxIS1:SXdLcbTsROXdYCwU/tuXztLt1
MD5:	DB6515CD7690422731591D5E5A6D3BE4
SHA1:	18C2AE8EA9790FA6787FCD0373D7BE691BE2BE6C
SHA-256:	DB1562FFDB17BF3239EF7F30176897967EE9D3AA1F96DBB2E0B5807F4F5CA2A1
SHA-512:	719EC5BD7A532BC9D7038B6C567EFFD9866F72EEF619B4F97F3120F467563DCC287F962B30214947F4766C89E71CA219CCD9CA616E3DB1393C941AC0FBC787FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r..._IDATh..M..G....].3._.u.....$..m.H.B..B..'.C.H.H.......$.@.8..!...K$.....db.........sfvz...9.j.._UW...V.T....zU=...T..8.S;v]...T.bS......P..w.u6.(..\/....u..G...JQ..g2..jceX...-?....8e.U5..&..(.g0.ej.U.GU.......)h.0..S..{Puu.Q.0..I1].:Lu.:..$u.zO...5....m....$[.......n.S.){.QYVW...K...Vg..m...8.H)..i..A.$2?...)F..F......y^.^.F=..fM..)..l..%."..C...DQ..q..9z..z... @...g..Z.4..SW...g..#.C..cL&...d2AQ......1. .E.6.EQT..eNM.3..EQ...i.\|..8./.y^fL&.mT.)P..R.W....a."..R=.q.y.\|..$.i.y..\|^..l`+....M.....q...iy..yd.J.sm..S..4..m..<.d2A.....\|.0US....q......Ja.l..r.1...EQi...]....EQ3S.9.T...!2,e...\|..@.@.......4Ujl....>.9.^....u...W,DDf.I.uT..L....M...7.....q..i...,..........y......V!uj..6....S~........vy.....0;.A7......_q.....m&.:....r..u..E....,..;...-L&......?{.O.."...D..5l...5.].E.e..u&...L.......0.2y.<.{{{H.....x./.../...O.G....1......E.....9.o....u.,e.B...`0.G.e........}.9\.x...x..~u._..%.o.../...>...sHn......

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64907), with CRLF line terminators
Category:	downloaded
Size (bytes):	167674
Entropy (8bit):	4.024103501328885
Encrypted:	false
SSDEEP:	1536:VxnsrFaj0O8BGuL1GzVfCp96qwQPkSsKJrYOKHnLXDJBwg3XzT0wDnsyY9PqeYTe:VxnsrhKMVPJkbDnsygqNi
MD5:	EAA7DCAECA1E197515780899B7DDA851
SHA1:	CA060EE7EE6DB27E5D99D047787AA37E1A54C6E9
SHA-256:	1A57D54F31A3358CC081A0A7331225F6B353F98975391A2EAE9D2553B25825C5
SHA-512:	A07A612A5BA5C8112B22925C448444B1F787A8B52F9355D414224A0A0EA397B7974B6FD0C75BC62FA77D710F75042A411E4FE886A40F482E255C7F1542EBEBC3
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/TitilliumText.font.js
Preview:	/!.. The following copyright notice may not be removed under any circumstances... * .. * Copyright:.. * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All.. * rights reserved... * .. * Full name:.. * TitilliumText25L-250wt.. * .. * Description:.. * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All.. * rights reserved... * .. * Manufacturer:.. * Accademia di Belle Arti di Urbino and others... * .. * Designer:.. * Accademia di Belle Arti di Urbino and others.. * .. * Vendor URL:.. * www.campivisivi.net.. * .. * License information:.. * http://scripts.sil.org/OFL.. */..Cufon.registerFont({"w":530,"face":{"font-family":"TitilliumText25L","font-weight":300,"font-stretch":"normal","units-per-em":"1000","panose-1":"2 0 0 0 0 0 0 0 0 0","ascent":"750","descent":"-250","x-height":"10","bbox":"-91 -1081 1000 278","underline-thickness":"30","underline-position":"-80","stemh":"54","stemv":"60","unicode-range":"U+0020-U+2265"},"glyphs":{" ":{"

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.9404747322014675
Encrypted:	false
SSDEEP:	96:oHx1VfO3aV9LrMgeM+gKAUkDvjAnAXhVrZPy/dzkjP:gI3azLrMgevuVbAAXhVr5yVIP
MD5:	F803A853E7FFFEA2E1ECD1FBAAC39C93
SHA1:	46D8E46C1F31D880ED0D951B9F5350242025788C
SHA-256:	4994FF524EB423704C956CD9469889825A4E704FA5A601CBF76EECB07FE4A838
SHA-512:	383088863111087659DDE28E32D044746E05EB97C6A1D7A8C266744154E568EFDB801C64373AAF20687B60CB0EFB3061C7A19B8FA21BEF0A1B0173C799B67717
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...{IDATh..[.].Y..u..s.sf.xl..;7.M..%m...Q.......@...$.A.ABB.C..R.x...@....VM(QH.:Q.N.'ib..{<.s.u.a.=...4."..^{.........._[...P......\|......;.w....p....{...~O.8`}+...:D..TUE...!v3p.G..OtTJ.cuu....{...}.'.".".5.A.5UU.u.:.5.{..)..=.sm...f..../.;./....x.....v9s........;.v$....H.z.....}....U..+.......[...cT.QZ..:.W.%;H;].^^oj..8.Z....z.<^....'qL.*\|.h..<2$....{.!p....o....q...^...K...X..%Jg.......xD...!.........qB..A..B.c:.3.L../...z.`4..c~..x.m.......f......,."=.n...{.c.....Sk...<.R.....z.._k....9.r.E.A@Q..8...dB.. .!....Y.,.....>.^{.5.$!N...e...<.@H..Xc.Jn7..$&..]k.....S.a#..9;..G..\|.3.<y..s..d.7...>...A....#G...I..j6.0.0.Nq.$.RJ.wL&.Q..h4.....m&..Q..BJ.o.9....f.t..a......\|..<...$P...V..V...BH....t..v.<W4b.W.5Nb..A.A....8Nh'.J)...@.=G..........s`_....~..(@....9.....&.2.s.J.).Z.sx.p..i.-J....&.@+lY.D.;&X.._..Q./.....>.....~{...W.........V.A..E!.2(.......U7ht.1..8..C....!.k.!J.Bc.BkU..9.?.<..I.....xo{.Q...L6

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1084 x 431, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13267
Entropy (8bit):	7.558468708100472
Encrypted:	false
SSDEEP:	384:3chohohohohohohohohohohohohohohohohohohohohohohohohohohohohohohu:3ceeeeeeeeeeeeeeeeeeeeeeeeeeeeeD
MD5:	3D134047BF4AD7A79DDC6294F45531EB
SHA1:	9FCA3D46654CCD326760DB845BA046B93A9B0848
SHA-256:	D4A67F34279C033C0AF343276B094776499C0665CD329FFF2AB7F8182C9B79A3
SHA-512:	ED4AAB5C7A906D54E9FF6B8F96A4D255EC35C20A88565A5E608312F12BD44F8A44C52FC834CC60FFBFDD0BFDD277555D7FE81AD300EF26935629412DA20246AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:D2FA54F9FA7B11E089BDEEB78990BC67" xmpMM:DocumentID="xmp.did:D2FA54FAFA7B11E089BDEEB78990BC67"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2FA54F7FA7B11E089BDEEB78990BC67" stRef:documentID="xmp.did:D2FA54F8FA7B11E089BDEEB78990BC67"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>t.YZ..0IIDATx....5Y.......jj.)...../..\. 2.VW.#..p).+_..]..qz.fd............Dd...8qN...{>.H2..x=.z.q"........>.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 47, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1097
Entropy (8bit):	6.062885138048307
Encrypted:	false
SSDEEP:	24:VDA1hpunQWwh82lYSKwy6O7V3PT34yJ3VHP5YGBsjjjjI9:VDeitvnLX77dPfJ35amw6
MD5:	26B97559A5225BF3CC3E1634950BCB84
SHA1:	0C24CB2FC5F9B4EE3E6529925D8D714ACD153B00
SHA-256:	CF8A95C98411826D030DEE08DAF6EC8CAEABAB42A29143AB3D8EB69FCD30ADD5
SHA-512:	CF04CD33A2C04B5BB11BA02F9A9D0D12EF5FB0EBFF5F5C750F6F4AE2BDB73103C13F520D97839C709FAC4A8FBD188B2D984C40F1EDA25CBEBC7B83EC231599ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./...../.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:6FD77D8D3E6B11E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:6FD77D8C3E6B11E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......yIDATx...A.. ...T ........]..{......B@...[..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 130, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1162
Entropy (8bit):	5.81451473708326
Encrypted:	false
SSDEEP:	24:N1hpunQWwh82lYSKwy6eVfT34yJ3VJP5YGgEg2z/c:zitvnLXpZfJ33as/c
MD5:	096E04FBFB474C46CF17A9A878B3D221
SHA1:	746411EF61F8D94AD7874F230379DDD6933AB335
SHA-256:	7385CFEF6CA7555144D6E75B17A3805B8C46D6663D06B7B4692327B92251FCAC
SHA-512:	552460504EA8765297A2A1201DABF88D211205B88CA28CF16308877966A6BF92B1B8869CF0FC58A7ADFB802CFCD3A90EDE3CFCD3EEC450CAAA49794D18CF4AA5
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/sprite_y.png
Preview:	.PNG........IHDR...=............I....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:6FD77D953E6B11E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:6FD77D943E6B11E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:05801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> .KJ....IDATx.....0.........\:#..(.D.}aYvuQUm,"....

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 1244, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	211124
Entropy (8bit):	7.966779366644809
Encrypted:	false
SSDEEP:	6144:zgl7rRQ7krXodZUnbLbt5HLXBg8Sr6kT1D9aESt:G7rJobUnbl5rRHkmR
MD5:	982118A47D2890E02E9024BD66A466E3
SHA1:	DF7D05E440B5C193949A4B914CCA7F3F766270F8
SHA-256:	E0034C8E0E52B810EEF30A05192AA28946BD699C91DB91DB835BCF4E954EC966
SHA-512:	54ED8DA54F38CCD10070AC638A8FDC1AD2109BA541849C3E4196294EA964021E92AA1F928722FA3F2E894D25FDDAC1FEF2D23110EBBC0183F3DF3561AF04696B
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/light-bg.png
Preview:	.PNG........IHDR.............e .g....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:992A6903F8D911E0920BE7AB4B292F91" xmpMM:DocumentID="xmp.did:992A6904F8D911E0920BE7AB4B292F91"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:992A6901F8D911E0920BE7AB4B292F91" stRef:documentID="xmp.did:992A6902F8D911E0920BE7AB4B292F91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...l..5*IDATx...3.n....?.u...6f.[./HfVI...g..-U..K..z..f..l6....?..z...l6..f..%k@m..l6..}F.m..f....m6..f;. W..}...>.fw

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.856807876054071
Encrypted:	false
SSDEEP:	3:zIRBEBc2LGRNajmQfKi8F9LxMyff/tR7RNcIwJyNofkGYKuKyVvn:0ULzmI8F9LxMQFR7RnwwuFuDF
MD5:	DFC3574CFEF7E596238AB2C14539F207
SHA1:	10F5DD8FC6B71DC4AAE352FA087C56740F9AC775
SHA-256:	3D5DF17532EDB15E01AE547D6936DF770D6474668D56B82B649EDF8241F5804C
SHA-512:	A18AF16F65BD783624B74B9BDC669E23E9AC207C7C24E008365E1812C54DDA3A360859C3360E0D50F2DADE82CCDB873E25E95C37A6E93EBDC3303094E0C237E2
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function () {.../...$('.simple-drop-down-menu a').click(function(){....if($(this).next().is('ul')){.....return false;....}...});.../..});..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	6816
Entropy (8bit):	7.031204033016918
Encrypted:	false
SSDEEP:	48:jhM48+uvBTi4Vyxq6KTFnK5tx06AhtCi8ebU4pkXCA8ftG0b/YK:jqN+uvBT3V/ZnKLiCi82UTXVLs/N
MD5:	2E75FC61057231E440462B3F04D6680E
SHA1:	FF8A3C2403D941C07DA55823924195566CB7F14D
SHA-256:	BF083DCAF24C92706D4946BE3B06739513D20414284F78183DE02D6406D50E17
SHA-512:	4BFC60C1520BE39BE6AD87F9DF78AE82C8D1BD0D0FBDBFCFCD36EBE57DCC30AD6B576C252709F39E3AA480CE5CC90FBC4EE76C684D36AA8D26D6E31B4487BC71
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/preloader-dark.gif
Preview:	GIF89a.............LNL...424...lnl...$"$\^\...DBD.........\|~\|...TVT...<:<...tvt...,,dfd.....LJL..............TRT...464...trt...$&$dbd...DFD............\Z\...<><...\|z\|...,.,ljl.........................!..NETSCAPE2.0.....!.......,...........@...s(V...0.B42.... L!.B.f,U....H.P..q.....V...B..V..2..xC...'.)4.M....0..C'11"...B.......r.13,,....!#.,.-..../.q..&..M...1Z-......!6.6..N6....-.3..kC5(...!.CA.!.......,...............LNL...424...lnl...$"$...\^\...DBD\|~\|............TVT...<:<tvt...,,......dfd...LJL...............TRT...464...trt...$&$......DFD...............\Z\...<><\|z\|...,.,...ljl.......................@..C..,5Y.5.BB....jY. ....N.......;.....@...4...M!..m.&.yC .(/..7.M..(....C/66....B.$.)....6...%.L..3....74 ..$....8))&..3"..B.40.,1..+11...n.!.,.&...3mM...4...xCA.!.......,..................LNL424......ljl$"$......DBD...\|z\|\^\............<:<...trt,,......TVT...LJL.....dfd............TRT464......lnl$&$......DFD...\|~\|dbd............<><...tvt,.,................................3

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_rounded/btnNext.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1737
Entropy (8bit):	7.109246561518601
Encrypted:	false
SSDEEP:	48:T/4HaRZBFylUzyUOn1X9BNAnkj3hkZ9iO:T/majqloyUOn1t/AnoR2oO
MD5:	DD6B7B0BF5C3AF22499ABC0A9EE1E1B2
SHA1:	E8C0018145D616FAC4DEB460D9C1D9C9DD4D3302
SHA-256:	0EDDAAB3B8CB0B15D81D62E5AE5960329C3E576EA78DC321B20734AB20271847
SHA-512:	8A4C36E3FDB61782F6FC9BF78140C96AA729B4E1120BDA34995A90C9D827395E1460F744DF17779091D206629664467B997E19A7A6E54E07135AB89E454DF601
Malicious:	false
Reputation:	low
Preview:	GIF89a..................```@@@DDDnnn........$$$(((000666>>>jjj......rrr...........PPP^^^......:::.........\\\\|\|\|.......hhh...fff...FFF.....................xxx................................................................zzz......LLLRRRZZZbbbBBB<<<...vvv222...**...XXX,,,......NNN......ddd444..........~~~......VVV...JJJHHH"""..................&&&...888ttt......ppp TTTlll............!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,...................#)-....$..6:7....%+/.70=6......6.........=?=.....3@?......;E.....7A>......B;.....>CD......;+.F... &.03.8.<..!'.14.,<.."P...F.`.....!.......,..................;.WX.[]...<.U.Y-\$_&.JOSH..TJ^*\.G.P..2...#..7.HKQ..:6..L=.FF.'M.....NA.:b..I...T@..?.R../.D..924I.::/E`..A&V,Z.JCaT.T9Ij...........!.......,.....................i.^,...C.K.....jl.8^ghQ..CRk..."dN<.h-P..c.f...m].,.>.Jnj.2H0.T.-..43..5.G.`eC.6:...f..:=.G5.AT770./.6.@C(CBA;@/.F..r. ..Z.@.!.......,..................?(..N!lG..9..'.g[jNJ.A#Hl.F=B].O<.T&28.f_L;.9V

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4439
Entropy (8bit):	7.925020351886879
Encrypted:	false
SSDEEP:	48:9dmz8Vsn3R9+k9EM9HGYJdezUa8cGLHXmvoRn1Rdlt2TACtIm0rSa+ed+iWPAj7K:Tmz8QExYr9L39zRfoTNSmaCi35bf4x
MD5:	A005A2C797F685D4F939DDAA27E35148
SHA1:	0194E8A63B1936228B814C4432F247065B206FF5
SHA-256:	13046D8346799AC822028FE0B3E8DCBDFACDB8434A48CE6BE9687695FA895C8C
SHA-512:	47912B9C14B32AB919E7F0282FB1F735B5397413BAC89FAA3868C3BDAC30D3EA61BC802C5F6C9D59EC669348341C07EC394E5B7549887F68B5C5926D4946A8C2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png
Preview:	.PNG........IHDR...<...<.....:..r....IDATh...r\.u...;...3..B..$.n.T[......#...^9.o /.s8...x'......v+4..#..n.$.....<.)3..U..@.S.G..9.y2O...%..C.a.B...d.2...tz1.....m..@.Jk0`Y.c.Z.I&c..h.....l........Bp&..I&........}.......XZZ..h.$..R...5vvv.R...q..1(..}.8..,.)%.F..q.V......&"...k#\|.4.1..\|......q.#.dkk.....Hi0.p..u..>\|.R.....y.....aH..\.t..q..o..z...R....._..5.e....+.2..!./_&......\.u...(.qV....M.3....E[#.FZ...G.).......b...1..h.t..'....ZS,/......w...A......a..'O2b.6/n.{Y#.1$Q.2.KJ<.;Q.._.=....Q......~.....>..w.......9..@\|....?.7..)...N.....2O....0.x.s.Zm...O...l.X\,L$vT.(...mYX..R...........j6....S./;\|QO....N."....}d...A{.........s.?...I.;..../..,.C8.x.t..D...[.i...G..P....qmI..D`...'...<..C....lo_BHI..#....C:.2..S..m.v..[...f.%.......&V.U..H#f.x\|...>.).$.......o.A#h.6.89D....,h.q...&.T..eq......Z...q...t..%..m...4.5l.'m.q..u.n.......[O.N...H'@..V.F.Xn....4DZ.NPD:.$.L..R.n..j...?....N8...7..$J..w0...90fBb\.4y3...q..Pa.."...K...,7.!I.m.m.&

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3
Category:	dropped
Size (bytes):	3101
Entropy (8bit):	7.537817306457639
Encrypted:	false
SSDEEP:	48:oitvnL8Pl0J3FO11VBw4cwo9B/BXlGx2t0cyMEj41z/Hhi:L49SO11VBw4cdfGx271w41DE
MD5:	755F71B4A1669C290E05478216337D76
SHA1:	471572EDB8BBBED812C8821AC6755DED69037D2A
SHA-256:	3964D464AE705EF77CB795B9FF64A918529D57395BB19BD846DD1417B48A28C9
SHA-512:	7164B9AF55C38F1B9D7B8A483351465966373987AFEABACB0565CDF6D06960F482AA92AD14A53C011B0F82E0416B1CE73682834D458CAAC815288DDCD55A59A6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F1174072068119109F8FE27718D5A" xmpMM:DocumentID="xmp.did:A6D6B3B40DF611E1AE4CAFBAA4C2A751" xmpMM:InstanceID="xmp.iid:A6D6B3B30DF611E1AE4CAFBAA4C2A751" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D1C87E325206811A6138A31EE5F34E6" stRef:documentID="xmp.did:F77F1174072068119109F8FE27718D5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	741
Entropy (8bit):	7.611122399627992
Encrypted:	false
SSDEEP:	12:6v/72rWlPtViTvTGHyUcQo1Ezg6F0K0mvC5GrQbmlJy6puz06bJ/iWwHS6V38TYt:3Wl+TvTkyBQo1EzzF0LmMGrTd7MJC30c
MD5:	6A4BEDEB093BC4193D38553881363AF3
SHA1:	8E7D8961D60CC1F4493A9A7B97B2239438979C98
SHA-256:	0A1ED3BD8FE0B2D41E5F9B5A150B08B95860CF947CB45D7AF9BAF231B25AA5C1
SHA-512:	628A1F425E60850AAA7E56C059C8EBF8F0B85E71EFFE726E00BE9173BD7CB6EC4223F5EB56732B2288FA8CFF8AE1CDDFDB450A772B2C55EF83970AD6E889816A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..KL.A.......j..6..R......W.......{.b.A9y....Nr...........D)MZ..M..}tv......I............q.?C...<..K,H/.&.l.+.W......p..l...87...<c<..3..D<...;..A.f.'6K..Za...0...\K.M.p.......9D-..R......m.h.....5..wM........KZu3....h...g.z#t&~:.'..`...31.3.7T#.i.t]o...[6.\|...P,....kp.....j5...Jt....;...#.....X^Y.3XX0^.c2.m..\|i..J....b..g.F.(..7_.U...R..e...5..)n._.....gp22.'#.].my....@...B]....l.....z..,......#.....?po3......+...`..\|....rXF.........:.....zU0^...[...D'}...]v..b.8..3f.fQ....s..F.....e:....p8..s.........S.qc .D..A..aT....?...'..r...E./jXk....m...^ds..p.=.q...".z0.4."....6...v...,..v.N...Y.4.<'U..`.E...Y.G....o>.n.g....IEND.B`.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	4343
Entropy (8bit):	6.344935543526069
Encrypted:	false
SSDEEP:	48:SMh0gwLbaQk2FRC2LfwIL7qdtfYdThdkxGtCkSK:SM6gwfkERzfwQqPyThOU5
MD5:	8F6C7D5D6A2A249D88EEB14D0A31A784
SHA1:	719966F9DE3ED24B90979D615D96253070B9AE87
SHA-256:	086B161AEDD221E0A3FD1889023135B9223664F5CC6491C8649073618C6DA37A
SHA-512:	0A1020227B2A40C991E94D16AA7C8999CA3B81AC0AD97121FA16A80136191517BFAFEC2039E7CFEA94B998CF050AE0D58366CB2A64643C1DF9E4A29254227764
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/preloader-light.gif
Preview:	GIF89a.......LJL......\|z\|........dbd...............TVT...................LNL......\|~\|........lnl...............\Z\.................................................................................!..NETSCAPE2.0.....!.......,.............0.I4(..F2..F......D.f(r.D...c#.......uB .E.b!)..P.....yC.......C.......B......!...!........t$.Ly..B.j..B......\Q#...WfMOQSUdmZE.HJ.BA.!.......,.........TRT...\|~\|...ljl.......\^\....tvt...........\Z\.........trt......dfd...TVT.........lnl........dbd....\|z\|........................................................................................:...3.2.....(F.f..A.@.O..:Y...D..V>...4QK.Z...@..yB..&..k.C....!'.B...R...."$.#.%.".'.$"....".. xy..x..#.m."....d.......M......&..........BA.!.......,.........TRT......\|~\|ljl.......\^\.......tvt.........\Z\........trt.........dfd......TVT........lnl.........dbd.......\|z\|............................................................................0%.}..A.4.:...d.!P..f.$...$..3..E....D....

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4531
Entropy (8bit):	7.915661579984555
Encrypted:	false
SSDEEP:	96:7cx1xO+ELlH7owXpeCqtDz7cUalmoJXM9/yaL9D0v/CIdtxzc:mTwlLSsllm4M9/ymyCIdtxzc
MD5:	ED9AA20CAF6E07793857DA5BB099E5AD
SHA1:	494363D48F4191A5583AEADCB51EBDB596D4F39D
SHA-256:	3E1AE9E8CB4A2E7AA5875B6ED08B09C18656FAF5AB07D137CC8A869CAF046398
SHA-512:	85E71AEDA6DC4B0AEC203273F977A2AB5E3B78F14A5D40AEA4AFF9EA024C65FB9A06F5B0C1CC2AED82831EFA51C3D0D37D5B293A2A521B64D61A1274461D6E64
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....0IDATx...ip]g}...9w_t...r./.dKv,)..'$d!)K:.2Mi!.t.vh.t(..L......JK)0]..(Ky....B..b[^#.e..+.J.....}..Zb.D1...ut.=.s~..?.9J.'..l.!.....!~QH..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!.....y..x......b.r:u...mv.N7.\|..Dl.vK....Jo..b....R.N......t....L.l.H,.%....#.....w..I...-.q[.\|l.^.&..\|..+7.............b.W...]...73......w...P...t..:w...G..y{.N.>{..&....wT].F..\|x...W..s..0...^..P..w.dw.dw...p9......=.YQ.`......&..w..oq....B~[.u.G...+Mv.mN.-.}........d...$U...fny..1C..f..T......+..;.S...}.x(H..g6......JEN..I...]Y. .._Z ](0...L&.m;U.........?..b....6.3\|gf...Nc.u.Z.yzh..8.....'...\|..y.}......r.81..l...&...7d[.&M.....;...\|....<..K_..].hv8YH........T!..f.).o^.....B...l<.O.n...d..~l&3..,q!.b.....p[..r...gY..8....1...........x....A.2i......p[.D.........E.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 50 x 33
Category:	downloaded
Size (bytes):	227
Entropy (8bit):	5.864307874231774
Encrypted:	false
SSDEEP:	6:uK3cFfj0dwzifNlalu/V6UWu6SE0FBF9KJjqnmotEle:1S06zCN//M+0A4+nmo2E
MD5:	ED52DB277173876860B62071785A2177
SHA1:	810FAFA6CB3A32746DB344EBB900BB0748BB0FCB
SHA-256:	9468BFE77BB8540573A06E0E31B0577520CB5C12C575FDEA39076A43C5764ECB
SHA-512:	B9A969B00E205430D3D835144F182C186493C512E6E06203DAEA1B91C4FB95ADFA0FF18682611E8293CC66EFA74F6DAB068FC63A94F194817D57E5457514D715
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/default_thumbnail.gif
Preview:	GIF89a2.!..........iii{{{...000...ZZZ......333......!!!...............HHH......rrr...........................!.......,....2.!...` .di.h..l.p,.tm.x..\|..9....H..bK........x...)5.X`K.mb.......\|.. .2...0.i..?.%.I............!.;

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 20
Category:	dropped
Size (bytes):	6331
Entropy (8bit):	6.971174440206995
Encrypted:	false
SSDEEP:	96:ZTlrZPwcqm7TLzlom/CBzFxCr0S0vAqcqYYLI1+nQhv:9ltPwcHpvmzKAS0vRkAGv
MD5:	8393C5F7E394698F751EE6A11FFF3DC7
SHA1:	03C266A8832F3255FAC90815B032991828CAE503
SHA-256:	255F2566CD540A486B952938766FE509402C88F306CB501345131D86AD3EF978
SHA-512:	E33D67AA981EC463E8D8EA983517EF0ABC8AF425B8A177C30B33F1B3884B75B32DC3FD394A41EEA862E0DDC717B189A3E476A01201821DB57F4DE4D98B7BECA4
Malicious:	false
Reputation:	low
Preview:	GIF89a.......dfd.........\|z\|........trt..............lnl..................ljl.........\|~\|........tvt............................................................................................!..NETSCAPE2.0.....!.......,...........@.."<....p..Z....0..<..s.. ..)...:.%.....@.H.....5.#\|.....V.....[~.t...x...~N..........M[}.......pD.}[.....$..g.........$...#...O...$.#n..O..........\KV...u!...Zg.$...C.......D$. ..D...V.PG....A... D...8.......H..B.....J...@B..VH@(.....,....!.......,...........@.."<.B.......C...@<....p...%.b.....O.............zH.'.BRRE.].....#...."].....QD_......._..D...#..O..j....##...D........D..!...D...........Q.......!.P...$........C$!........"....:.h....}..p...D...J....b....}. Qb...9.......@...G. .!.......,.........ljl.........\|~\|........tvt..............trt................lnl..................\|z\|..................................................................................................N."<.@..B......Ca(......\|.D(I.!x.h-.p..

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 47, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	845
Entropy (8bit):	7.638114232060233
Encrypted:	false
SSDEEP:	24:pQUmxiyVaGyqPG6peYx/uiYBlAwdLBj4To7Ytxz:pQ1xVVa0np5/1qdLBjuo7a
MD5:	B8D4BF8440AAE57321064ECAF2EFEA7E
SHA1:	10F709273C5CA5631DF2E676F46EB1623B433B7F
SHA-256:	FF251ACA3496A2C0CE25A4B05A619A61D5A4867FB7165AE816E202CDE2103B4F
SHA-512:	2142C9E4E9FE7EC135CD8247D44B309DF777F76958BDDE9339C1DDEB5F104FFF5E4B991634414E6A7EBA9B0724306B2A2E5E468BB8B87484FF8DD154488C3178
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/btnNext.png
Preview:	.PNG........IHDR...9.../.....Y.b.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?h.Q...H$.....j....... ....3t06..A]..2....H..!.l.....H.D..Z2:TJ.. .W..m.$.&^..9!-.........}....~..(t.d`...X....JM.Wp............:g..x.\|..G;.5..N@..O..H\|j.7.[.@..w...........%...y..<.!...$-Mr....W.Q.A.q...9...q!.Z.B.@.H.rT.......n..R...q9...........n.....I4.L&.\|>...5.....h>t.\....:.....p\%..K...F..i....m........Y.B1...<.0.T.K\$[R....3&.i.XH,.J5.L&.LLL....R......F.q.XH,.F3...1c0......j.....#.N7D,$.^...--...,..E..I,d.X..$^.T....iz.b..K.....O.\....\|>.@..R.V.....\.!2...j..j}..fk.I.).zz.....'.g.....`.].d2{D.Z.z....W..>z..h4.ggg.D.&.h>.y<..X.H..G..d.....H...+.,.6...Z0..#..+....o!...H.o.}..W.=./xc..$....B^WZ.....m.Bn....@{...p...y.N.c..w..m!9t..H....+h.9.\|.....D..#...G\....uo...........W..[\....\|.....Q.]......3..:I......IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.1589892942905475
Encrypted:	false
SSDEEP:	12:6v/7KHKRrQ52lHw9/p9zeborDfByxmAvfbKy4Snu:hEi2lkRecr1ywrSnu
MD5:	A4C7EA81CCD1A41D68C53E5FE51EE7F9
SHA1:	03E73F967E224B8410114853AAA8A9F96E6CBB30
SHA-256:	D1DD4DE4735E60FEB3D3DB7098702953642A8361B17A2B26AE5E9DD3858A6265
SHA-512:	00E5772B5A59F2EC9F88031207FA613246BFBAC281E5290EAE29B5AEED35EE419F0C188DD41185891DAD93922A70EFD31FB0CEFC65D95E8C873F964C63F4566A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.04/14/08VK......tEXtSoftware.Adobe Fireworks CS4....../IDAT8..=k.`....`.!V....c.Y.tsK.Z7.B~J._.U.t...T. . U....`.v....;..w...s.{.s.cN...o.D..a..4m.U..U.>...0.D$....c]o\|X.S..".ZE..b.n.W...X.... .....M*.j.m....z.{.#6......bQ..T..,\|..?;."W.#t...#.@... .g....I..~.-.C).u.N.H....<..=..p.IQ..J..._b..".G.......y.P0E:.....]Uo?..1.."...{....h.&........'..L..,....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 799 x 53, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3514
Entropy (8bit):	7.6913033167730145
Encrypted:	false
SSDEEP:	48:L2LitvnLML2Lr0J3Jcv+RW4/UgqqL9Y4mf77yVSfDi9vTIDNx0EBfSnRnrO21dfS:5trnWLqqL9Ybf77BLOTiz0KX
MD5:	2763A016659890C3DFD720C737589629
SHA1:	87D5E6E42BF3D4CA03D876809B6ABE33A9B2F2FA
SHA-256:	5D890263E219E5ED47F2BACDAAFE78815FFE9CDE04B8C2A086F4481873B4C221
SHA-512:	7A21A89A2843EA5A96C29508545C9AD36DF216D533A1F4CAA19143555AEE3CB0B36132033C3182C3C0D94EDC2E1614FB3FFCAABA1233790BAED2648CAEF6D5C8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......5..... {Vh....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2E68354F8E511E08907D7FE5372C94F" xmpMM:InstanceID="xmp.iid:A2E68353F8E511E08907D7FE5372C94F" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx....6.DGA../3H.....-.E-.....JQT...U

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 279 x 553, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	21745
Entropy (8bit):	7.867718073230694
Encrypted:	false
SSDEEP:	384:xJXE05ScNhBPPrDThLtsvZi2oAZT2J5/l+zFgq8hD0tdIigR5cEkxtpfm:T35SchRT/hpsvo2o8ajlQL8h0ds5pkxO
MD5:	141C5087D8870B7172AE716B7B8F3CC3
SHA1:	A04E5759E87FB7222D428C5AD7183E1CF6305FFD
SHA-256:	43F8D30D456624A760B22770391A63CABE32CE45FE994AE2A23BEB7A53F3D320
SHA-512:	E6D4D2CB462973E0C1D94EB0BC40273D5DEA63D921B73F95EAEEF2AECAE9FED20D971070D6CB78AEC02A47DA78B08E77AF1DDFB125FA65D34035DCB9D8C80BAE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/background.png
Preview:	.PNG........IHDR.......)......)......pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	8621
Entropy (8bit):	5.208595484723867
Encrypted:	false
SSDEEP:	96:nxn5Ff272xGX+cBM7dYrjQGVooN07dCK1ZPZmwlagu8STqH:n1eOGXlOdgz04KPhku
MD5:	B259DB0B933D8D594DB61D6B49CDFDBD
SHA1:	A94C73AE00C3D8F3DBED7BBB48E027439F484FB6
SHA-256:	4D78C74187FB5698E8C0012D3ABA7A5D605BE9C086A0B874BDDF698E777D46DC
SHA-512:	69C1F097D4B40FD766350EB96E6194A54B87B6D5B340743728298F453986BB033A225D372EFAA86C187A4F510FB232F60C2A194744E2B05E7F6B369C89FDF79D
Malicious:	false
Reputation:	low
Preview:	/Maxx Simple Accordion;..//Author Manh..//Email:since.u.left@gmail.com..//Date Created: 09/11/2011../..(function($)..{.. $.fn.mSimpleToggleAccordion = function(options){....var defaults = .. {.. showFirst:true, /show first toggle content if value : true/.... type:"", /"accordion" ,"toggles"/.... speed:500, /speed of animation, default is 500 milisecond/.... easing:"",.... mEvent:"click".. };....var options = $.extend(defaults, options);........return this.each(function(){..........var opts = options,.....obj = $(this),........toggler = $("> dt",obj),.....toggleContent = $("> dd",obj);.....toggleContent.hide();..........toggler.append("<span class='sign'></span");..................../Set default open/close settings/.....if(opts.showFirst==true){$('dt:first',obj).addClass("active").next().show();};..........toggler.bind(opts.mEvent, function() {............/for accordion/......if(opts.type == "accordion")......{.......if( $(this).next().is("

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	951
Entropy (8bit):	5.896642385384456
Encrypted:	false
SSDEEP:	24:z1hpunQWwjx82lY2T32HEVhOlCltqpCFyJ3Vh2CgtqPCqGMpqe:5itNn2VfOBnJ3fnTT4e
MD5:	6F58C438AC242839ECAD3761EB008D60
SHA1:	189B6C48DA8CCD0E7221B96E61001215B7B58990
SHA-256:	DBEA1CBAA36EEF19F154C9A8077238C2A4E7189229D40EC9C31967BECD75D8A9
SHA-512:	E9B28834FE26DBB3FA8610435F0D188392F3A796A7585D84F844E3C38BC2A328688663A910EB042D12B724C1C1017085FEC02C3E79EAF80DDAA1502EF1B34025
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/button-light.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:A8DF32F30CFB11E1882FBC8B5B4B0CC1" xmpMM:DocumentID="xmp.did:A8DF32F40CFB11E1882FBC8B5B4B0CC1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A8DF32F10CFB11E1882FBC8B5B4B0CC1" stRef:documentID="xmp.did:A8DF32F20CFB11E1882FBC8B5B4B0CC1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.4....-IDATx.b....b. `..0.?.._..."..a.&K...$.... ..q. u........IEND.B`.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 799 x 53, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4655
Entropy (8bit):	7.812379423498507
Encrypted:	false
SSDEEP:	96:/2nejXrfYfMlWWsvDpDPICEi5R3+2sdowSF0+ILl:WejXaMMWeV7ICEuO2sdoJF6Ll
MD5:	0E2B0125D0A57B90352B55F6EAAF55FE
SHA1:	4AA439B6DD4502513E2F3A3B403D030374F0EFF6
SHA-256:	F820D53213BCAABCD7F6E9072BB832B97942140B9E7EFF7F5AD45713F2469BC1
SHA-512:	1862CBA7B94E3F63740B7ED1DF0C029ABC766D8536E325B4CA354317D29F3AC2D9B663411AD1DDA0CD70E1F28158B197F8711861E56D09F6D255042268EB95D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......5..... {Vh....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AE5F1ED3F73D11E0914BA75665AFB653" xmpMM:DocumentID="xmp.did:AE5F1ED4F73D11E0914BA75665AFB653"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AE5F1ED1F73D11E0914BA75665AFB653" stRef:documentID="xmp.did:AE5F1ED2F73D11E0914BA75665AFB653"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...5....IDATx..].......'.w.F.....@./..a..V.!m.^^V...~..f..2.u.9.I...wJ=\|.:]...c...~&].m...E......h.*}...yOD\|=.`7

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.1589892942905475
Encrypted:	false
SSDEEP:	12:6v/7KHKRrQ52lHw9/p9zeborDfByxmAvfbKy4Snu:hEi2lkRecr1ywrSnu
MD5:	A4C7EA81CCD1A41D68C53E5FE51EE7F9
SHA1:	03E73F967E224B8410114853AAA8A9F96E6CBB30
SHA-256:	D1DD4DE4735E60FEB3D3DB7098702953642A8361B17A2B26AE5E9DD3858A6265
SHA-512:	00E5772B5A59F2EC9F88031207FA613246BFBAC281E5290EAE29B5AEED35EE419F0C188DD41185891DAD93922A70EFD31FB0CEFC65D95E8C873F964C63F4566A
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/bullet_red_alt.png
Preview:	.PNG........IHDR.....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.04/14/08VK......tEXtSoftware.Adobe Fireworks CS4....../IDAT8..=k.`....`.!V....c.Y.tsK.Z7.B~J._.U.t...T. . U....`.v....;..w...s.{.s.cN...o.D..a..4m.U..U.>...0.D$....c]o\|X.S..".ZE..b.n.W...X.... .....M*.j.m....z.{.#6......bQ..T..,\|..?;."W.#t...#.@... .g....I..~.-.C).u.N.H....<..=..p.IQ..J..._b..".G.......y.P0E:.....]Uo?..1.."...{....h.&........'..L..,....IEND.B`.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	6.8287532146891134
Encrypted:	false
SSDEEP:	24:8d1hpunQWwh82lYSKw3nGmKEVam+T3ZyJ3Vqk3QGGJLglAYmgO/3pKVZ:MitvnLjmKEwm+0J34bxJLPYQhKVZ
MD5:	614D19C74741EC29023F7E0659427616
SHA1:	7B6877B0F52E05EBA307B7286E15A968ACE3B655
SHA-256:	8B2F453D57F98AE67A6D75D62EE51FB147CEC72D2269A04D136EC8D1941BF273
SHA-512:	DDA261B5F29D9AACE8EE50F972D0BFC6E8CEE931F821AE49A138005B90A3604844BD7D395F27868CEFDC338ED1F5EF489CA1135CE388ED4A68C927EC3E301149
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................8....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:6B9AAC0407D611E19C25F4BCE5661907" xmpMM:InstanceID="xmp.iid:6B9AAC0307D611E19C25F4BCE5661907" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:335D0C2BD307E11191718D0074A5BB52" stRef:documentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Qwz.....IDATx..m.. ..{....o_...Y.0V:V..9.....w.6H..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1807
Entropy (8bit):	7.846296955938726
Encrypted:	false
SSDEEP:	24:CF3bZsHee3CVbHVlVlavO5/G/IfalS7M3bwN3V2gZlQOq2ycIWuefcBBgrLNyH4:CF3bZsv3C9HVUmYplS7UkN3wgnQOVf3z
MD5:	61C7475267F441933B113A755CB74FA8
SHA1:	978077C650061F0C0BC5B5D13DBE1944132CBE56
SHA-256:	87693202FD266AED4EAC9E4405EE19AF61242AD1003E9A3A1DCE60354D7E8DDC
SHA-512:	00C9038B5DDC1656B1B5EC09F80169E273D48BBFDF411E4907A919C7B81ED8EA2C8A1858D4E5463836C4E708AC84111607322C951C16BB540A5F46E4A72CA335
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<.....IDATX....lU...?......{..b)".Ag..,d.!n85t.[tn..`.d..Q...K.%.7.G.f.@.D3...q.e.0.s..(.).. .......?.y..=..m 1...{..}...<..y.s^...@<..Ov...Z...p8l.j.2..lk3.1..h..w.bK___..2.P^^.......u+.).)..Bi..]..^j'mM9..)9.....R...U&z> y..b....7.x<>/;'.._......,...>.......3.&....y".....7f.........y%R9H."..T.....z.....sQ..H..XR;>..gp.e.b.'.....X..e...R....R....TN...p...sB....:...rU<._.Pz.Xy......`.%1.."h.E;...r.{..W.2...(.."...J;...y.....h..EY8++...U...;..Bj.Xn6.}.)...:u..;..0#...~..u......[.9..yo`..c..1....AJ...Bil..).na.[j...;s.3.z..4./`Qu....#..7.-.(...-o.....TN.....4...^~...B9..y.......w}.3.......b.\|...x.....L....-4BiOI.....NR..aym.....y......[.R^....dx.....'/........D.r...<.m1.By....\#........+.o...F.l.u.}.I~r.j.V,....h..'3...c..Mz/..t.,....1..x?Kj......Y......\|.....<..Z....n~..Cs.r...L....y.}.Wx.....N.mpd.........x.7.&;..`4)y............rAz.pC..7

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 47, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	828
Entropy (8bit):	7.6152199453865315
Encrypted:	false
SSDEEP:	24:pQFzTNZnwKSZTg+irervixbDjonlGyrW70yM0:pQFzTN5w2qinjylJW60
MD5:	B251170307BCB724AC5B4E97482DC6ED
SHA1:	910E491867242AE45AC7E3E670F8F3911CCD23CA
SHA-256:	84DB4592C7E89984D8AE40F81B779D97B6BB55D4741BBA4329033EC4F854C1F1
SHA-512:	2D3979F69F666572D54E65B2091D07787440C4FCD7775B702BA2DE9F2BD55776001E235E4C757B7322F2B41995749332FE3209D63171444F212D58EE68645CC4
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/btnPrevious.png
Preview:	.PNG........IHDR...9.../.....Y.b.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?hZA...i.5..ZBm.C.X..v.PZ..J.....M.A]2Dpi.. . 8.X..C..R..1C....bjIk.UJR.....RHK...{...]n..}....y..F#.?.8.f.....6./.mBi...n.?.k\|......x.<...m.:..Y@.......4.W......o#..=...x....">N+)...@l..RJ.H..N3...q.@.!65G.id..D.9.(.4..y..D"....U..c..M..{.F....B..~..V..C...Z....B..d......,..(.....h4.V.h.%....M$..T....B...N.s&..>.h4.D.r.3&f.f.....") 3.:??....O.Z..''A .V.T.X\|...b...!-..d.TZ4..z.Vr..&..\.\~h4.g...B&.I..l...F....T..zC..N....L...-$V...w8..V..#[H.Z...@_...].BbU...n...v....kss..r.^.z.....~@..!}ooo_.V.eq...;p.\|..d.....Z....`p [H.T.XYY...d.......`07..G...Z[[....uX..4..@......Z*.$[H....~..k....$.-F![$.[.Bn.@.b.]..;8n.H.aW..\|..&.'..X.....;V..~0w.6tT."5.{.~..:;9......0.c.UtT.?._...3...'tB..o...../.......IEND.B`.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	7.685576596405306
Encrypted:	false
SSDEEP:	24:CF3XxnhxU04w/jwC/CNRzbunQM54rbfJ8pL2ruQJeSPOaYyt1VN:CF3XxhxUFW5KjunQGJqrXXPOa3bN
MD5:	BA31C50CAE5AEC9F5CD01F92B8E899CE
SHA1:	078C16019A87B01FD4A6A43830D2AA72E90128CB
SHA-256:	3EE4A8758E17C70BBFC805DF67CD734C7CE15465AD853D52704E2274B29D120B
SHA-512:	0F0F914D39DBBF884F4BE73143D637A3B15ECFF535309DFA7FE9F1F049CCD4950F44B31C9B184B0AC4153D3B8774B75092DFFF6A35B3CE81C2DF88EFF97C3D57
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<.....IDATX..WKo.D...n;..$.,N...Z)..0 `..q.=....H\.i...H......{....H.8,'...dB...... ...LHI%[]...>W.......0.....1...../.=yRd;.ND.....{"...h...#",,\...676..kk.ss.`.Ak..J.B[.^..Z.....M.^O.J.?8.........w?.]ZZ.0.Y........6.nr..66......o..<,.q.(..8....V..)g.o....4M'....f.q..s"...n...DX.......].J).l6!..$..y0.,s.9..P.&I.(.`.......0ND.._..N..N.SX.... ..(.y...@..1.L..=M.!..u.<.+....!...6.....Y...)t......t.!...E...I{..Cp..Qy.M.....J/.........iDB.L};3%0..x..!.w....$...........0jJ%._..<.I..fz.....n.)......S..r@k..`.@......O.....h(!.....>.w....9X.7....\|...dY:.`;.,....p...B.X.e-.....Z.C..6..^gk>..ne.3.k..y..uA9e(w.px...h......C..G...!r.j..G.fn......~..............y........P....RB.TD.8s.....u..s.8......-..0.....~.9..1.....0..........[u4>...h....Z..d.E:V..P..:g.;... "lm.......B4.s.O...4..H..$..B..W.>p.N.\|.K...8.{r..(.......v....p..8.5..ca.V.z\.>3.H\.H)...g.`7.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1358
Entropy (8bit):	6.747755888912706
Encrypted:	false
SSDEEP:	24:L1hpunQWwh82lYSKw86OftV1OWT34yJ3V7P3YGT/m/4Myusr4/DAtQaF1:xitvnLZPft6WfJ3Vgu/m/4LusMbAe01
MD5:	B903C8C15DFF677B7B3DFD042FE8D860
SHA1:	C0B4DF8748071DD78C9715C3C3A3AB72A6D914BC
SHA-256:	75B7BB1E52AE9D0A7EE3647E3C840AA5B89135B6125BADB2D55280504488072A
SHA-512:	13137CDB98776338682579C1193576FDE90714DBEAF8EDC3B055AFEA4EA2FA10CB291759901B5BAC8E186408B44229C2ADBF2B7EE28E14A99F906591BFF5455E
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/sprite_next.png
Preview:	.PNG........IHDR.............?.~.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:275503383E8511E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:275503373E8511E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118BF2F6B511368090" stRef:documentID="xmp.did:07801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.F=....~IDATx..1k.@...$..!U0S3.F.B..._..@..N....B6.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	4343
Entropy (8bit):	6.344935543526069
Encrypted:	false
SSDEEP:	48:SMh0gwLbaQk2FRC2LfwIL7qdtfYdThdkxGtCkSK:SM6gwfkERzfwQqPyThOU5
MD5:	8F6C7D5D6A2A249D88EEB14D0A31A784
SHA1:	719966F9DE3ED24B90979D615D96253070B9AE87
SHA-256:	086B161AEDD221E0A3FD1889023135B9223664F5CC6491C8649073618C6DA37A
SHA-512:	0A1020227B2A40C991E94D16AA7C8999CA3B81AC0AD97121FA16A80136191517BFAFEC2039E7CFEA94B998CF050AE0D58366CB2A64643C1DF9E4A29254227764
Malicious:	false
Reputation:	low
Preview:	GIF89a.......LJL......\|z\|........dbd...............TVT...................LNL......\|~\|........lnl...............\Z\.................................................................................!..NETSCAPE2.0.....!.......,.............0.I4(..F2..F......D.f(r.D...c#.......uB .E.b!)..P.....yC.......C.......B......!...!........t$.Ly..B.j..B......\Q#...WfMOQSUdmZE.HJ.BA.!.......,.........TRT...\|~\|...ljl.......\^\....tvt...........\Z\.........trt......dfd...TVT.........lnl........dbd....\|z\|........................................................................................:...3.2.....(F.f..A.@.O..:Y...D..V>...4QK.Z...@..yB..&..k.C....!'.B...R...."$.#.%.".'.$"....".. xy..x..#.m."....d.......M......&..........BA.!.......,.........TRT......\|~\|ljl.......\^\.......tvt.........\Z\........trt.........dfd......TVT........lnl.........dbd.......\|z\|............................................................................0%.}..A.4.:...d.!P..f.$...$..3..E....D....

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	3405
Entropy (8bit):	7.5994652439199815
Encrypted:	false
SSDEEP:	96:L4ZczcbSO11VidLp0fNKf2jlU12QEH4sJ:OSFEi/0lKf2jugHJ
MD5:	FC6104A3523AF79BF4313E6C54F78D2E
SHA1:	01780F0F88E2380BA5D591AE56B6828D66262AAE
SHA-256:	67E733C7B7C6867C85CDC81E21AD2703AAD224F7C2DFC971189A0660D8264687
SHA-512:	DE59D8FB7A6ACAA269059FA11D38F5898BAFC6D5B4EF560C03F8F4CC76AB7E34B48D48B00E10131C5B1A7D733916646376754D3896FD9AB9192C75D37DA2AC56
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/video-light.jpg
Preview:	......Exif..II*.................Ducky.......d.....mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F1174072068119109F8FE27718D5A" xmpMM:DocumentID="xmp.did:04FC9C640DF811E1B609FE351224DB5B" xmpMM:InstanceID="xmp.iid:04FC9C630DF811E1B609FE351224DB5B" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D1C87E325206811A6138A31EE5F34E6" stRef:documentID="xmp.did:F77F1174072068119109F8FE27718D5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	5.053422324888569
Encrypted:	false
SSDEEP:	48:lZC5l0hRd8VfZnRCIl+ysl9rOFwqFXrmZwHtpE0dSMRxB1yB2LDyE7BGYmAvBdEC:wlKKZRCsslMFFFlUBGD9GJypVd
MD5:	917C4A89E9409E3843EAA2AC6B4DE1FD
SHA1:	8C868812832C32B6059C381B16FD8358D3267EF0
SHA-256:	12689AD65A942CBC0A87943BF7F6678A3C9BB815FECE19834CE1026A3F311FEC
SHA-512:	7E1C338DF76B2FE67270603E07DA117DDE01D8E0DFCBA3C02415C4C0F3EA2A29CDCB10300F1579797AB062E00966A49546CA30493B020539631B1167013F4829
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/custom.css
Preview:	@charset "utf-8";../* CSS Document */......body{.. background-color:#DCDCDC;.. background-image: url("images/background.png");.. background-repeat: repeat-x;.. background-color: rgb(252, 252, 252); .. background-attachment:fixed; ......}.....maxx-theme .nivo-controlNav a:first-child{...margin-left:22px;..}.......teaserShaddow {.. width:90%;...position:absolute;...bottom:-18px;...left:10px;..}.....three-column-teaser .block{...width:190px;...float:left;...margin-right:30px;...margin-left:22px;..}....ul.image_gallery li {.. float:left;.. padding:0px;.. border:1px solid #eee;.. margin: 5px 0 5px 14px; }.....eigener_content p { .. font-size: 14px;.. ..}...eigener_content {.... width: 750px;..}.....entry-content > p{.. max-width:700px;..}....#footer-content .content ul {.. padding: 0px;.. margin: 0px;..}....#footer-content .content_icon ul {.. padding: 0px;.. margin: 0px;..}.........ws-preise td {.. vertical-align: middle !important;..}.........ws-preise td {.. t

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 147, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4227
Entropy (8bit):	7.930811985286809
Encrypted:	false
SSDEEP:	96:Gm6QUqfmeV4pNVM85pIrxxgnPVrLRtzxKqEcLX2blrLtbUF7R/:96ceeVA28HXhLRdxJuxrLO7R/
MD5:	A157EF765CE8288984373A7EBA6B9A23
SHA1:	2CBD5B75FAE344C3A7CD56F6E02039B54778FCAD
SHA-256:	BCAB8884B5A7E525CB27EA39CAB9166DFACE8FF7028D8B311FEC10971944529D
SHA-512:	B56E35812C32BBAC2DFA5BD35E0562ABEEF65D4A52E881C2B9FAF70B921AAB201E6D334C857C2C1D891F6671AD856D6D008A14FCAD884E3787A4A93B84C569CF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/facebook/sprite.png
Preview:	.PNG........IHDR.............B.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx..]}L.W....Z. .......X....Z....".G..Zm..U?Rk....~.&...n..G...v.".b..Pi..Z[Je+..J..({...8..3o>..\.73......s'....E ...-[\......e4.H(.PXY.....+PNA...I.....E......grD.._C9.d.......>..H.D"....#.(..~...yD.0..~..#B`.........}....g...x.hhh.C.2............"...]..t......b7l.0.;^.....<...c.....i.(jJ. B.<.....1....4...4c.A........r..t.6\.....$jJ?%BNN........H.].v..}..U.V....n.Q__.e.....).#......wBg.....LMMM.:....i.E.p.....sss..n.....]s...b...G..jkk.y.....OD@....<{.l...DSS..G..P..."......-........y....... jF?&Bdddp^^^.8..C......UVV..INN..C.h...D(*..b..AAA.\|t.x....M..0.@2..7...O.......O.%K..~..M.SWZZZ1l.-...)..7.F.wdffzV.\y..._L~.WJ.........}.....; .8@M..y.5...s.Gp..p...S.:....P.)j^...$.o\.......x..qj^. ..q..ny<...{.......J9.J...@g.g1.hh ......N(..9..T5....)(.&..1g.e..h.\.F..7....\g..R...X$...A..._..Ox.J5..<..m.\........y.;nK].....u.7~[mg.......o..#..h........cY...9Z.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.9404747322014675
Encrypted:	false
SSDEEP:	96:oHx1VfO3aV9LrMgeM+gKAUkDvjAnAXhVrZPy/dzkjP:gI3azLrMgevuVbAAXhVr5yVIP
MD5:	F803A853E7FFFEA2E1ECD1FBAAC39C93
SHA1:	46D8E46C1F31D880ED0D951B9F5350242025788C
SHA-256:	4994FF524EB423704C956CD9469889825A4E704FA5A601CBF76EECB07FE4A838
SHA-512:	383088863111087659DDE28E32D044746E05EB97C6A1D7A8C266744154E568EFDB801C64373AAF20687B60CB0EFB3061C7A19B8FA21BEF0A1B0173C799B67717
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/radiofx_front_01.png
Preview:	.PNG........IHDR...<...<.....:..r...{IDATh..[.].Y..u..s.sf.xl..;7.M..%m...Q.......@...$.A.ABB.C..R.x...@....VM(QH.:Q.N.'ib..{<.s.u.a.=...4."..^{.........._[...P......\|......;.w....p....{...~O.8`}+...:D..TUE...!v3p.G..OtTJ.cuu....{...}.'.".".5.A.5UU.u.:.5.{..)..=.sm...f..../.;./....x.....v9s........;.v$....H.z.....}....U..+.......[...cT.QZ..:.W.%;H;].^^oj..8.Z....z.<^....'qL.*\|.h..<2$....{.!p....o....q...^...K...X..%Jg.......xD...!.........qB..A..B.c:.3.L../...z.`4..c~..x.m.......f......,."=.n...{.c.....Sk...<.R.....z.._k....9.r.E.A@Q..8...dB.. .!....Y.,.....>.^{.5.$!N...e...<.@H..Xc.Jn7..$&..]k.....S.a#..9;..G..\|.3.<y..s..d.7...>...A....#G...I..j6.0.0.Nq.$.RJ.wL&.Q..h4.....m&..Q..BJ.o.9....f.t..a......\|..<...$P...V..V...BH....t..v.<W4b.W.5Nb..A.A....8Nh'.J)...@.=G..........s`_....~..(@....9.....&.2.s.J.).Z.sx.p..i.-J....&.@+lY.D.;&X.._..Q./.....>.....~{...W.........V.A..E!.2(.......U7ht.1..8..C....!.k.!J.Bc.BkU..9.?.<..I.....xo{.Q...L6

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1493
Entropy (8bit):	7.0585085663684906
Encrypted:	false
SSDEEP:	24:s1hpunQWwjx82lY2T32HEVOag8yJ3V2AGNn7VOv3ocUiZzOQda4TVDqRrOH:SitNn2VQvJ3HmnhOvxrRXF1
MD5:	E37020BB94FDA837BEC5B5F96F048CF1
SHA1:	0D408CD0660F4D88F7BE1821F55CB2DF273392E3
SHA-256:	4FD7E32566D03DE28EF1D6CB12667F535282CDE584867E25B44B2B98E9A74C8C
SHA-512:	19E199E6C25C8B5D0EBB67FBBB7CD58586FE40BF122563C7C19691440C23D07E54BC2F00FC30514717DC162BEA7C867FF9ADCBCE21C1971E6BB2F8B70A715C81
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/top-full-width-bg.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:072A78F3F73B11E0B861FA327851256C" xmpMM:DocumentID="xmp.did:072A78F4F73B11E0B861FA327851256C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:072A78F1F73B11E0B861FA327851256C" stRef:documentID="xmp.did:072A78F2F73B11E0B861FA327851256C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.[.....KIDATx..X.n.1..)..q/..v.GlH..6i=.j.$.`.j.G..7Y\|^./...l.@.....em.*..y>[.A...v.\|n.O._..s.GA......Fs.(0P.........

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.141643219073113
Encrypted:	false
SSDEEP:	48:HJzvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:HJDYJndGU7nyp1RXplkHdAiv6
MD5:	4297900AE2D9D0C4EB00D1C15462FB19
SHA1:	2E0EDDEA4A764BA0A1F9903DB38542A795547F3C
SHA-256:	CCD39B8BA77B46E92151135AC4749D1FA2E03FB5BC30B475C9CA11B8C95EF64E
SHA-512:	0E5B6ED82D692A88D619D6C36C1AEA902FFBDD329029FBC99576EDBC69DC3D4D52A63E745225BB9896CA94D4F19B8322DDFBAEBDBEA6C5596234206CF9CFE4B4
Malicious:	false
Reputation:	low
Preview:	GIF89a.......222...XXX555JJJpppCCC...]]]...PPPwwwccc;;;......jjj.............................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 74, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	7.9346947969990556
Encrypted:	false
SSDEEP:	96:ezQPXM1Dx6S3J6UAkyHiA9uoi3MICkTaxStsAtkUX62UBlvj6S8fAlIM:e8PXMFxp6hFCAQoi37ZtsqX6XBN2fOIM
MD5:	F8CF7921DA6BBF7AC6602261370ECA19
SHA1:	FA81C5C33313A5DA72805B3DAC36484CFA2F7A4D
SHA-256:	2E27050336C12E7AFDD957A60B7C8CB77E91A276635CFCC3F4162E1E50D67C80
SHA-512:	5D8AADEEF15D5BBEF326A55182A860BAE2FDB810AEE756B2EEC57EBAB1F7AFDDE0B827466A8438C814FD7BAE92CAC1854246C426982EABD46C123D23CADF6F5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h...J........\....sBIT....\|.d.....pHYs...;...;..7Gz....tEXtSoftware.www.inkscape.org..<....}IDATx..y.....?.g@.E..%..s...5Q...7..)@....\N4..,...1......5.F..7.....!...........D..........k..gaz.i..>S....[]..z..}...b),"2..:02\|m.,.^...UU?-.....O V.........tR.m.,U.S\|.,.K_%Qn...9.x....`W.Q..ID...3...W.-.. "..36....j}!..X,....."".0-..z`f..N+.K...B...CD.A`\..\|....+....b..l.t.....\....~T.;.......3.+..C.h.b.T.V.{F!E....X,....QH..FD....b..X.....lo`..Y,.>....\|.m......b..X........jk..Y,.>....B.m.X@[.......3..0.......c.X*.+.= ........W.....b. .@..U].\.....W.....RAX.....W....{..`..-.K.6YR....?..vRu-p1p...`.X.`.......L............x..WU_/.....O`.....`...Sn_,.K.....b..R. ..b..R.@[,.K/....n.....3.....w....p..............H..-Q...s..""C....#.V.cUm.Je.......\|..k.aXD.....[..:..m.....C.K0..w._.?....,`RZ..q..:....Sg..0....4,.......z...%....7......#..&.iR...J.=`.p..n.("c..J.^Q......~....a...\|..:....E.]-.)`..s~..MU..Ym-h7h...[.K%v..l.4.....x.yT\...`..=....D..&...

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.96004935282409
Encrypted:	false
SSDEEP:	6:NFMH9J6rfTEVMOYzfTEVMgDLc0fCfyqFMKS9J6WMrFEMQILc0qaqFMhN9J6IHehb:N+dI+MOU+MgRUyq+DRMyMQn+hLahVMJq
MD5:	FD5AABAF1070CE27F9C2DE831D96EA27
SHA1:	8C118FB53D7CA376D5EADE6D0CAB690386CAC47D
SHA-256:	B4CE4F3EE137F6558FAEE7FBEEA45C42F7DAB3415B38B0E0CE69A76B9C42214C
SHA-512:	A1BB65C8E60924AB266AA5EAFA3E82C8E600251F1E69E835A989225D2F3CD77ECA28963E670312A09601FA8BAB5E2B8E862C9857C808FDF388F53FAFD42848E2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/init_js.php
Preview:	......var $__AA .= '/home/www/p352676/html/webseite//admin';..var $__AR .= '/admin';..var $__AH.= 'https://www.ritana.de/admin';....var $__FR.= '/home/www/p352676/html/webseite/';..var $__FA.= '';..var $__FH.= 'https://www.ritana.de';....var $__UA .= '/home/www/p352676/html/webseite//uploads';..var $__UR .= '/uploads';..var $__UH .= 'https://www.ritana.de/uploads';............

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4330
Entropy (8bit):	5.249991125252791
Encrypted:	false
SSDEEP:	96:XunS5CDVOV+8VP7GZKo1bEQFgoUnOH7GZKJmGTncPq:XutDUMAP6Ko1ioUOH6KJrnH
MD5:	7F4C86646D7B0AF5D78AA7C2918D12D7
SHA1:	7B671ACA3F0C029A30D3C88AC70D925C9011BEBA
SHA-256:	6E41D02CA5496E13A8941EEA6EFEDA323C0955E977E0078D87F3C6857145730B
SHA-512:	D4E534FC29885C0BF91A127EBEA0E4025943E1B2E30AF126D2100F58CCE64AE942DE923D7B78E9E2ED1C2726027390C377CF930DF5D7591602F97FA76A6FDA34
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/css3.css
Preview:	@charset "utf-8";../* CSS Document /..::selection {...background: #3faba9; / Safari /...color:#FFF;...text-shadow:1px 1px 0px rgba(0,0,0,0.3);...}..::-moz-selection {...background: #3faba9; / Mozilla /...color:#FFF;...text-shadow:1px 1px 0px rgba(0,0,0,0.3);...}...maxx-theme .nivo-controlNav a,ul.simple-drop-down-menu li,ul.simple-drop-down-menu li a{.../transition:0.3s linear;...-moz-transition:0.3s linear;...-webkit-transition:0.3s linear;/..}..input[type='text'],input[type='password'],input.input-field, textarea{...background:#FFF url(../images/text-field-bg.png) top repeat-x;...background: -moz-linear-gradient(top, #f1f1f1 0%, #ffffff 100%); / FF3.6+ /...background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,#f1f1f1), color-stop(100%,#ffffff)); / Chrome,Safari4+ /...background: -webkit-linear-gradient(top, #f1f1f1 0%,#ffffff 100%); / Chrome10+,Safari5.1+ /...background: -o-linear-gradient(top, #f1f1f1 0%,#ffffff 100%); / Opera 11.10+ */...background

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.425096430213049
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtBdzeD9hjrf+Feup:6v/lhPUujnDspBkJ1r7up
MD5:	2F2D883AB9986E7EAA9F1CBA98E2BBAF
SHA1:	1EA305FA19E1071DEC6BC59BFE772330FA1025F9
SHA-256:	0BDAC66EFBB11777D972F6A5211490E346D4D82776184DDF7C8040894E1E3A66
SHA-512:	41FFB4F859443C840E999616BD02C7B40374AA7C2F0BFEC2E08417B43AA182A3ED586BA4170D47766E018F8CEA610FFBE11DFEEDD6F4F4497E26CC793795E49F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...$IDATx.bd``..@E..@e0j.....8j.P1. ..:...o.2....IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 47, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	845
Entropy (8bit):	7.638114232060233
Encrypted:	false
SSDEEP:	24:pQUmxiyVaGyqPG6peYx/uiYBlAwdLBj4To7Ytxz:pQ1xVVa0np5/1qdLBjuo7a
MD5:	B8D4BF8440AAE57321064ECAF2EFEA7E
SHA1:	10F709273C5CA5631DF2E676F46EB1623B433B7F
SHA-256:	FF251ACA3496A2C0CE25A4B05A619A61D5A4867FB7165AE816E202CDE2103B4F
SHA-512:	2142C9E4E9FE7EC135CD8247D44B309DF777F76958BDDE9339C1DDEB5F104FFF5E4B991634414E6A7EBA9B0724306B2A2E5E468BB8B87484FF8DD154488C3178
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9.../.....Y.b.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?h.Q...H$.....j....... ....3t06..A]..2....H..!.l.....H.D..Z2:TJ.. .W..m.$.&^..9!-.........}....~..(t.d`...X....JM.Wp............:g..x.\|..G;.5..N@..O..H\|j.7.[.@..w...........%...y..<.!...$-Mr....W.Q.A.q...9...q!.Z.B.@.H.rT.......n..R...q9...........n.....I4.L&.\|>...5.....h>t.\....:.....p\%..K...F..i....m........Y.B1...<.0.T.K\$[R....3&.i.XH,.J5.L&.LLL....R......F.q.XH,.F3...1c0......j.....#.N7D,$.^...--...,..E..I,d.X..$^.T....iz.b..K.....O.\....\|>.@..R.V.....\.!2...j..j}..fk.I.).zz.....'.g.....`.].d2{D.Z.z....W..>z..h4.ggg.D.&.h>.y<..X.H..G..d.....H...+.,.6...Z0..#..+....o!...H.o.}..W.=./xc..$....B^WZ.....m.Bn....@{...p...y.N.c..w..m!9t..H....+h.9.\|.....D..#...G\....uo...........W..[\....\|.....Q.]......3..:I......IEND.B`.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 50 x 33
Category:	dropped
Size (bytes):	227
Entropy (8bit):	5.864307874231774
Encrypted:	false
SSDEEP:	6:uK3cFfj0dwzifNlalu/V6UWu6SE0FBF9KJjqnmotEle:1S06zCN//M+0A4+nmo2E
MD5:	ED52DB277173876860B62071785A2177
SHA1:	810FAFA6CB3A32746DB344EBB900BB0748BB0FCB
SHA-256:	9468BFE77BB8540573A06E0E31B0577520CB5C12C575FDEA39076A43C5764ECB
SHA-512:	B9A969B00E205430D3D835144F182C186493C512E6E06203DAEA1B91C4FB95ADFA0FF18682611E8293CC66EFA74F6DAB068FC63A94F194817D57E5457514D715
Malicious:	false
Reputation:	low
Preview:	GIF89a2.!..........iii{{{...000...ZZZ......333......!!!...............HHH......rrr...........................!.......,....2.!...` .di.h..l.p,.tm.x..\|..9....H..bK........x...)5.X`K.mb.......\|.. .2...0.i..?.%.I............!.;

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	379
Entropy (8bit):	4.96004935282409
Encrypted:	false
SSDEEP:	6:NFMH9J6rfTEVMOYzfTEVMgDLc0fCfyqFMKS9J6WMrFEMQILc0qaqFMhN9J6IHehb:N+dI+MOU+MgRUyq+DRMyMQn+hLahVMJq
MD5:	FD5AABAF1070CE27F9C2DE831D96EA27
SHA1:	8C118FB53D7CA376D5EADE6D0CAB690386CAC47D
SHA-256:	B4CE4F3EE137F6558FAEE7FBEEA45C42F7DAB3415B38B0E0CE69A76B9C42214C
SHA-512:	A1BB65C8E60924AB266AA5EAFA3E82C8E600251F1E69E835A989225D2F3CD77ECA28963E670312A09601FA8BAB5E2B8E862C9857C808FDF388F53FAFD42848E2
Malicious:	false
Reputation:	low
Preview:	......var $__AA .= '/home/www/p352676/html/webseite//admin';..var $__AR .= '/admin';..var $__AH.= 'https://www.ritana.de/admin';....var $__FR.= '/home/www/p352676/html/webseite/';..var $__FA.= '';..var $__FH.= 'https://www.ritana.de';....var $__UA .= '/home/www/p352676/html/webseite//uploads';..var $__UR .= '/uploads';..var $__UH .= 'https://www.ritana.de/uploads';............

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	841
Entropy (8bit):	5.288771627179966
Encrypted:	false
SSDEEP:	24:1FRZQ7X2SBloG7p9WsscUbwsqai5hsmfMmpuEGVTe:XkTokyjcUEsG5p7MK
MD5:	2A8594A62D92D2397DA89900EA357D47
SHA1:	7A620CBA6A1CF17069E0A7146CDF14322D325F09
SHA-256:	42441D5448DBB2CD53BD7102F46AB7729ED8E501E69C0A996036AD0312F8F000
SHA-512:	69C415AE80511A5931673E49E768871E316B91314A76653F3C51C32D0FEE540D07121A5FA98C148DDB71FB617B98CE67875D52B17114ADE50766AB2728702341
Malicious:	false
Reputation:	low
Preview:	//Cufon Replacement....// var fontName = 'TitilliumText25L';..var fontName = 'Yanone Kaffeesatz';....Cufon('#body-content h1,#body-content h2,#body-content h3,#body-content h4,#body-content h5,#body-content h6,.comment-heading a', {..fontFamily: fontName,..textShadow: '0px 1px 0px #FFF'..});......Cufon('#body-content h1.first-word', {..fontFamily: fontName,..color: '-linear-gradient(#7f7f7f, 0.55=#717171,0.56=#535353, #5b5b5b)',..textShadow: '0px 1px 0px #FFF'..});....Cufon('#body-content h1.first-word strong,#error-404 h1', {..fontFamily: fontName,..fontWeight:'bold',..color: '-linear-gradient(#3faba9, 0.55=#3faba9,0.56=#3faba9,#3faba9 )',..textShadow: '0px 1px 0px #FFF'..});....Cufon('#footer-content h3', {..fontFamily: fontName,..textShadow: '0px 1px 0px #000'....});....Cufon.replace(".nivo-caption h1",{fontFamily: fontName});

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2910
Entropy (8bit):	7.903879985147939
Encrypted:	false
SSDEEP:	48:mNyDuPXbA1SKMWFftJLFKYlTGNPlYrqBGu5/h/9FKJofa2jUUJ7RmZhIDRi43hEy:mNvj6SetJjGkrqBh5Z/90of7juhL43hz
MD5:	630563EAF606C623E50816F5345937D1
SHA1:	241E57A64C06090667C2AFBDD74EA1A2C0198C20
SHA-256:	2D1C130FC7E92BF1348AEEACC5CB0B42107631AE305BE12649C6A6DD96997BE7
SHA-512:	CC681AC68993F163AF23B994D624C9450DC3FB54196CCBA779BB6220FEEA5CE1C88DA4DE5815CBC4254A29B283965D137C87CD31EA18E2AC747418BBFF9B4C39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...%IDATh..[M....~..........r..D8....''..\.H.(... ?!..p.R....".......K8D.H,.....e?...tw.9TW.[..3...QJ.....z.....5.9.........{.....0>\|....H.....3/...B}?CP...@y%.h....hU.%U...#..e.R.>.q....V..p...LS...m.{... .CJe.....D.........x...()...H%...r....@U;..T.\|~..E..uv..P...Nk..#......!.........gK.V.K.}x`..`.a.p7...'....H!.....`..@....:.}."..{N.\|.q.-.c(.......=v.^.f..k..........L.^G.a.T...0pU4n........N....T.y8....$C.$..}X..N.HI.S....u.vf...S{.(..^.0......To.4p`i.F.HG.r.L.{g.......Y..a...QR..K......i....4Q....E...\|.x0}..8U.^#.IM1T.uK..4D....\... 1...$BV.\|.!......7."..pJ.F..8Y`6v).`.M..R/N..0.u.....E.MS.U..V..,6K.I....*t..?....R&..]8.=6e .ee.s:..VAOv..m.X$W....HL.qL...........%.a..7........<QYH...x....A.W.`..C.f6<..4.\b~.U.r......\....F....>.lX../.r.4TeZ..2.. .P.....NPY..x.Z._\|y..6...1o.(..d;.fY.s<.Q."Ua.P..T>Q......m.....\..A+@+.h..5.RPJ.K?.O........W.5...O..X..pg....%`...U.Wm...Q....G...(.X......;;...>......TE...\...m.v...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64907), with CRLF line terminators
Category:	dropped
Size (bytes):	167674
Entropy (8bit):	4.024103501328885
Encrypted:	false
SSDEEP:	1536:VxnsrFaj0O8BGuL1GzVfCp96qwQPkSsKJrYOKHnLXDJBwg3XzT0wDnsyY9PqeYTe:VxnsrhKMVPJkbDnsygqNi
MD5:	EAA7DCAECA1E197515780899B7DDA851
SHA1:	CA060EE7EE6DB27E5D99D047787AA37E1A54C6E9
SHA-256:	1A57D54F31A3358CC081A0A7331225F6B353F98975391A2EAE9D2553B25825C5
SHA-512:	A07A612A5BA5C8112B22925C448444B1F787A8B52F9355D414224A0A0EA397B7974B6FD0C75BC62FA77D710F75042A411E4FE886A40F482E255C7F1542EBEBC3
Malicious:	false
Reputation:	low
Preview:	/!.. The following copyright notice may not be removed under any circumstances... * .. * Copyright:.. * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All.. * rights reserved... * .. * Full name:.. * TitilliumText25L-250wt.. * .. * Description:.. * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All.. * rights reserved... * .. * Manufacturer:.. * Accademia di Belle Arti di Urbino and others... * .. * Designer:.. * Accademia di Belle Arti di Urbino and others.. * .. * Vendor URL:.. * www.campivisivi.net.. * .. * License information:.. * http://scripts.sil.org/OFL.. */..Cufon.registerFont({"w":530,"face":{"font-family":"TitilliumText25L","font-weight":300,"font-stretch":"normal","units-per-em":"1000","panose-1":"2 0 0 0 0 0 0 0 0 0","ascent":"750","descent":"-250","x-height":"10","bbox":"-91 -1081 1000 278","underline-thickness":"30","underline-position":"-80","stemh":"54","stemv":"60","unicode-range":"U+0020-U+2265"},"glyphs":{" ":{"

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.141643219073113
Encrypted:	false
SSDEEP:	48:HJzvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:HJDYJndGU7nyp1RXplkHdAiv6
MD5:	4297900AE2D9D0C4EB00D1C15462FB19
SHA1:	2E0EDDEA4A764BA0A1F9903DB38542A795547F3C
SHA-256:	CCD39B8BA77B46E92151135AC4749D1FA2E03FB5BC30B475C9CA11B8C95EF64E
SHA-512:	0E5B6ED82D692A88D619D6C36C1AEA902FFBDD329029FBC99576EDBC69DC3D4D52A63E745225BB9896CA94D4F19B8322DDFBAEBDBEA6C5596234206CF9CFE4B4
Malicious:	false
Reputation:	low
Preview:	GIF89a.......222...XXX555JJJpppCCC...]]]...PPPwwwccc;;;......jjj.............................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	341389
Entropy (8bit):	7.98850102990836
Encrypted:	false
SSDEEP:	6144:Qmi3ekZGNDckgLFOgOCEAWIiv1SIAwiePTOOobhRoFDq7D8nzco1oy0HNw34GQAX:Q3ekGBckgC/Al21vfih/hiFD0QLoyANG
MD5:	F444BC349218AEBADE31072B1E464682
SHA1:	1DA2786DE6B0280FB2340EA16A389F7474B51F35
SHA-256:	B7C19E2A89D4B81316F05B1A46F97716BB0154E2C99B158131487AEBFEA403B2
SHA-512:	ED79772326D64F023D9EA2AD4481B71247907DBED64B33CE8109D979185EC9921B6D22B82BCE477ACB64D51D4B58891095267D254E4A8C738F99E75995CA44B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r.....:K......sBIT....\|.d.....pHYs..'...'.....f....tEXtSoftware.www.inkscape.org..<... .IDATx..g...}...0i......,..T.(Q..uW...C9...N..J...e.V.;.w.........GWI.e.J..MQ"H*.b&....x..M3......... .H.O......t..............m[....x<.....x<?..=zT.m..x.+v...x<.....x<....\.w....\|7...x<.....x<.s........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(..........c..Z{....x<..............x<..G.....n....x<.....\v.e...^.{<.....#.djj.\|7...x<...,...y}.....x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<....g..x<........R.!$R.@t....(..D1w-\w..YC.60yF..H!... ...E1.V.@..s.g-RH..Xkh.)QR"JJ8..^.._.-..n..E..{.iZ...J.Y+.I_.;

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	256436
Entropy (8bit):	7.989592117320458
Encrypted:	false
SSDEEP:	6144:oROSlP2tM1lvC4jHoZm44d1n9mlg5QcIwuFWOgVtsCkQEdx:4OStcHC344d1n9mi5JIwuF2V+CV+
MD5:	24AE9752226F8F0E957E1F5B45075A11
SHA1:	5FC7381D111B7877407A0C980C0A69BC0FFA4662
SHA-256:	B468A7D4C21EE69B454D33618FCA723B62C3B934AF5E0775632A1AF6F90AE704
SHA-512:	E1A0E36AE09E27ADF5FF6444CA4139E74914090568112FDECF3A566B59BFDBF1FD101F810CDA88389777B7971410FF0D5CCC042B2F2755A5A53F534E3E32422D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r.....:K......sBIT....\|.d.....pHYs..%!..%!...G.....tEXtSoftware.www.inkscape.org..<... .IDATx..y...Y&...^.}.-.e[.c.vb.N...0!$a...}..}.......I..1\|.00.@ ....!d!..o..X..E.%k_.....k9....[.}e..ut..O......Vu..}..=.'>..+V.H...............-.......+q.UWmz.................\|...o.R..ppppppppppppppx!................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#..................vpppppppppppp8'................9...n.......:.,....n........../.5..vpppppx..o.>4.............'N...._..:........<C).U.V...pppppp.7...E....vpppppppppppp8'................9.G................8..............pN..`.............s...;888888888888..p...............#.................

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1648
Entropy (8bit):	7.833178636678629
Encrypted:	false
SSDEEP:	24:C1c1fa5gixWyi5Ea91gKseZXDA5GGOOXAPRfl6FYreuCAyvJ/dyryTEHf35L53Lw:C1c0LWykBtFDA5IOXApfEFY1CAyvlkcd
MD5:	AC7812F2C18D2CB7B3D43FA8A32504B2
SHA1:	7A030CFA506BD85AE7FAE22432FDA8FECCCA076E
SHA-256:	501A505B450A8F2878951637E6AF588CB44F51ADEE4F154C03156DBB2FA3EEEE
SHA-512:	F5A3EAEE17F62CFCEE04B3A726B22E5FF9C4EBE5A12C0F35033327BB60D005E766F83808DDB10422855BB2D0A51DA6FB6A9C17E63E92E28AA586F10582287A52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........v.V....tEXtSoftware.www.inkscape.org..<.....IDATX..ml.U.....g.SJ;C....N.i-b..d............~..Y..4.a.@..mk...F0..1.a...[.@....n7.B;3m.-...0.N.3.1Q8.dr.......s.\!..@....;UXk+".QUA.&\|..L{9.K).....t&<.h4z.@H)..K7.<..Oo..m._T...C..e.Z..e..S....S{.....W.9.....1.2.N.....-.y..=O.>X.i.......^g....k.SHe\|.d..(.~...Q.J)..f..z.....i ...$'.9s..dH..c.8e..r.o.W.QA.ZV][..F.C...d...t.<.z,.9:6Y.......U ....>. 0..Y{....r...`..0.j...(.....(.g.:.J.......B:NN.x..P..L...d.I.\|5c.$0G.3....a.Y.1G..6....E2....Y.3....OF...}.........L....1.3...D.......L.R..:.aR.(I.1...\|y...o#PS....m....=AaX........q.v...E..........4<x/..kg.'{Y....%...).L..b}+..0.n`.:..Z..z=NR.1M.w<H....vw..n......TW.P..6.....`..U.....I.......6..:L....[.qt..H%U....b^C..i.;y........P..N@`....)...#]..j.....yg.BQh~...`..jU...[.#<.Z.}[..v(......Q..(,...-b.Xc..k.. ..Q..Pq.Z.+I...K.G.....<\|...DJ.k..C.4l..x8.. ..7qh.C.50.LC.yQT...\A......oq...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	136
Entropy (8bit):	5.496651090080585
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtPAkxelRR2kdj07yiY3E5T/lH1p:6v/lhPUujnDspPAkUgG6yiPRVp
MD5:	74BFB933F639E76971CA5DB1AE612011
SHA1:	A4AB4B832B155068C3DF28DC9894B725CAC83228
SHA-256:	2F47A984B0A0F656080DCF3B87CC75D2000344512007B2CBDBDEC790F92C23DB
SHA-512:	640E59DB14069F5922DCFD6A772B491848AC95A6B2F093267C5CB3B065449AB5A96C1C4E238D1F696DC37BFB98F3AB5BD152D86E33921C1DF97B50AF6BB89590
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...*IDATx.b......##c#......`..Q.G..5p...b @........a......IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402), with CRLF line terminators
Category:	downloaded
Size (bytes):	20057
Entropy (8bit):	5.023088021836688
Encrypted:	false
SSDEEP:	192:lLp+wyULYUGx/njSGjb0Y9CSZq+KauSORcT9:iwyULYUy/jSGjbPCSZq+KauSORo
MD5:	80908FFFAA2A657C49AE156EC7A9076C
SHA1:	D570AC52A2AC55D394CED83A0A3AACB5AF547F36
SHA-256:	7F8D4D1950F2AEF63C6704B7B984F4DA4180CA51CF8A6F07C7B9C2C9AC7F1DA6
SHA-512:	3D100C9D806B5A45200E64BB67B9996D8A249E828C8E8FDACDF3457F46AE6346F012F1ACF8EBDDB527EC4ECECD7FEA873C012C0AA61DA39EC590049907956464
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/prettyPhoto.css
Preview:	div.pp_default .pp_top,div.pp_default .pp_top .pp_middle,div.pp_default .pp_top .pp_left,div.pp_default .pp_top .pp_right,div.pp_default .pp_bottom,div.pp_default .pp_bottom .pp_left,div.pp_default .pp_bottom .pp_middle,div.pp_default .pp_bottom .pp_right{height:13px}..div.pp_default .pp_top .pp_left{background:url(../images/prettyPhoto/default/sprite.png) -78px -93px no-repeat}..div.pp_default .pp_top .pp_middle{background:url(../images/prettyPhoto/default/sprite_x.png) top left repeat-x}..div.pp_default .pp_top .pp_right{background:url(../images/prettyPhoto/default/sprite.png) -112px -93px no-repeat}..div.pp_default .pp_content .ppt{color:#f8f8f8}..div.pp_default .pp_content_container .pp_left{background:url(../images/prettyPhoto/default/sprite_y.png) -7px 0 repeat-y;padding-left:13px}..div.pp_default .pp_content_container .pp_right{background:url(../images/prettyPhoto/default/sprite_y.png) top right repeat-y;padding-right:13px}..div.pp_default .pp_next:hover{background:url(../images

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x23, components 3
Category:	dropped
Size (bytes):	2233
Entropy (8bit):	7.260381887215359
Encrypted:	false
SSDEEP:	48:hitNn2VPKJ3iiBch3RcJVwWFRnbqgrR4W:a2awRgbnbqoR4W
MD5:	44098D8EB9C36C9F5B556D4A8AE06F89
SHA1:	1B5D0155F480F7F06FAD3FEA09007A01804C58EA
SHA-256:	4E4EBCB302F86DD0E8987A1B619591B51A78DD499D00A3409A0E47CF5D716673
SHA-512:	7A7EEC7C54F40B4DA0525958300720B27AA0FC7D96B27106905A32ECC43276E3C7D4E48B7333E60C9812E5EE117937F8C77ACC61D1FCC06A60AB71372D1DF0A7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......S.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:2AAADCA0467911E1A571F747923A0B22" xmpMM:DocumentID="xmp.did:2AAADCA1467911E1A571F747923A0B22"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2AAADC9E467911E1A571F747923A0B22" stRef:documentID="xmp.did:2AAADC9F467911E1A571F747923A0B22"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	725
Entropy (8bit):	7.615134656310076
Encrypted:	false
SSDEEP:	12:6v/72rGeI+sGwyF+9Bc5e1Gbdaj/jo2lKBJnsV913fH9WZSXpT87rkf6pJ3N:3Ge/7w895e1AmHuJnopfHvu7ry6pdN
MD5:	709AE837DA392374063D1E937F90797E
SHA1:	C5C69E46328B154AF8856B9168668057AEED87B1
SHA-256:	ABD072C2549041D3D70242E15F561CE56F7F7F016BFA3A01AB4024F62C8E6871
SHA-512:	B0DEDB95ADE96784C32BC23B295292A3AB700795C4EF77229EC1D517DEBFDF07D0771D10A4A5CC8185F99EDF5C57EC6A14FEE2AA9DD3AFBE6BA90EAEAABF3450
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/information.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...wIDATx...k.A...dw..f.jRIR./...-5("..(X.x.o....z...<y..U...K...4.J[...Q..&.....:o.mS/.\|...}..7K. ...5.... 1.."g$.......B;oUj..@&.?@..&.W.Z..1j....'.....9...X`..f._./~..v...S.7....N.$......BP.m.......T..t...l..-..I..>...e....r.a.z...q...\(.7.&....e.+6....o...K.F.....m..".[...i.?]Bfg.....ei.^o.@..A..K.}.....>W...{.g...g.=.. .....\..x...l..;...A.Tl:.....&...sb;...B.P4=.u].5n.iU@T.....j.6.<..$(.D.)..%R{.\.e.tV0..\..[8H.\s....L&!......:2.].V.....e...u.B!...(..kceu....Qu...LMU<.cZ..*u..2\....Q....MW..&.A..._!.".v..f........Od.}i.....sq.V....'.M...E....EF..bGr.;u.H.t.OE...A.......AjC.<2...m.....DYX.d......u0`...B....IEND.B`.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_square/btnPrevious.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 119, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4076
Entropy (8bit):	7.92081405685513
Encrypted:	false
SSDEEP:	96:zPbnMkszLlDyvKd2ivwjS5MdDyMw6FrreYfQ5TS7NFp:zTM7N+v/AwjGqDyM7yYfhx/
MD5:	272462D6F733A5F1723EA87916AFA4F1
SHA1:	80C2A4C6FAFFF09355798DB6E751436E2DE62197
SHA-256:	183773346CA33AD6935E01714AAB0E55D315B72767D3AAA6B51180367826091A
SHA-512:	8BF593B998CAC219A62B595DDECCC5448CFD384B07FC1D34B11C947E4367965D24ED2181609C25FFD24041547D6423F26B355A72F5028614107E55109328822B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......w......\.W....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]ml......@ ..\|..!&..w.F\|.\|....(.... ....J.T%..b..H.$j.R.a!......E cP.I......0N....0..!..3...'.w.{.w.w.J...}gv.g...+x..!.d).}.v..'O.B...2.....(>..!.v...nv..........?.P.....Q......4P9.m..555y3K..aM.(...40...a.e..I.....F.`...y.L........\.....R.Ky... ....i.Va.00.X,>PQ.........O..p.j..'pL...(.M..{....@@.......o...E..$Dv..m.....jQ<.>I.q.B...T.d...[s..1..@.<+g.(....{..;...3I......B;.......L........#...CA......&..D..=...)Z.4h....C.~.O..9......?..R.:.8f.....?W.............a.a.QP...P..\|.......X.....G.....G.y.=..s...G..[.n........x.......?.........\6....x.........x.b...^.p.555..s....].......7n.9s.1c.p!.={..3d.......\|.I....6v..y....r."... ...o.pM..=...p.@8\|.p..O>.... h...s\|....&...?...P.t...yxX/.!.t..l.M\..&x......-[..UTT.U3...l........d..l.5.....`.....0u.TVV...+Vp.M.8.M.4..m._T._...9h...._.p!.......#CL....\w..cP.7..4......K/..Y[[.....gwccc/GS.....g..3x.....\|..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 119, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4076
Entropy (8bit):	7.92081405685513
Encrypted:	false
SSDEEP:	96:zPbnMkszLlDyvKd2ivwjS5MdDyMw6FrreYfQ5TS7NFp:zTM7N+v/AwjGqDyM7yYfhx/
MD5:	272462D6F733A5F1723EA87916AFA4F1
SHA1:	80C2A4C6FAFFF09355798DB6E751436E2DE62197
SHA-256:	183773346CA33AD6935E01714AAB0E55D315B72767D3AAA6B51180367826091A
SHA-512:	8BF593B998CAC219A62B595DDECCC5448CFD384B07FC1D34B11C947E4367965D24ED2181609C25FFD24041547D6423F26B355A72F5028614107E55109328822B
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_rounded/sprite.png
Preview:	.PNG........IHDR.......w......\.W....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]ml......@ ..\|..!&..w.F\|.\|....(.... ....J.T%..b..H.$j.R.a!......E cP.I......0N....0..!..3...'.w.{.w.w.J...}gv.g...+x..!.d).}.v..'O.B...2.....(>..!.v...nv..........?.P.....Q......4P9.m..555y3K..aM.(...40...a.e..I.....F.`...y.L........\.....R.Ky... ....i.Va.00.X,>PQ.........O..p.j..'pL...(.M..{....@@.......o...E..$Dv..m.....jQ<.>I.q.B...T.d...[s..1..@.<+g.(....{..;...3I......B;.......L........#...CA......&..D..=...)Z.4h....C.~.O..9......?..R.:.8f.....?W.............a.a.QP...P..\|.......X.....G.....G.y.=..s...G..[.n........x.......?.........\6....x.........x.b...^.p.555..s....].......7n.9s.1c.p!.={..3d.......\|.I....6v..y....r."... ...o.pM..=...p.@8\|.p..O>.... h...s\|....&...?...P.t...yxX/.!.t..l.M\..&x......-[..UTT.U3...l........d..l.5.....`.....0u.TVV...+Vp.M.8.M.4..m._T._...9h...._.p!.......#CL....\w..cP.7..4......K/..Y[[.....gwccc/GS.....g..3x.....\|..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 415 x 2, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1094
Entropy (8bit):	6.3653730036591565
Encrypted:	false
SSDEEP:	24:8d1hpunQWwjx82lY2T32HEVpFLJFTyJ3VfFyCgFUGps3c:8DitNn2VgJ3dxQs3c
MD5:	34C9F89BDFCAB35BE10B9CC9439BF567
SHA1:	B697709CD7DAC99FF92129AB5A682664AC723A74
SHA-256:	86F0AB96D6477CEAC7E392147CD3A8A2B674FA4DD379D8948EE90BF739CAF588
SHA-512:	E3A5984457157A457FCA6996A40155825D57DB9C46F7F436E5F9AD7C35AAE4F4D8BAD678A2F5501629F4AF86E2653253220C1A76DF0BEF5E19BA3F2B1D7635FC
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/sp-fade.png
Preview:	.PNG........IHDR..............m.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:67A9CA5300A511E18A2AB918BC680A13" xmpMM:DocumentID="xmp.did:67A9CA5400A511E18A2AB918BC680A13"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67A9CA5100A511E18A2AB918BC680A13" stRef:documentID="xmp.did:67A9CA5200A511E18A2AB918BC680A13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..T[..0...O.h.......Ad...D....&..&3..o...=x)W.><....j.xq...w..h.oz...{;.1...{!$ ....0.....3o....sq..Aj..-.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 33, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	7.068903278128782
Encrypted:	false
SSDEEP:	24:Xy1hpunQWwjx82lY2T3gVhHLyJ3V/CsbGowPLctzEOh8x8wgfWFYN65eIdQO7sk8:XwitNn2c2J3hTwPkz5hL85B98
MD5:	8A3E7C798030574D519D3D167A5E6D5D
SHA1:	BB6969321F5D03B674519D1E23787FB92C1879BE
SHA-256:	82DDBF7FD3FD6B045FC6667A94A3DAD1301A1B7572BC9C8003B9DF22D46FB2BA
SHA-512:	B8156B549079C34225CB61CE0284650C45B396DB7381C36AD631F7543201F1931E2B328B3B83FA7B6B992B2DEDC88DC377317861F05DEFB0386641CDBDFAE316
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/default_thumb.png
Preview:	.PNG........IHDR...2...!.......o.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:D3B1BA623E8711E08E6F9312EF314E02" xmpMM:DocumentID="xmp.did:D3B1BA633E8711E08E6F9312EF314E02"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D3B1BA603E8711E08E6F9312EF314E02" stRef:documentID="xmp.did:D3B1BA613E8711E08E6F9312EF314E02"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>J..L...uIDATx..."A.....]q...D<.".}...C...*.....7.C....e;x.?HUdD._.....t:}.........z.z...,...l6.l6..W..b.Z].......

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 119, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	7.925932056289821
Encrypted:	false
SSDEEP:	48:kZ8N/W0s/8WAG7mvLHmgAfUh8K4wiuCgON7DgwoHHaI4841ZHBpUI/BsvnChGkC5:kuNWV/8u7/Ur4XOQ8UPWAKPCUbF
MD5:	45B32C620CFB4A677F9B8C4360A8D3C4
SHA1:	DF13D61FDC19689240D4CC34E1E2F44BAFF4E214
SHA-256:	FB578FF5AB573EFE22A87D63D027F7AFEE1FA949593B1FF2053B490BC845771A
SHA-512:	632B452D83468940231D7C15BC37CF7CD3468634E5E86E3F66CE711E4FEB4D9683130D731F5E3D52FA4F4F0530AD7D2664F66A0C68CCD5C8416A880A8A2925CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......w......\.W....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]{....?{wE^..y......(..-/..WiA1........&MI4.Z.4mI......6. .?L.)....WAk...X^........w.....{g...{...%_fv..w...\|...9w.........+W:..;F.a:.D.{.+....8..D'.v.k....c.}.]1...EW.\.(.5S..Q...m./.....`fI.u....t...YL.2..(9j$.@..........e.b...".Q.Q.Z{. ,...q:,..........$.j ...^......'..V.....t...].T.W.\........`....~.}.M7%./.,j %..g.r..}J.E.7.I...B..T...n..w0.h..,..r....\.t..;w..@..jy..(+...:_v..7.!y.......r..QR..NA...`..%.}...n.....-....Q.!Y?+....{...@8...nCJ9.0..=4X.k....o..$~]5.....a.a..(..Aq`...C9..3V........2..{w6m.4...;Y{{{'...L.<........2.yTn1..-j....4LGt..A..3g...x..~....8...................~...^6x.`..={..gz.....m.....N....V...~...#Fp...(...7.\|.k.(..`..g..[o..+........V....'O.2..<j.........4LDg.8...~...%K.p%B....c..S.N.......i.R..g.}.......d.....b---..O<../....=.....Y.fq...6...>..m._T._...5X.(...2e.......(#CLi..qb.;..`P.7.ji@..O.E..qe...^.z..........l.?~<..k.emmm\|.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	931
Entropy (8bit):	5.8015096818863565
Encrypted:	false
SSDEEP:	24:TB/1hpunQWwjx82lY2T32HEVASyJ3VbrhGb:/itNn2VkJ3Zhu
MD5:	5365886F24E292040479E15100F9D46F
SHA1:	F7B08948BFD8BD9846A571BBB9F201409F8297D9
SHA-256:	B242EA8E6B822ADEC62087C98AEB12EF910CC99DF63D6A847677B0EC376FF556
SHA-512:	48707BBFCC49A425143A9FBFA616652663455A5989F7FF7C01D7E38D253CE9DE52DD1F028352974F579DAB6839B32FAD1115A110231941B221B974CB1448FAF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r..$....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:72FA78F3FD3011E0BA2DB881C1EE6DFF" xmpMM:DocumentID="xmp.did:72FA78F4FD3011E0BA2DB881C1EE6DFF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:72FA78F1FD3011E0BA2DB881C1EE6DFF" stRef:documentID="xmp.did:72FA78F2FD3011E0BA2DB881C1EE6DFF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Z)....IDATx.bd``..b.......1.....?..*.. ....IEND.B`.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 28, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1017
Entropy (8bit):	5.861819166972373
Encrypted:	false
SSDEEP:	24:n01hpunQWwh82lYSKwl8LIEVGYT3ZyJ3VsExqG71:n6itvnLLV0J3Jca1
MD5:	F62FFC68E8EB2A5147DFEAE12ABBAF03
SHA1:	2718A14170155A89D75F612E5261B07961C1E46F
SHA-256:	243B0D572EC737C1931A50A3246E59B3636C4DC7F6D150FB89C9FBBFE5EF185F
SHA-512:	46AFB45F72952EE2BA9F1A236C802266AC1CD6DBEDBFD4B0740907DC812E17A4299E2C4A387EDA3F71A0381DF9E94B3972B8A0AE09AA83DBC1E015260C7C1AFF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/black-btn-bg.png
Preview:	.PNG........IHDR............./?B.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2C8FE46F73A11E0ADFF9AFB3722E0EC" xmpMM:InstanceID="xmp.iid:A2C8FE45F73A11E0ADFF9AFB3722E0EC" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#..s...+IDATx.bLMMeb```...?...............ld>...0.nNB

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	635
Entropy (8bit):	5.100518348326535
Encrypted:	false
SSDEEP:	12:o8NiE1ELm/00Zv/cbs8lwUj0EOyR9/tK78RfrGafCdRkRWFs:o8O2ncbsxQ0v6g8Rf6aqdKgu
MD5:	BD0C85F1AA42D84622FA5E3D4CA9F5A8
SHA1:	2C38AFFB6F6158948ADC817B183FC6AD94997C63
SHA-256:	94E714C50288705C8DB3E30D46862A84D24617046B4ADB8C6245517D174CC879
SHA-512:	3AA19CF203DD22ABF984543CE76A51417D0897261C19055A5C16171F0B7606187E90DEBFAC2E468066998A3D1D6516D49C9EDCD9C0CB064E50B2614FA0471968
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/autocomplete/autocomplete.css
Preview:	#SearchResult..{ width:980px; margin:auto; position:relative; }..#acResultWrapper .{ position:absolute; width:300px; right:5px; top:40px; background:#efefef; z-index:9999; }..#acResult...{ display:none; }..#acResult ul..{ margin:0; padding:0; list-style:none;box-shadow: 5px 5px 0 rgba(0, 0, 0, 0.1);}..#acResult li..{ background:#FBFBFB; border-bottom: 1px solid #F2F2F2; border-top:1px solid #fff; }....#acResult li a..{ font-weight:bold; color:#3faba9; text-decoration:none; display:block; padding:10px 10px 10px 10px; border-bottom:1px solid #fff; }..#acResult li a:hover{ background:#fff; border-right:5px solid #3faba9; }....

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 30, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1015
Entropy (8bit):	5.88374880647534
Encrypted:	false
SSDEEP:	24:XL1hpunQWwh82lYSKwluIEVaYT3ZyJ3VsExqGtXD5:XxitvnLnp0J3JcqD5
MD5:	EF164A719FFB029AFAD7E284CB12E294
SHA1:	994215A81704BDEE66ACEE368D1163EF688330D1
SHA-256:	24C8B982D6368A901F575440BB27AD998E4E8435B53AF29D0C203F2396D71108
SHA-512:	B39D12E91433239B737FE21752D589B644300751D57DE4F9C562B95EBF9A5A6989E796ABFE84D1426571584600F831A5799E1337CD8D2F6EDDADA4D05EFCFAFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2C8FE42F73A11E0ADFF9AFB3722E0EC" xmpMM:InstanceID="xmp.iid:A2C8FE41F73A11E0ADFF9AFB3722E0EC" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.;L....)IDATx.b......?.........41lb...............4.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1084 x 431, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13267
Entropy (8bit):	7.558468708100472
Encrypted:	false
SSDEEP:	384:3chohohohohohohohohohohohohohohohohohohohohohohohohohohohohohohu:3ceeeeeeeeeeeeeeeeeeeeeeeeeeeeeD
MD5:	3D134047BF4AD7A79DDC6294F45531EB
SHA1:	9FCA3D46654CCD326760DB845BA046B93A9B0848
SHA-256:	D4A67F34279C033C0AF343276B094776499C0665CD329FFF2AB7F8182C9B79A3
SHA-512:	ED4AAB5C7A906D54E9FF6B8F96A4D255EC35C20A88565A5E608312F12BD44F8A44C52FC834CC60FFBFDD0BFDD277555D7FE81AD300EF26935629412DA20246AE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/slider-bg.png
Preview:	.PNG........IHDR...<................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:D2FA54F9FA7B11E089BDEEB78990BC67" xmpMM:DocumentID="xmp.did:D2FA54FAFA7B11E089BDEEB78990BC67"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D2FA54F7FA7B11E089BDEEB78990BC67" stRef:documentID="xmp.did:D2FA54F8FA7B11E089BDEEB78990BC67"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>t.YZ..0IIDATx....5Y.......jj.)...../..\. 2.VW.#..p).+_..]..qz.fd............Dd...8qN...{>.H2..x=.z.q"........>.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	7.830198599933574
Encrypted:	false
SSDEEP:	48:5Np8MdRRRI5d+aggj+zXXeVsROhLlvAcg0rI/g1dbQHDlHCRRR3u:7LRRREsa9+usRO9VNOhCRRRe
MD5:	198FDF9954C176D736BB75FB1F5C6602
SHA1:	921CA001C2BFD5AD93C21F296B0D0FE31D337122
SHA-256:	2C811352EBB362020EE1C0F9591DD1B34D0D05D595690BA2A8FE34D240432BA4
SHA-512:	1452C81A4D4245589ADDD1F58AE99803288D5743983048131DA2CABD26778A5AE7D6ABD5259177D9C4A576D9C1CA6782266936E8E3E299E5E0363D110D300791
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....ZIDATx....o........k{...8.s....8...N.$....Z@m.CUQ.J.R......;T@.....P.M.T...p4$......+....{N_.....p.....xvw..j.;.<.VSS...`_...\......D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P.".b.1.....D.. b(..C1...A.P......._.a.G._..\.v8D......./.N..I...#}....#.......m3......uQ.W>......+....s.>~.4g........G...l.d......%. ..,.T...~...g.T;N&.@dA.5.....G..Q._y..m..y..?....83L7..A.v.. PY._..+. ..._4B.9~..;;..../...)........<K.q..vQ..b.f"...M..!.1..G...FH.>.../y.E., .a...j.p.L......zq/......}......WH.:.@....\......k..M.Q..%.e..:..xv7.'N.h..ys(..P}-v4B....#.2..e.....S.v...W..,...I.w1..^..p.cY..\F...k..\|6.....F.`.,.........k...(..A..FB....Fq......,Y.@~.Y.h.Rj.w....k.......3..... T_....;.}C..D.4.j.....F...F..;.8...4Su..... .PO.....Kh.`..D.].P\|.R.~..Y<.\|6.....W.o\?c...z.V..E..b1.h.+..h....H....3>M.W\|.:..C.t..\2I....

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1582
Entropy (8bit):	7.806133070553486
Encrypted:	false
SSDEEP:	48:CvN3ZN6LkZdJLjrgMYsOOhMAFn2YxTP2CxIQBz0QD:OpN6LkZdJXrHBThMqn2GfIdC
MD5:	E5A54A17D4D4AB595069EB24BDDD6748
SHA1:	8AEE213A5ED4BB93850DBD738F88FFDA43F0422A
SHA-256:	3669AFD79468798A18ECCABF55562E687ED4B5663ED4DD8F8B2481ACFB724FC7
SHA-512:	EC8125E9414ECE49634008B4ACFA5CD705167D94464B79EFD157D2C7F4B23D5E3794E76B69EBE80F9898CA5F59ED80D96ABB6BE7E3554F8EE305933659F7065D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........(.D.....tEXtSoftware.www.inkscape.org..<.....IDATX..Yh\U........d.Il.6&M7MZA.$V...R..J..E..D...AD.....E....AP..V.-..[.t..i2.6.d.......3.EP...{......w.=.1..d2..bO.6#.'{.'bQ..N=Yh.z...gG.......L...e.!.J...6.s.m.6.\;.ik...B.T^0..(..Y...^.J.u=...OO.?.W.~..2.yj.L&....}.?.z<.N.5,.FU.)..^.n.\=_..w.gN.%z..Y..Hcs.....[.j......<\.;.R#.FJ?k..+..\|=.Y..%[B...l.e.l.i5a.....N...0.f.).U.g.J.p...!u....<.."..j].4...j..Tw.V\..eu]..CU;.S.Wj2gs.R.H.c..n..8.%...u..&^m.c.x.yAv&...t......cp....H.......q&W`z.].}K..e..EkIU....J...t..P..<...z.v.*...8....GCN.w'..a.1...NF...,^.z#J{...1..b";..G.h.^..Y..+U.r...p..R.c..<.P!D....bu7..^..WjV,M.a..Y.u.z.......e. ...c(...>..Lc........X..`:.2~.,..A..........\.t{...-..'..P/O.w..<.q...........G2.U.X...._..f6.2..\...@A(.\|.3.....4..3[.\|.b.l\..>....}Tp5.W..EoW[....I\.\|...96=i.}.......eh..._.'...39.....@c.a...q@....".......h..y..3..Z........ ..^..`l..j....D...(..1.H.r.}=.A.w

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.598793808013235
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtVdYhpw5iRHtPIp7u8fldp:6v/lhPUujnDspVu/w8R+VDdp
MD5:	A6FAB9B4551A6274D71703B610EB6ABD
SHA1:	1FB515AE27F5202449663F9BE6B5EA7094A4DAD0
SHA-256:	565ED0E8265B719692EFF0E31356ECE9C4E4B9DDD753B0858E0C2277668D184D
SHA-512:	33372D0B150E86CC019EAE74C1D9A601176050FB6AEA5E78043F0E0AF788F181BDBA5E7914408061E86D369055677CD45316F5F529D622CD6DD1A2CE942DFFCF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...0IDATx.b....T.L.T.....H.`.w..j.......2j...@....h..........IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 1244, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	211124
Entropy (8bit):	7.966779366644809
Encrypted:	false
SSDEEP:	6144:zgl7rRQ7krXodZUnbLbt5HLXBg8Sr6kT1D9aESt:G7rJobUnbl5rRHkmR
MD5:	982118A47D2890E02E9024BD66A466E3
SHA1:	DF7D05E440B5C193949A4B914CCA7F3F766270F8
SHA-256:	E0034C8E0E52B810EEF30A05192AA28946BD699C91DB91DB835BCF4E954EC966
SHA-512:	54ED8DA54F38CCD10070AC638A8FDC1AD2109BA541849C3E4196294EA964021E92AA1F928722FA3F2E894D25FDDAC1FEF2D23110EBBC0183F3DF3561AF04696B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e .g....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:992A6903F8D911E0920BE7AB4B292F91" xmpMM:DocumentID="xmp.did:992A6904F8D911E0920BE7AB4B292F91"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:992A6901F8D911E0920BE7AB4B292F91" stRef:documentID="xmp.did:992A6902F8D911E0920BE7AB4B292F91"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...l..5*IDATx...3.n....?.u...6f.[./HfVI...g..-U..K..z..f..l6....?..z...l6..f..%k@m..l6..}F.m..f....m6..f;. W..}...>.fw

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1358
Entropy (8bit):	6.747755888912706
Encrypted:	false
SSDEEP:	24:L1hpunQWwh82lYSKw86OftV1OWT34yJ3V7P3YGT/m/4Myusr4/DAtQaF1:xitvnLZPft6WfJ3Vgu/m/4LusMbAe01
MD5:	B903C8C15DFF677B7B3DFD042FE8D860
SHA1:	C0B4DF8748071DD78C9715C3C3A3AB72A6D914BC
SHA-256:	75B7BB1E52AE9D0A7EE3647E3C840AA5B89135B6125BADB2D55280504488072A
SHA-512:	13137CDB98776338682579C1193576FDE90714DBEAF8EDC3B055AFEA4EA2FA10CB291759901B5BAC8E186408B44229C2ADBF2B7EE28E14A99F906591BFF5455E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............?.~.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:275503383E8511E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:275503373E8511E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118BF2F6B511368090" stRef:documentID="xmp.did:07801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.F=....~IDATx..1k.@...$..!U0S3.F.B..._..@..N....B6.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1104
Entropy (8bit):	6.230156154597898
Encrypted:	false
SSDEEP:	24:51hpunQWwh82lYSKwlKw3A1EVLHANT3ZyJ3VsV23qGkDIbjTc:HitvnLU3AyNHAN0J3S26cjTc
MD5:	18100D828DD71DD4FF934B30E74896CD
SHA1:	5F40686BEC33C364FA332B78A43EEB171C651C55
SHA-256:	5E89CFBEAC0C7CD873912ABC6B7A6E2A832910E7D31B98BB80B5E2F80D36F067
SHA-512:	9034B6775FAC8FF7E444424AEA640767F2DE15F6D2AB4758C4411A418C7225C059D3BFC88B8C391716596A7E7C5910E19FF961C82392F31015BD20DCD1693C39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......*.......{.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:B33F65A80AF211E1A0C4AFF5619E4C4C" xmpMM:InstanceID="xmp.iid:B33F65A70AF211E1A0C4AFF5619E4C4C" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87FC2484F20AE111A389CEDC1C003468" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx.b...?.5......7..]..[$.....#^....2.h.h..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1972
Entropy (8bit):	7.76786055097602
Encrypted:	false
SSDEEP:	24:5iUpviVIRG17AwhO2VqYCvoy7BtEG1kOl8LThrlYN1wAUcvrPnGfThrJI8dkcsyi:5NpqaYhrovoSEO8DCwaznGflzUyQqbdS
MD5:	914014F688710892A25B35C1996D1BEB
SHA1:	A9A08D19A5FF0468D1AFC34796852E5FF662601F
SHA-256:	AA215CDB4C3BBFCCEFBC388ED892E13AEDD4CFB30506FB773FC95D693B79E6DE
SHA-512:	A78E1B4057F184F2B4344F872D20BF9B05102F9478D69EC30669E8E71CB02EA611A1BDBED21F98AD6C21FC3C6803524EF587E4D05D461A5525133C6CCB768142
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/teaser_partner.png
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....1IDATx...[pTw.....w.....B...[...-.k.....(v.....c.._.......>h...:.........1h.@.!..r..w.9>.?....p....i99.....o....tuu........... b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b......Z....`m....D#..].7.%w.<..>.\|a.&(...!....m.......}.K.\|....[r.......c.<.....<.t..1........L........T..Pm.5...q.[r...V..Hl.L...[r.Y.U..\......7...5.~.3.t..P]-.M._...j$..N.........y!9.F".m.c.6)c....6...q....0.pK.Ns............q....>!.s+.Nc........$wm'.L.....{...o.f..m.....1...o.@.s=._......z\|..x.:Dj.^R......{....G.....b..a...4}.8...x.,.}.......DH=....[0...._3}...?...T........_:H..u.>x?.C/.$.a..}S...3,..f...4..m...dw%...Mg.}..!....'...o..u..}.....;....e.....~..B..=..j....8...$T..=6.b.s.P.k.&..8t..X.8!j.x?m.{rv_;...=..!.."..F....WpR...........irg.1....}\|.....&Y..3.j..l....]o.x.&.b..#.....\..$.m..K..0

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_square/btnNext.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x23, components 3
Category:	downloaded
Size (bytes):	2233
Entropy (8bit):	7.260381887215359
Encrypted:	false
SSDEEP:	48:hitNn2VPKJ3iiBch3RcJVwWFRnbqgrR4W:a2awRgbnbqoR4W
MD5:	44098D8EB9C36C9F5B556D4A8AE06F89
SHA1:	1B5D0155F480F7F06FAD3FEA09007A01804C58EA
SHA-256:	4E4EBCB302F86DD0E8987A1B619591B51A78DD499D00A3409A0E47CF5D716673
SHA-512:	7A7EEC7C54F40B4DA0525958300720B27AA0FC7D96B27106905A32ECC43276E3C7D4E48B7333E60C9812E5EE117937F8C77ACC61D1FCC06A60AB71372D1DF0A7
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/teaser_shaddow.jpg
Preview:	......Exif..II*.................Ducky.......S.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:2AAADCA0467911E1A571F747923A0B22" xmpMM:DocumentID="xmp.did:2AAADCA1467911E1A571F747923A0B22"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2AAADC9E467911E1A571F747923A0B22" stRef:documentID="xmp.did:2AAADC9F467911E1A571F747923A0B22"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1104
Entropy (8bit):	6.230156154597898
Encrypted:	false
SSDEEP:	24:51hpunQWwh82lYSKwlKw3A1EVLHANT3ZyJ3VsV23qGkDIbjTc:HitvnLU3AyNHAN0J3S26cjTc
MD5:	18100D828DD71DD4FF934B30E74896CD
SHA1:	5F40686BEC33C364FA332B78A43EEB171C651C55
SHA-256:	5E89CFBEAC0C7CD873912ABC6B7A6E2A832910E7D31B98BB80B5E2F80D36F067
SHA-512:	9034B6775FAC8FF7E444424AEA640767F2DE15F6D2AB4758C4411A418C7225C059D3BFC88B8C391716596A7E7C5910E19FF961C82392F31015BD20DCD1693C39
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/sprite-shortcode.png
Preview:	.PNG........IHDR.......*.......{.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:B33F65A80AF211E1A0C4AFF5619E4C4C" xmpMM:InstanceID="xmp.iid:B33F65A70AF211E1A0C4AFF5619E4C4C" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87FC2484F20AE111A389CEDC1C003468" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx.b...?.5......7..]..[$.....#^....2.h.h..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 119, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3507
Entropy (8bit):	7.9237730290016835
Encrypted:	false
SSDEEP:	96:j9mg4Z8bNJvHfnl2xATaJvFvTCbBdjN+3BDsu:5l4uF2xxFTYniB7
MD5:	6B25600839837ED891E1D2F17BA01C28
SHA1:	1DA373E3DB998FA1A7EF9AD0ACC802949B1FE190
SHA-256:	EC6447BF74951685AD6773AD32A9A9123AF6FED69FC20EEFCAA33956F315EEBC
SHA-512:	1DE235E61422FB9847522701F57E9E12DFB296C801521934022F6E10D7F4F5C5C69B9628E965AA94E3010F35D7F29DE5477393F2E43B1319E4CE5A79402F43E8
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_square/sprite.png
Preview:	.PNG........IHDR...L...w.......E....tEXtSoftware.Adobe ImageReadyq.e<...UIDATx..]il......`...`@F..}E2...... ....".....h#.B.....vI..EX.o$..?"-!.. ..PVd....22`q.`np.WTM......gzF.J.]..z_...u.x........n....6.....eTK...Z...N.%.J.(P.{.^.z.......o.f.y.. .'....)..7n....ZyeUVVr..?..k...`.XA.>..!H.L+.(..`1...P.v.Svv6.YYY......7m.t...So.t...t..}..S0...1.4..../8P...k..AO .P...m.N....r...G$....X.i+1.`.i.Q'.....`.s.<y.={.:I..Uq...4(d...>.Y.L.7........Dp.?..Y.,;I.3....v/_.d---.T.$HN...~....Y.N.:t.j6+...Oss3z%.......T.(>..c..t...}.....j..!.<'r.j.......a....3.{.v...v.M...Y..PA.%. x....N.ki...........h..cG6c.......UUK.XS.L.G...z.....>.u.w..2..&..&...\....O(z..5VWW.&M...............'...\|>.K...>.u.....6\|.p.bCC..z.*......-c.V..w.r.t..>r.dA.L.B..9~.8{..il.C..x.......~4....L.d.....Z .W.^l..\Y(..K.,a..>deee...(...<.Z.f........p.B.`....F9P.-..j..l....8w.\...!C..C.l]...vrET....@...S.dJ.`.F.....g......W.x...G.....s....Y.]......\|_.?....?~<.......&>.h///......w....

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 47, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1097
Entropy (8bit):	6.062885138048307
Encrypted:	false
SSDEEP:	24:VDA1hpunQWwh82lYSKwy6O7V3PT34yJ3VHP5YGBsjjjjI9:VDeitvnLX77dPfJ35amw6
MD5:	26B97559A5225BF3CC3E1634950BCB84
SHA1:	0C24CB2FC5F9B4EE3E6529925D8D714ACD153B00
SHA-256:	CF8A95C98411826D030DEE08DAF6EC8CAEABAB42A29143AB3D8EB69FCD30ADD5
SHA-512:	CF04CD33A2C04B5BB11BA02F9A9D0D12EF5FB0EBFF5F5C750F6F4AE2BDB73103C13F520D97839C709FAC4A8FBD188B2D984C40F1EDA25CBEBC7B83EC231599ED
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/sprite_x.png
Preview:	.PNG........IHDR......./...../.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:6FD77D8D3E6B11E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:6FD77D8C3E6B11E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......yIDATx...A.. ...T ........]..{......B@...[..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1582
Entropy (8bit):	7.806133070553486
Encrypted:	false
SSDEEP:	48:CvN3ZN6LkZdJLjrgMYsOOhMAFn2YxTP2CxIQBz0QD:OpN6LkZdJXrHBThMqn2GfIdC
MD5:	E5A54A17D4D4AB595069EB24BDDD6748
SHA1:	8AEE213A5ED4BB93850DBD738F88FFDA43F0422A
SHA-256:	3669AFD79468798A18ECCABF55562E687ED4B5663ED4DD8F8B2481ACFB724FC7
SHA-512:	EC8125E9414ECE49634008B4ACFA5CD705167D94464B79EFD157D2C7F4B23D5E3794E76B69EBE80F9898CA5F59ED80D96ABB6BE7E3554F8EE305933659F7065D
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_hdguard.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........(.D.....tEXtSoftware.www.inkscape.org..<.....IDATX..Yh\U........d.Il.6&M7MZA.$V...R..J..E..D...AD.....E....AP..V.-..[.t..i2.6.d.......3.EP...{......w.=.1..d2..bO.6#.'{.'bQ..N=Yh.z...gG.......L...e.!.J...6.s.m.6.\;.ik...B.T^0..(..Y...^.J.u=...OO.?.W.~..2.yj.L&....}.?.z<.N.5,.FU.)..^.n.\=_..w.gN.%z..Y..Hcs.....[.j......<\.;.R#.FJ?k..+..\|=.Y..%[B...l.e.l.i5a.....N...0.f.).U.g.J.p...!u....<.."..j].4...j..Tw.V\..eu]..CU;.S.Wj2gs.R.H.c..n..8.%...u..&^m.c.x.yAv&...t......cp....H.......q&W`z.].}K..e..EkIU....J...t..P..<...z.v.*...8....GCN.w'..a.1...NF...,^.z#J{...1..b";..G.h.^..Y..+U.r...p..R.c..<.P!D....bu7..^..WjV,M.a..Y.u.z.......e. ...c(...>..Lc........X..`:.2~.,..A..........\.t{...-..'..P/O.w..<.q...........G2.U.X...._..f6.2..\...@A(.\|.3.....4..3[.\|.b.l\..>....}Tp5.W..EoW[....I\.\|...96=i.}.......eh..._.'...39.....@c.a...q@....".......h..y..3..Z........ ..^..`l..j....D...(..1.H.r.}=.A.w

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 60x60, components 3
Category:	downloaded
Size (bytes):	1790
Entropy (8bit):	7.708571043916374
Encrypted:	false
SSDEEP:	48:5fciWgbuERA1I8yT2E+HrVc9uVg7MJ+p1RNYT6:lCE2IUEiVcMZJS1ke
MD5:	4E6EAC723650FA4333B986A0929650B1
SHA1:	34A481FBA386B6A12353B862402FABFE35DF800F
SHA-256:	51A65D15D0A167CFC3450557D3BA7EF76E2DF4CC1E2B3A78F56F64684762A5C3
SHA-512:	E260B4CCB4F0533B5F23B8859C6BFF38823AF196D87AD1AAAE2CEC54E6538405AB2492FC12EEE102082E354E4DA911F0405FE27E86BB5DF978DAAF90368D80C7
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/img_7755_02.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......<.<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...S!......sZ...D&.\...m.'...X.o<.,...f<.My.oC.....7O..G....[T..T...<.f.#.E?.{V...PA..M..v.0.).....0ON....~..O/\.c.XPz.....+....b<.......1.#.^.zW.C....4.z._./.h..G.<#....wd..eW.`....C..?<b.......3B..tmZ.$.#...K...aD.v..OL._S.j0.......V...r..>...^).P\[izF....G...y..()....V...]U..x.....P.J.I,..4.o!.#.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 147, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6682
Entropy (8bit):	7.899011676321073
Encrypted:	false
SSDEEP:	192:7NFP7WLCe/SjT9ExKtzBMwEzWkJlHqKV36:HP7WL7qvfPKasHqKVq
MD5:	F814686DCA4830164D3F8D2C949B42CF
SHA1:	F0F45CE2B45ECA186BB02F479DF5128E0CC99C48
SHA-256:	009EA272018963349C464E648FC440CFBC0065C9D220DCD9E79FB12047E387A2
SHA-512:	D6F68A8376EEEDE8CC020146E7D93C2ED66DED06CB611D9879EB44662172A2F6142A26789C098F2DE035F30A39B0F7682978852E526A5B9C8967FCC98F3057B1
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/sprite.png
Preview:	.PNG........IHDR.............B.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:275503303E8511E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:24283CC43E8311E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.GI...JIDATx..].p.E....W.c....0 .`I.2.z7..E......

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2733
Entropy (8bit):	7.896887275532658
Encrypted:	false
SSDEEP:	48:zsnzKam3v3NFRjUS1m/G9nkfsKLXKC3dAZP0uf985kSX8:zsnzKlPPqSQ/ykf9LXVAp
MD5:	98C53AAD1F8FE4D767763CA959CA52C5
SHA1:	216E76AF46CA250D9435690A099A8F0ADF1E6824
SHA-256:	7F1E7FB0975FA69F8D6818CA6972A39AB527C74E28AB461F7F6F2B0FC42963F5
SHA-512:	FB4567A1146C1286DA78D040CC26AB76D86455A11400C4E1FA70A4E0CB7BE5D988714BDBED9C4C400F128C67441F62B70F20209DB74987CF217CD9E9DC5993AF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/ws_5_01.png
Preview:	.PNG........IHDR...<...<.....:..r...tIDATh....W....Q.].=.....k.v.....G..,0..(.A..`....a..+.`e....8$...6.......3.g.....E....~...8...[....8..S%...f...w.H..VQ\|Z.w.,p.\|..D.q......e..N.N.a\....(}Q.5.:.V..3. ........R0.lX..OhS.f....9D..q....q.G....DN...S....!&4T......5~.9q.E..Fk......u......k...(.H.-.NH...7............o}.fx.....X.R.0.6....]/..v?.....=..c........;.....E........b...m.@.v6.E.l....O.g..i.~..}....>.....ZCw.,..)?..1. ..;X...'.C.R[..".p.(.a`.....g...S._..AO.XAfO...,..g............9{.=.v.%.nD""I..;.}....r......E5.d...~`He2d.)..>...7.. ..P............1Db1:.:_?.4{.yZ.2.^=Ca....F.M2.`..2.......n.)...-.....u+.`..~n.....n...~.K...E.....\........W^yl..4.'N..J)..^..a...$.i.1..d..\.....).A...]V...O.......7.z.Cb..i/.7...\|..7......r.g.-._..aA{..........cT{...3.I\../.bi.... ....t.z....uB!..b\.vc.'. N.>m...\|....l.8J.L..S.........Q..q.(....lo.G.......2...y..Z.f.C6.b.X"...L&i.k..M.X.?....Ma}......"./]..3..<..q......o*...u..n............di..J

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_square/btnPrevious.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32769), with CRLF line terminators
Category:	downloaded
Size (bytes):	91671
Entropy (8bit):	5.368573359674578
Encrypted:	false
SSDEEP:	1536:wttlIQq8jYAJohe7evhKHIJvuUO7prb3qJz34yfbvTXYActjaO7UX5X8BKg1hJOw:IJjxpIpuVkRECra92Zp8++
MD5:	EA75B2A8F1B4241A872B1CBDDBAED154
SHA1:	18678DD78C1F5A3525127B442BC70375FAF09C16
SHA-256:	4A62927A380E201C4EE51321DCC1E6B1F7DFBF82049CF349DF990629E01E9178
SHA-512:	DC69CD4703DCBA3C8F4A52058C44A34FA7C0B6096BED20F30CE3DAB872461EB6DDA9D0D381137B9CB022219AD92CA7F5F25D3964ED33D5F41E9FC05EFA5330FD
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/jquery-1.6.4.min.js
Preview:	/! jQuery v1.6.4 http://jquery.com/ \| http://jquery.org/license /..(function(a,b){function cu(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cr(a){if(!cg[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ch\|\|(ch=c.createElement("iframe"),ch.frameBorder=ch.width=ch.height=0),b.appendChild(ch);if(!ci\|\|!ch.createElement)ci=(ch.contentWindow\|\|ch.contentDocument).document,ci.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),ci.close();d=ci.createElement(a),ci.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ch)}cg[a]=e}return cg[a]}function cq(a,b){var c={};f.each(cm.concat.apply([],cm.slice(0,b)),function(){c[this]=a});return c}function cp(){cn=b}function co(){setTimeout(cp,0);return cn=f.now()}function cf(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ce(){try{return new a.XMLHttpRequest}catch(b){}}function b$(a,c){a.dataFilter&&(c=a.dataFilter(c,a.d

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	7.711636199708589
Encrypted:	false
SSDEEP:	24:Ce3OK5CUFYuxJIk7dU9yT4bLelAStXYYyr46wxWpWUka:CeeK5COeSIL5GrUpbka
MD5:	198225452EFAC1317BD3547214963C42
SHA1:	D6BE16DD6C258BC7D72B1ECFC606F5644156B091
SHA-256:	6D339742E25AAFB60C0523A5B16A4B91BC7EA8DEBC5019CDAA51D137DA728CDF
SHA-512:	5B07D9C48CF9FAF4CC61B638C43E75039DE6C20E75B6C7B094C131416408399D8C9B9FE5C5786F404BBCB33313E0B866F3EC016DFCB4FA83101867D77A2B0694
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/facebook_32.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........C!.....tEXtSoftware.www.inkscape.org..<.....IDATX..W.o.U.....4.K....!....".@.qH.$...8!8T...JH.Z.^.............P(.r.!...$+l.vm..}o.=....:..n.f.....7...3....l6;n.C.a.s,.....W....B.%&q.R......F..{.0.^.[..=..955..4A. .A.@.....c....).)Qr.pn.....[Z..r....f.e.y...gf ........<...k.k.......o_..i.....^.[x......zC....;J.....W.....X..X.:..@...:.(6.3f.....OY.A..5+p.0..4M......J.Y......-I.....'.8..NU...m&1......b...1..#.Cx......`..\|...oQ..A...Q..A.b{.c`.M..`.B'N..r4.".\|..K.xj41..R2Z.@..!......@.6..I..%.O%..0...i...1j.6..'.......A.^8..)....o.V!dg...J_.C.Q.....Ib.F<..........h4=...w..1...H.>.T<.$1.<4[.o.1.Am....Q.'......v.J%1..84.....6cJ.R.............C.."bf..=.K..NTr..,......... .(...cI.A.y4..e.s...yh.<...v=f..Z._/..Y...y....P..u..j8..p...c 0..f7Ju\..Gh.q....kK............@HN.......C[..}P.o:.@J...<.......P<..{..~.=*.%!..........BL..f..........P.e..E..t&..@.\.../...w6.;.N..Q..J.m.,6K.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	810
Entropy (8bit):	7.60956475333558
Encrypted:	false
SSDEEP:	24:DR5awwGIar7FWfFdeDktUupjdb84z7Kr2YGitN:Xawww7FtktUGnz7FYx
MD5:	3EE6A960781B74C30625A4BDD1E25C4F
SHA1:	8F7B8F95B6C780A89114F59A560DA8709DD733CF
SHA-256:	AF72508BA6B263325BE8EE6E5FADC55F9323D26D18F240AD8083A571B61C1A7A
SHA-512:	586AB9B7D24445DBBEF5746E7F15826DE5F1154A19301F6EFCAAD83B788880783964319A77116FD88CF2A9009D89CD62519E2D510AECFA6BB8495EF06FFCAA5B
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/favicon.png
Preview:	.PNG........IHDR...2...2......]......IDATXG..O.Q..3o..]..&....U.@ ..b..........7..&.L....&.+11....^@.\L..(.i..-..-ec]9......yovK....w..?.ZqH..j.!.C...T..P....:E%....577............i..........D.......'.533.....c.......$........8.I.......J..V.X...c.7..B...H.Z........M..066..Ldi....<.l6..[.\.\.G.'.U........}.uu.]<iR.\|Tuiiiee.R.LNL._X...j...V,....\|pX.bH._g8...?P......f.k.R.F..Tf6.....E..0.:.T..Z....P..CK.i.T...Q.zor......?....DG.z...*...P...0;......yW\|.U...F.sp..q;...@.G.>z."...>R.u.uB..%f.Z.Z.W=........5."...f...5>8(..~.....P7?i.LTW...........K...r<P.%rX.e......;...m[.K....l.p.}.D.V..{.SO@]:L....,..".....&l.%...`..T:}.8......U.+....2..xR-&....j..<^....P).M..p.8".P%..DM.B.K..7n...u]&..?P...kL...Xt.#....Y.\.U[................A...T+..V.R.8.ZqH..pN.~.G/...ac.....IEND.B`.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32769), with CRLF line terminators
Category:	dropped
Size (bytes):	91671
Entropy (8bit):	5.368573359674578
Encrypted:	false
SSDEEP:	1536:wttlIQq8jYAJohe7evhKHIJvuUO7prb3qJz34yfbvTXYActjaO7UX5X8BKg1hJOw:IJjxpIpuVkRECra92Zp8++
MD5:	EA75B2A8F1B4241A872B1CBDDBAED154
SHA1:	18678DD78C1F5A3525127B442BC70375FAF09C16
SHA-256:	4A62927A380E201C4EE51321DCC1E6B1F7DFBF82049CF349DF990629E01E9178
SHA-512:	DC69CD4703DCBA3C8F4A52058C44A34FA7C0B6096BED20F30CE3DAB872461EB6DDA9D0D381137B9CB022219AD92CA7F5F25D3964ED33D5F41E9FC05EFA5330FD
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.6.4 http://jquery.com/ \| http://jquery.org/license /..(function(a,b){function cu(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cr(a){if(!cg[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ch\|\|(ch=c.createElement("iframe"),ch.frameBorder=ch.width=ch.height=0),b.appendChild(ch);if(!ci\|\|!ch.createElement)ci=(ch.contentWindow\|\|ch.contentDocument).document,ci.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),ci.close();d=ci.createElement(a),ci.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ch)}cg[a]=e}return cg[a]}function cq(a,b){var c={};f.each(cm.concat.apply([],cm.slice(0,b)),function(){c[this]=a});return c}function cp(){cn=b}function co(){setTimeout(cp,0);return cn=f.now()}function cf(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ce(){try{return new a.XMLHttpRequest}catch(b){}}function b$(a,c){a.dataFilter&&(c=a.dataFilter(c,a.d

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9585
Entropy (8bit):	5.176229075364599
Encrypted:	false
SSDEEP:	192:WHCZvIFvp293XQ6t79010Iu5zfrAZr90zNKZy9sH:WHC6FA93XQi2eIu5PlNK1H
MD5:	1F1F56C33A00EAF0F0928D16ADDC9463
SHA1:	46B404223CF82EAC2ABE08047B27692286921CF3
SHA-256:	898A9F6BE83D89B2835A71F4CA210C30D6A18A1CEA07EEE78B757E86DB1E6E0B
SHA-512:	0288AD183F14990486EC8DCBFB854F9CE1C71C87D7C50560E6773B6CDB712A8A8BA3D8A2F1A7FC275D50BA4FAC9BFA5C0C377974452C7D6A322A8AFEF564A724
Malicious:	false
Reputation:	low
Preview:	/Multilevel dropdown menu../ ====================================================================================../..$(document).ready(function(){...$("ul.simple-drop-down-menu li").each(function () {....$(this).hoverIntent({.....timeout: 300,.....over: function () {......var current = $("ul:first", this);......current.fadeIn(300);..............},.....out: function () {......var current = $("ul:first", this);......current.fadeOut(300);.....}....});...});...$("ul.simple-drop-down-menu li:has(ul)").find("a:first").append("<span></span>");...$("ul.simple-drop-down-menu li:has(ul) a").addClass("parent");.....});..../Get first Word in heading tag & Peload image in css../ ====================================================================================../..$(document).ready(function(){.../Preload image in Css file/...$.preloadCssImages();...../Get first word/...$(".first-word").each(function(){.. var me = $(this);.. me.html(me.html().replace(/^(\w+)/, "<strong>$1</strong>

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12681
Entropy (8bit):	5.332984765802055
Encrypted:	false
SSDEEP:	384:5mnRJoGGa83JmJSRnRGGaO3JLOCB7bNHy+gqOQVrZ7:5mRJoCJ0RzlVrZ7
MD5:	3FCB53BDE65B243B6D30A6D46EFBCDCA
SHA1:	123B8A37F099EB41556C047F6700042169E67A1B
SHA-256:	B618A0C0AC8C329D1000E15B43F58FD1ED21B4A9A6ACD8EBC68C1CFE0303EA00
SHA-512:	2EEEC7FEA8DC809C86EEAC50D16EC0A8A77CD75C730BF2AC15315AA71BC28FBA2B04EF0871CF6FE1338098347B16AB1910FB0F629CD0E6000A1AFD13EC03A9D6
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/short-code.css
Preview:	@charset "utf-8";../* CSS Document /../Short Code/..blockquote{...padding:10px 10px 10px 20px;...border-left:5px solid #C41D23;...border-bottom:1px solid #e6e6e6;...border-right:1px solid #FFF;...border-top:1px solid #FFF;...font-style:italic;...background:#fafafa;...display:block;...clear:both;...margin:10px 0;...overflow:hidden;.....}..blockquote p{..}...clear{...clear:both !important;..}..code{...display:block;...font-family:"Courier New", Courier, monospace;...font-style:normal;..}..div .first{...margin-left:0px;...clear:left;..}...one-half,.one-third,.one-fourth,.one-fifth,.two-third,.two-fourth,.two-fifth,.three-fourth,.three-fifth,.four-fifth{.....float:left;...margin-left:4%;...display:block !important;...position:relative;.../overflow:hidden;/.../background:#FFF/..}...one-half{...width: 48%;..}...one-third{...width:30.65%;..}...one-fourth{...width: 22%;...width: 21.8%;..}...one-fifth{...width: 16.8%;...*width: 16.78%;..}...two-third{...width:65.4%..}...two-fourth{...wi

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2826
Entropy (8bit):	4.364911624922898
Encrypted:	false
SSDEEP:	48:L/wqQNn2xBAJJ3ucZzqHf9zstZqHf9zstZzqnzstZzqHf9zkZzqHf9zstZqHfE:9Y2ffM
MD5:	C97655D7CC6DB013D998420B3A55A8D5
SHA1:	AE59DC78CA76F210FA240346C4DE27629892EF27
SHA-256:	D392BE6003EE931C1826607B4BA4980166AE55EF1F0028E78C419A1BF7F7C468
SHA-512:	B1B3D1AEF557E9071F943239298242D7D5BF15C408220FD8692E45D6F5E632CAD1F3837EB7457DFD28597BCC9BF8D6B332924CE65C731EA0DCD0165DB9F860BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r.....:K......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5007387BE54D11E29AD8835B9F4D1317" xmpMM:DocumentID="xmp.did:5007387CE54D11E29AD8835B9F4D1317"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:50073879E54D11E29AD8835B9F4D1317" stRef:documentID="xmp.did:5007387AE54D11E29AD8835B9F4D1317"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]Y.....~IDATx...A.....0.....!....I..........0....`..........................0....`....0....`...0....`...................

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1033
Entropy (8bit):	5.00769583383081
Encrypted:	false
SSDEEP:	24:NkTraRrtmFu+7mEFrr7mVFVzUl8NomCh+jmGVPrej6SR/dr7mXqi:N4eRoFu+qkPqzDN5g+yGVDej1jqz
MD5:	3B762E8E29F485C9F858965A5B2C9818
SHA1:	291ECF6B9948B61B6DD5119F53AC2A39C2FC3BD8
SHA-256:	94A5F2B85BDE7EF49D84F3494E1C462CD863403A64D012BA09CE9F3B59F95D2F
SHA-512:	8DAFCBFE96CD18110EC6794CB83EED0DA290E05E4D80B091FAB47F9409917DFF74F2CE0FC423408C7D3089F9226CCEB2D79DDDC17BA9C1A057BC3D0ED420ABDD
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function(){../.****************************************************./../.AUTOCOMPLETE....................../../.****************************************************./........var std_val = $('#acInput').val();......$('#acInput').blur(function(){....if($(this).val()==""){.....$(this).val(std_val);....}...});...$('#acInput').focus(function(){....if($(this).val()==std_val){.....$(this).val("");....}...});.....function closeResults(){....$('body').unbind('click', closeResults);....$('#acResult').hide();...}........function autoComplete(){....if($('#acInput').val().length >= 3){.....$.ajax({......type: "POST",......url: $__FH+"/includes/global.autocomplete.php",......data: "q=" + $('#acInput').val(),......success: function(response) {........if($.trim(response)!=""){.........$('#acResult').html(response).slideDown('fast');.........$('body').bind('click', closeResults);........}......}.....});.....}....else{.....closeResults();....}...}.....$('#acInput').keyup(func

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3490
Entropy (8bit):	5.201769623692114
Encrypted:	false
SSDEEP:	96:g0uOKpDdR/B0VOurVO/Xb5Avt1JDxEdRroBJpus4JhbJDJcS:aB0VxrVub+vzhxZBJH4JrDJ3
MD5:	E9E3A8596B7D65B9C275BD5405EB81FC
SHA1:	A8079147B39EB5B00F97C209A174C2A8B9B704AD
SHA-256:	8FC89D726C4151367B113B22EDB6C0C1234E41C79A456016C652AA59E073F6FC
SHA-512:	4CB6EB330D8D61719A9FA982B74227195402F9DEE429D8A120400A8499BDF86AA7867C352E38FE7C858F9A46098A466BBCA2DF6181F82E62C1EAA23125778CA2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/slider.css
Preview:	/.. jQuery Nivo Slider v2.6.. * http://nivo.dev7studios.com.. .. Copyright 2011, Gilbert Pellegrom.. * Free to use and abuse under the MIT license... * http://www.opensource.org/licenses/mit-license.php.. * .. * March 2010.. /.. .. ../ The Nivo Slider styles /...nivoSlider {...position:relative;...z-index:1..}...nivoSlider img {...position:absolute;...top:0;...left:0;..}../ If an image is wrapped in a link /...nivoSlider a.nivo-imageLink {...position:absolute;...top:0;...left:0;...width:100%;...height:100%;...border:0;...padding:0;...margin:0;...z-index:6;...display:none;..}../ The slices and boxes in the Slider /...nivo-slice {...display:block;...position:absolute;...z-index:5;...height:100%;..}...nivo-box {...display:block;...position:absolute;...z-index:5;..}../ Caption styles /...nivo-caption {...position:absolute;...background:#000;...color:#fff;...opacity:0.8; / Overridden by captionOpacity setting */...width:100%;...z-index:8;..}...nivo-caption p {...padding:5px;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 360 x 74, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6144
Entropy (8bit):	7.9346947969990556
Encrypted:	false
SSDEEP:	96:ezQPXM1Dx6S3J6UAkyHiA9uoi3MICkTaxStsAtkUX62UBlvj6S8fAlIM:e8PXMFxp6hFCAQoi37ZtsqX6XBN2fOIM
MD5:	F8CF7921DA6BBF7AC6602261370ECA19
SHA1:	FA81C5C33313A5DA72805B3DAC36484CFA2F7A4D
SHA-256:	2E27050336C12E7AFDD957A60B7C8CB77E91A276635CFCC3F4162E1E50D67C80
SHA-512:	5D8AADEEF15D5BBEF326A55182A860BAE2FDB810AEE756B2EEC57EBAB1F7AFDDE0B827466A8438C814FD7BAE92CAC1854246C426982EABD46C123D23CADF6F5F
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/logo.png
Preview:	.PNG........IHDR...h...J........\....sBIT....\|.d.....pHYs...;...;..7Gz....tEXtSoftware.www.inkscape.org..<....}IDATx..y.....?.g@.E..%..s...5Q...7..)@....\N4..,...1......5.F..7.....!...........D..........k..gaz.i..>S....[]..z..}...b),"2..:02\|m.,.^...UU?-.....O V.........tR.m.,U.S\|.,.K_%Qn...9.x....`W.Q..ID...3...W.-.. "..36....j}!..X,....."".0-..z`f..N+.K...B...CD.A`\..\|....+....b..l.t.....\....~T.;.......3.+..C.h.b.T.V.{F!E....X,....QH..FD....b..X.....lo`..Y,.>....\|.m......b..X........jk..Y,.>....B.m.X@[.......3..0.......c.X*.+.= ........W.....b. .@..U].\.....W.....RAX.....W....{..`..-.K.6YR....?..vRu-p1p...`.X.`.......L............x..WU_/.....O`.....`...Sn_,.K.....b..R. ..b..R.@[,.K/....n.....3.....w....p..............H..-Q...s..""C....#.V.cUm.Je.......\|..k.aXD.....[..:..m.....C.K0..w._.?....,`RZ..q..:....Sg..0....4,.......z...%....7......#..&.iR...J.=`.p..n.("c..J.^Q......~....a...\|..:....E.]-.)`..s~..MU..Ym-h7h...[.K%v..l.4.....x.yT\...`..=....D..&...

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8621
Entropy (8bit):	5.208595484723867
Encrypted:	false
SSDEEP:	96:nxn5Ff272xGX+cBM7dYrjQGVooN07dCK1ZPZmwlagu8STqH:n1eOGXlOdgz04KPhku
MD5:	B259DB0B933D8D594DB61D6B49CDFDBD
SHA1:	A94C73AE00C3D8F3DBED7BBB48E027439F484FB6
SHA-256:	4D78C74187FB5698E8C0012D3ABA7A5D605BE9C086A0B874BDDF698E777D46DC
SHA-512:	69C1F097D4B40FD766350EB96E6194A54B87B6D5B340743728298F453986BB033A225D372EFAA86C187A4F510FB232F60C2A194744E2B05E7F6B369C89FDF79D
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/shortcode.js
Preview:	/Maxx Simple Accordion;..//Author Manh..//Email:since.u.left@gmail.com..//Date Created: 09/11/2011../..(function($)..{.. $.fn.mSimpleToggleAccordion = function(options){....var defaults = .. {.. showFirst:true, /show first toggle content if value : true/.... type:"", /"accordion" ,"toggles"/.... speed:500, /speed of animation, default is 500 milisecond/.... easing:"",.... mEvent:"click".. };....var options = $.extend(defaults, options);........return this.each(function(){..........var opts = options,.....obj = $(this),........toggler = $("> dt",obj),.....toggleContent = $("> dd",obj);.....toggleContent.hide();..........toggler.append("<span class='sign'></span");..................../Set default open/close settings/.....if(opts.showFirst==true){$('dt:first',obj).addClass("active").next().show();};..........toggler.bind(opts.mEvent, function() {............/for accordion/......if(opts.type == "accordion")......{.......if( $(this).next().is("

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	137
Entropy (8bit):	5.583576004642109
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtOhXfCCm/kCQ3lp1p:6v/lhPUujnDspW6Cm/jQNp
MD5:	3B7F995669AD8CBF24ACCCB8F1D70F4D
SHA1:	A9891643F551233C3F230EAA5836E9FA7426D128
SHA-256:	C9183C4EA5F592F5DB89558B91ABC45D6D10CA383F1CE41233900B1CBACFF308
SHA-512:	93836ADCEF608D7F08E3B59F94502EA04DA52E845FF658F83E422D7F30130002C135AEBDA547495E9F9DFA5FBE6C9DC2DF483CAA225D8CD48F891BD70A1D38CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...+IDATx.bd``h` ........&.*.Q.G..5p..Q...........$.8.\|....IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32042), with CRLF line terminators
Category:	dropped
Size (bytes):	65916
Entropy (8bit):	4.426296006161936
Encrypted:	false
SSDEEP:	1536:IqhIsgtipzlj/sK+fv4eqNgX/7iHRzIHRdyr:lhIvYpzlj/s34eqNgX/+xzIHT+
MD5:	3B91A5CFCBC973EB8C85C9D40F58FB6C
SHA1:	3E95F680026714FB4CB1E9B96E593B90143045B0
SHA-256:	CD7905830F5CD7B5DE3E4F005D039FF16084B705642C01A95D1E6D30C75B6509
SHA-512:	F93D97B093D06D73DE3227921767A67AC7ECE621E8FF7A44B5B185A9237313C573723C05C5F686CA190F4E7628EC03B91F307E4587D645AEA56D965D5301D9FA
Malicious:	false
Reputation:	low
Preview:	/!.. The following copyright notice may not be removed under any circumstances... * .. * Copyright:.. * Copyright (c) 2010, Yanone (http://yanone.de/typedesign/). All rights reserved... * This Font Software is licensed under the SIL Open Font License, Version 1.1... * This license is available with a FAQ at: http://scripts.sil.org/OFL.. * .. * Trademark:.. * Yanone Kaffeesatz is a trademark of Yanone.. * .. * Description:.. * Yanone Kaffeesatz was first published in 2004 and is Yanone's first ever.. * finished typeface. Its Bold is reminiscent of 1920s coffee house typography,.. * while the rather thin fonts bridge the gap to present times. Lacking self.. * confidence and knowledge about the type scene Yanone decided to publish the.. * family for free under a Creative Commons License. A decision that should turn.. * out one of the best he ever made. It has been downloaded over 100,000 times to.. * date from this website alone, and you can witness Kaffeesatz use on German.. * fresh-w

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 7, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2836
Entropy (8bit):	7.868077796195666
Encrypted:	false
SSDEEP:	48:F/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODKeY:FSDZ/I09Da01l+gmkyTt6Hk8nTKeY
MD5:	9A3597B824F9FA67E028D5077554A39F
SHA1:	FD2782DDD6F1C0C91C4011FEEA6B36D0D3A3FAF6
SHA-256:	D432429C726DEC34CDE76CDF3FA9288E889114C5BDD63190A8416915DFB0C0B3
SHA-512:	894C21911058E9EB4AE0A56164D90F8D8DF2C55CE5044FE8EC3B068B02D2AD061625E3C1100AFD6A51D4CCCFF6053A9F04E6C23F4B8BD7217E0902D77B50D565
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............RW.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	721
Entropy (8bit):	7.588524544622904
Encrypted:	false
SSDEEP:	12:6v/72riDDnpckqK2QnveEdJOQV84HmwrsQ8L0syi3zh6RormsAbA45z/N:3ivpck5XcQCKsQ8gsyZzs145rN
MD5:	8A4651741A25E75C9FE402C1228A8DBF
SHA1:	71438ADF82244A89FBD55C4D03C9E17927FBE73A
SHA-256:	440200E0E7DE0B4C8C4FA1A0F364642316560116431A61CEDA540C6F555E38C5
SHA-512:	624F02419134AC8ADE631235486548E09B17D91751B6AA21CAF4CD33DE4B230B709415986D2E6769AAFFC94A7904A8B412CA608A31D55F5A02AA830EC7BCA3BA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...sIDATx..Ko.Q...3.t..)..b.....6MlMj...q.n..\|.~.V..$&]...E.6.G....,.Z.,...0.<<g..h.9........s.uY....q.......I.....6......O.T.U3.Cz..s7...E1.[^ND.......$_]..NO7.._j...wS..aqnn...v..8Q.uP...g!..c.`..`.?..M.' ..Bvuk+.eq!..^.7%...(.I133Yb..t.s4.N\J.x.P.....$I..M..I."....}T..........N..&..R..`..=.e..wa........ ...q.Q.a.....z!..A.T.z.n....a.Ni8.U..b&3..'4LW.,...,...<o..D.Y.......\j4.V...a@..p..8...... @...L..s...........ue.6 mT.....C.A.g.]...L.O...s..d.N.c<..i.T.B....o../.f.oY..u...#j.!.G...d...C....U....m..0...'.<..@A..1(kZ..i.3..x....:.t.AT....4..<.C.m.pj...'..\..CMT.Y}l.8...x....!.Q2.._...n..fZU......IEND.B`.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1088
Entropy (8bit):	6.15566902138109
Encrypted:	false
SSDEEP:	24:gXL1hpunQWwh82lYSKw7wnJVST3ZyJ3Vswe7wQGP1pWt:gXxitvnLLM0J3Wi1E
MD5:	8A81C8CB281B60DDAB235429D89F509A
SHA1:	0D6C5522CD89204F01ADA6BBDEC6C0996FEAB7DE
SHA-256:	795076D9D0095EA402591EBA36B8B05EF59FDD2A84DE94EA18F4453A3A239332
SHA-512:	572DC4DCEB4C89F17C24C0624F14A7012D3F50E198CFB6F944C240649D116D019FFB680B43DE66ADC1E65280C5C091204BBFCCAD29D82540E4545597EF5E5D43
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/drop-down-arr.png
Preview:	.PNG........IHDR................H....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F6B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:336DF674F80E11E0A4428A28A090C1EB" xmpMM:InstanceID="xmp.iid:336DF673F80E11E0A4428A28A090C1EB" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6B917B0AEF7E01196EA900CCD9DA82F" stRef:documentID="xmp.did:F6B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......rIDATx.....!.....k{.g..Qw..:-..T...!p.K`.*

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2554
Entropy (8bit):	5.134783309510231
Encrypted:	false
SSDEEP:	48:Qk5rSW8PkQy99OEEvbFfwZT5Zr8RGPtQyr7EBdGsvFfOtXFfO0DFfOT/FfOGZWMK:QMepiZtJEy/EBXSJkBWDa+Vuk+ZANMNA
MD5:	140048986A561A5F50778D2C207D3528
SHA1:	EC72B75D1F5343060B813F647364B7029C4D302B
SHA-256:	C07964DEC4AA38ED2852AEF87E494BB4F7568DCCD0E813FE9238C8646E80B706
SHA-512:	639D5DE8157DED540A9E7D7288C409FEC0F043AB420B2826F3ACAA68073A78F34C45F547F50DBA2D3C76820531857B4698294FE81D65CB114848A95C868D1271
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/tipTip.css
Preview:	/* TipTip CSS - Version 1.2 */....#tiptip_holder {...display: none;...position: absolute;...top: 0;...left: 0;...z-index: 99999;..}....#tiptip_holder.tip_top {...padding-bottom: 5px;..}....#tiptip_holder.tip_bottom {...padding-top: 5px;..}....#tiptip_holder.tip_right {...padding-left: 5px;..}....#tiptip_holder.tip_left {...padding-right: 5px;..}....#tiptip_content {...font-size: 12px;...color: #fff;...padding: 4px 8px;...border: 1px solid rgba(255,255,255,0.25);...background-color: rgb(25,25,25);...background-color: rgba(25,25,25,0.92);...background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, from(transparent), to(#000));...border-radius: 3px;...-webkit-border-radius: 3px;...-moz-border-radius: 3px;...box-shadow: 0 1px 3px rgba(0,0,0,0.3);...-webkit-box-shadow: 0 1px 3px rgba(0,0,0,0.3);...-moz-box-shadow: 0 2px 1px rgba(0,0,0,0.3);..}....#tiptip_arrow, #tiptip_arrow_inner {...position: absolute;...border-color: transparent;...border-style: solid;...border-width: 6px;...height: 0;.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.141643219073113
Encrypted:	false
SSDEEP:	48:HJzvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:HJDYJndGU7nyp1RXplkHdAiv6
MD5:	4297900AE2D9D0C4EB00D1C15462FB19
SHA1:	2E0EDDEA4A764BA0A1F9903DB38542A795547F3C
SHA-256:	CCD39B8BA77B46E92151135AC4749D1FA2E03FB5BC30B475C9CA11B8C95EF64E
SHA-512:	0E5B6ED82D692A88D619D6C36C1AEA902FFBDD329029FBC99576EDBC69DC3D4D52A63E745225BB9896CA94D4F19B8322DDFBAEBDBEA6C5596234206CF9CFE4B4
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_rounded/loader.gif
Preview:	GIF89a.......222...XXX555JJJpppCCC...]]]...PPPwwwccc;;;......jjj.............................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	6816
Entropy (8bit):	7.031204033016918
Encrypted:	false
SSDEEP:	48:jhM48+uvBTi4Vyxq6KTFnK5tx06AhtCi8ebU4pkXCA8ftG0b/YK:jqN+uvBT3V/ZnKLiCi82UTXVLs/N
MD5:	2E75FC61057231E440462B3F04D6680E
SHA1:	FF8A3C2403D941C07DA55823924195566CB7F14D
SHA-256:	BF083DCAF24C92706D4946BE3B06739513D20414284F78183DE02D6406D50E17
SHA-512:	4BFC60C1520BE39BE6AD87F9DF78AE82C8D1BD0D0FBDBFCFCD36EBE57DCC30AD6B576C252709F39E3AA480CE5CC90FBC4EE76C684D36AA8D26D6E31B4487BC71
Malicious:	false
Reputation:	low
Preview:	GIF89a.............LNL...424...lnl...$"$\^\...DBD.........\|~\|...TVT...<:<...tvt...,,dfd.....LJL..............TRT...464...trt...$&$dbd...DFD............\Z\...<><...\|z\|...,.,ljl.........................!..NETSCAPE2.0.....!.......,...........@...s(V...0.B42.... L!.B.f,U....H.P..q.....V...B..V..2..xC...'.)4.M....0..C'11"...B.......r.13,,....!#.,.-..../.q..&..M...1Z-......!6.6..N6....-.3..kC5(...!.CA.!.......,...............LNL...424...lnl...$"$...\^\...DBD\|~\|............TVT...<:<tvt...,,......dfd...LJL...............TRT...464...trt...$&$......DFD...............\Z\...<><\|z\|...,.,...ljl.......................@..C..,5Y.5.BB....jY. ....N.......;.....@...4...M!..m.&.yC .(/..7.M..(....C/66....B.$.)....6...%.L..3....74 ..$....8))&..3"..B.40.,1..+11...n.!.,.&...3mM...4...xCA.!.......,..................LNL424......ljl$"$......DBD...\|z\|\^\............<:<...trt,,......TVT...LJL.....dfd............TRT464......lnl$&$......DFD...\|~\|dbd............<><...tvt,.,................................3

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1972
Entropy (8bit):	7.76786055097602
Encrypted:	false
SSDEEP:	24:5iUpviVIRG17AwhO2VqYCvoy7BtEG1kOl8LThrlYN1wAUcvrPnGfThrJI8dkcsyi:5NpqaYhrovoSEO8DCwaznGflzUyQqbdS
MD5:	914014F688710892A25B35C1996D1BEB
SHA1:	A9A08D19A5FF0468D1AFC34796852E5FF662601F
SHA-256:	AA215CDB4C3BBFCCEFBC388ED892E13AEDD4CFB30506FB773FC95D693B79E6DE
SHA-512:	A78E1B4057F184F2B4344F872D20BF9B05102F9478D69EC30669E8E71CB02EA611A1BDBED21F98AD6C21FC3C6803524EF587E4D05D461A5525133C6CCB768142
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....1IDATx...[pTw.....w.....B...[...-.k.....(v.....c.._.......>h...:.........1h.@.!..r..w.9>.?....p....i99.....o....tuu........... b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b.......D,. b)..K1.X.A.R.".b......Z....`m....D#..].7.%w.<..>.\|a.&(...!....m.......}.K.\|....[r.......c.<.....<.t..1........L........T..Pm.5...q.[r...V..Hl.L...[r.Y.U..\......7...5.~.3.t..P]-.M._...j$..N.........y!9.F".m.c.6)c....6...q....0.pK.Ns............q....>!.s+.Nc........$wm'.L.....{...o.f..m.....1...o.@.s=._......z\|..x.:Dj.^R......{....G.....b..a...4}.8...x.,.}.......DH=....[0...._3}...?...T........_:H..u.>x?.C/.$.a..}S...3,..f...4..m...dw%...Mg.}..!....'...o..u..}.....;....e.....~..B..=..j....8...$T..=6.b.s.P.k.&..8t..X.8!j.x?m.{rv_;...=..!.."..F....WpR...........irg.1....}\|.....&Y..3.j..l....]o.x.&.b..#.....\..$.m..K..0

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 20
Category:	downloaded
Size (bytes):	6331
Entropy (8bit):	6.971174440206995
Encrypted:	false
SSDEEP:	96:ZTlrZPwcqm7TLzlom/CBzFxCr0S0vAqcqYYLI1+nQhv:9ltPwcHpvmzKAS0vRkAGv
MD5:	8393C5F7E394698F751EE6A11FFF3DC7
SHA1:	03C266A8832F3255FAC90815B032991828CAE503
SHA-256:	255F2566CD540A486B952938766FE509402C88F306CB501345131D86AD3EF978
SHA-512:	E33D67AA981EC463E8D8EA983517EF0ABC8AF425B8A177C30B33F1B3884B75B32DC3FD394A41EEA862E0DDC717B189A3E476A01201821DB57F4DE4D98B7BECA4
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/default/loader.gif
Preview:	GIF89a.......dfd.........\|z\|........trt..............lnl..................ljl.........\|~\|........tvt............................................................................................!..NETSCAPE2.0.....!.......,...........@.."<....p..Z....0..<..s.. ..)...:.%.....@.H.....5.#\|.....V.....[~.t...x...~N..........M[}.......pD.}[.....$..g.........$...#...O...$.#n..O..........\KV...u!...Zg.$...C.......D$. ..D...V.PG....A... D...8.......H..B.....J...@B..VH@(.....,....!.......,...........@.."<.B.......C...@<....p...%.b.....O.............zH.'.BRRE.].....#...."].....QD_......._..D...#..O..j....##...D........D..!...D...........Q.......!.P...$........C$!........"....:.h....}..p...D...J....b....}. Qb...9.......@...G. .!.......,.........ljl.........\|~\|........tvt..............trt................lnl..................\|z\|..................................................................................................N."<.@..B......Ca(......\|.D(I.!x.h-.p..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	25511
Entropy (8bit):	4.857526227218579
Encrypted:	false
SSDEEP:	384:vAeacyiL5iLLemFn79itCNtCbtCSwhiMhIXJc:YeaXS8BhiMhIZc
MD5:	B0DB0C054C174D4B4F971C1B71D0F4F0
SHA1:	AC129AEA443594F188F939CE74F1FF92F48648DA
SHA-256:	34F701D368FB150B10C8D38803367FD55AEF1221768EF7906BF06CBA2DB19535
SHA-512:	30F10AC3BBFC3BD1A56097A97250A13C758991A0F989B341C7CD8DD1A08A1E4C9754DD42E1085E307DA2A48C282A8694C90A50B49E65F89C373F9C9FB0A04C2A
Malicious:	false
Reputation:	low
Preview:	/.. jQuery Nivo Slider v2.6.. * http://nivo.dev7studios.com.. .. Copyright 2011, Gilbert Pellegrom.. * Free to use and abuse under the MIT license... * http://www.opensource.org/licenses/mit-license.php.. * .. * March 2010.. */....(function($) {.... var NivoSlider = function(element, options){....//Defaults are below....var settings = $.extend({}, $.fn.nivoSlider.defaults, options);.... //Useful variables. Play carefully... var vars = {.. currentSlide: 0,.. currentImage: '',.. totalSlides: 0,.. randAnim: '',.. running: false,.. paused: false,.. stop: false.. };.. .. //Get this slider.. var slider = $(element);.. slider.data('nivo:vars', vars);.. slider.css('position','relative');.. slider.addClass('nivoSlider');.. .. //Find our slider children.. var kids = slider.children();.. kids.each(function() {.. var

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1519
Entropy (8bit):	7.800895359148556
Encrypted:	false
SSDEEP:	24:CF3XUBaaWXA0i+NjHCwd2hcyIUzVM/MmiID7IIKem39WLFQ2l09b+sRt3Xt:CF3EBaahJ+NjR2hcyIqV2iID7IAaWLeJ
MD5:	6AAD34D0561D934A6521B00B3F217B3D
SHA1:	501E6B5A998217FFB1E0EC469C25EC1533E275F7
SHA-256:	0CFB2066347649D2331F0065D8B63E472A1123D8857CB3A45FBBEFED6D24F7A4
SHA-512:	D35A5D20BECC4942BADBADB8C208E2A60208661262E6006CB22159786D3ECC3531C71EA4A2C959E4E7B8B7776E05A9ED38A1E196177464A910F4067A0AA3B53A
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_winschool.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<....lIDATX..W.o.E...z.y4.&q.N.Wc5)4M.J.R....BH=..!q.R%...z.8!U...r..!Q......y9q.'...q.v..;3;....w....O..\|3..~.c=DJ....B=:1."..d......l.'..U.K).N.U).3..t:...".D{{.;5F....]...}).......r.?o.p.rX..c.[.M,......y...ml.o.P(.....^.......T.?.8j2....v...1.h.o.v..g.GGG5.!.q.....u\....N-....n.!....@..v..!..N...dU.{:.Ev8.`y@..g.P8(......{..%.HSCS.S.C...%0.gN.v0....N.+)..f0."...\|.. .o..e..K .........f.K......d...Y.St............q..A#.$$......\...2^.%.......Cx..7]..v..~...../ ...'W?.w.../.....j.......H...(..4...Pq.".}..O..../:.,....Q.....S6.dX.J..i..)....dx....k......dJ9..x.........#.......=.V6..K....`..Q.N....]..vW..v.......!.....B...S. D5T.=.{.iR.w..Q...........x...3..^^.GN...F.\...y/..Ae]_..-Pe.>...1p.1t...e....3.....cq"....!-P...0..[..:..A4...;...Lc.I5..kGkgK.......6.....p.<....!.>..&.>..Z..u.....9s...7.`mP........L_.\v..D..(Ct.t?s..X.;Ov..`..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 799 x 53, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4655
Entropy (8bit):	7.812379423498507
Encrypted:	false
SSDEEP:	96:/2nejXrfYfMlWWsvDpDPICEi5R3+2sdowSF0+ILl:WejXaMMWeV7ICEuO2sdoJF6Ll
MD5:	0E2B0125D0A57B90352B55F6EAAF55FE
SHA1:	4AA439B6DD4502513E2F3A3B403D030374F0EFF6
SHA-256:	F820D53213BCAABCD7F6E9072BB832B97942140B9E7EFF7F5AD45713F2469BC1
SHA-512:	1862CBA7B94E3F63740B7ED1DF0C029ABC766D8536E325B4CA354317D29F3AC2D9B663411AD1DDA0CD70E1F28158B197F8711861E56D09F6D255042268EB95D2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/seperator-980.png
Preview:	.PNG........IHDR.......5..... {Vh....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:AE5F1ED3F73D11E0914BA75665AFB653" xmpMM:DocumentID="xmp.did:AE5F1ED4F73D11E0914BA75665AFB653"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AE5F1ED1F73D11E0914BA75665AFB653" stRef:documentID="xmp.did:AE5F1ED2F73D11E0914BA75665AFB653"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...5....IDATx..].......'.w.F.....@./..a..V.!m.^^V...~..f..2.u.9.I...wJ=\|.:]...c...~&].m...E......h.*}...yOD\|=.`7

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 119, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4099
Entropy (8bit):	7.925932056289821
Encrypted:	false
SSDEEP:	48:kZ8N/W0s/8WAG7mvLHmgAfUh8K4wiuCgON7DgwoHHaI4841ZHBpUI/BsvnChGkC5:kuNWV/8u7/Ur4XOQ8UPWAKPCUbF
MD5:	45B32C620CFB4A677F9B8C4360A8D3C4
SHA1:	DF13D61FDC19689240D4CC34E1E2F44BAFF4E214
SHA-256:	FB578FF5AB573EFE22A87D63D027F7AFEE1FA949593B1FF2053B490BC845771A
SHA-512:	632B452D83468940231D7C15BC37CF7CD3468634E5E86E3F66CE711E4FEB4D9683130D731F5E3D52FA4F4F0530AD7D2664F66A0C68CCD5C8416A880A8A2925CE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_rounded/sprite.png
Preview:	.PNG........IHDR.......w......\.W....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]{....?{wE^..y......(..-/..WiA1........&MI4.Z.4mI......6. .?L.)....WAk...X^........w.....{g...{...%_fv..w...\|...9w.........+W:..;F.a:.D.{.+....8..D'.v.k....c.}.]1...EW.\.(.5S..Q...m./.....`fI.u....t...YL.2..(9j$.@..........e.b...".Q.Q.Z{. ,...q:,..........$.j ...^......'..V.....t...].T.W.\........`....~.}.M7%./.,j %..g.r..}J.E.7.I...B..T...n..w0.h..,..r....\.t..;w..@..jy..(+...:_v..7.!y.......r..QR..NA...`..%.}...n.....-....Q.!Y?+....{...@8...nCJ9.0..=4X.k....o..$~]5.....a.a..(..Aq`...C9..3V........2..{w6m.4...;Y{{{'...L.<........2.yTn1..-j....4LGt..A..3g...x..~....8...................~...^6x.`..={..gz.....m.....N....V...~...#Fp...(...7.\|.k.(..`..g..[o..+........V....'O.2..<j.........4LDg.8...~...%K.p%B....c..S.N.......i.R..g.}.......d.....b---..O<../....=.....Y.fq...6...>..m._T._...5X.(...2e.......(#CLi..qb.;..`P.7.ji@..O.E..qe...^.z..........l.?~<..k.emmm\|.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	741
Entropy (8bit):	7.611122399627992
Encrypted:	false
SSDEEP:	12:6v/72rWlPtViTvTGHyUcQo1Ezg6F0K0mvC5GrQbmlJy6puz06bJ/iWwHS6V38TYt:3Wl+TvTkyBQo1EzzF0LmMGrTd7MJC30c
MD5:	6A4BEDEB093BC4193D38553881363AF3
SHA1:	8E7D8961D60CC1F4493A9A7B97B2239438979C98
SHA-256:	0A1ED3BD8FE0B2D41E5F9B5A150B08B95860CF947CB45D7AF9BAF231B25AA5C1
SHA-512:	628A1F425E60850AAA7E56C059C8EBF8F0B85E71EFFE726E00BE9173BD7CB6EC4223F5EB56732B2288FA8CFF8AE1CDDFDB450A772B2C55EF83970AD6E889816A
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/tick_circle.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..KL.A.......j..6..R......W.......{.b.A9y....Nr...........D)MZ..M..}tv......I............q.?C...<..K,H/.&.l.+.W......p..l...87...<c<..3..D<...;..A.f.'6K..Za...0...\K.M.p.......9D-..R......m.h.....5..wM........KZu3....h...g.z#t&~:.'..`...31.3.7T#.i.t]o...[6.\|...P,....kp.....j5...Jt....;...#.....X^Y.3XX0^.c2.m..\|i..J....b..g.F.(..7_.U...R..e...5..)n._.....gp22.'#.].my....@...B]....l.....z..,......#.....?po3......+...`..\|....rXF.........:.....zU0^...[...D'}...]v..b.8..3f.fQ....s..F.....e:....p8..s.........S.qc .D..A..aT....?...'..r...E./jXk....m...^ds..p.=.q...".z0.4."....6...v...,..v.N...Y.4.<'U..`.E...Y.G....o>.n.g....IEND.B`.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_rounded/loader.gif
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1376
Entropy (8bit):	6.7575529024702075
Encrypted:	false
SSDEEP:	24:+Aw1hpunQWwh82lYSKw86PVAT34yJ3V7P3YGXKtgLmlS+cuc9Uob:NOitvnLZ8SfJ3VgsKtgLWcF
MD5:	BF55EA7DEDE2004166DC4024C5B5528C
SHA1:	2BD1C91D22805DB7E36176439DA03F8167B19753
SHA-256:	0BAB08FA3983682B543C484A6A891D0ED725F83FF3E81EFA42A198546C4DAEA2
SHA-512:	41A7174F0E08A68E7C91C0D7A1696DAE672869054A6755658D00202946C58215A55822ADD1700441BF069E54EC12A8439CFE760739DC912632504D71B52CAE1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............e.....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:D3B1BA5F3E8711E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:D3B1BA5E3E8711E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118BF2F6B511368090" stRef:documentID="xmp.did:07801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.H.>....IDATx..j.P....A..Q..<.Ppr."....Q_.P...J.1

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	5.425096430213049
Encrypted:	false
SSDEEP:	3:yionv//thPlbdoilmG9RthwkBDsTBZtBdzeD9hjrf+Feup:6v/lhPUujnDspBkJ1r7up
MD5:	2F2D883AB9986E7EAA9F1CBA98E2BBAF
SHA1:	1EA305FA19E1071DEC6BC59BFE772330FA1025F9
SHA-256:	0BDAC66EFBB11777D972F6A5211490E346D4D82776184DDF7C8040894E1E3A66
SHA-512:	41FFB4F859443C840E999616BD02C7B40374AA7C2F0BFEC2E08417B43AA182A3ED586BA4170D47766E018F8CEA610FFBE11DFEEDD6F4F4497E26CC793795E49F
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_rounded/contentPattern.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...$IDATx.bd``..@E..@e0j.....8j.P1. ..:...o.2....IEND.B`.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HaYn:6Yn
MD5:	6241DD51A29733D37546AB721079B16B
SHA1:	F4571CBC92A92463765EDCEAE58DC78816E4AB10
SHA-256:	AA052E3CB6C53C30FF64D297EE825183381E5B38EFD53484C682F0A7C0693602
SHA-512:	6D26DF12678F57D12CE76591AE7998352148F645F6B36EF8C07E785811DA68CC05F7006A0C4A0395626D3D40A8AF6319F984924C4015C48398A7311CD03C3498
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn5TdCGtEQvAhIFDUUFoso=?alt=proto
Preview:	CgkKBw1FBaLKGgA=

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1088
Entropy (8bit):	6.15566902138109
Encrypted:	false
SSDEEP:	24:gXL1hpunQWwh82lYSKw7wnJVST3ZyJ3Vswe7wQGP1pWt:gXxitvnLLM0J3Wi1E
MD5:	8A81C8CB281B60DDAB235429D89F509A
SHA1:	0D6C5522CD89204F01ADA6BBDEC6C0996FEAB7DE
SHA-256:	795076D9D0095EA402591EBA36B8B05EF59FDD2A84DE94EA18F4453A3A239332
SHA-512:	572DC4DCEB4C89F17C24C0624F14A7012D3F50E198CFB6F944C240649D116D019FFB680B43DE66ADC1E65280C5C091204BBFCCAD29D82540E4545597EF5E5D43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................H....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F6B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:336DF674F80E11E0A4428A28A090C1EB" xmpMM:InstanceID="xmp.iid:336DF673F80E11E0A4428A28A090C1EB" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6B917B0AEF7E01196EA900CCD9DA82F" stRef:documentID="xmp.did:F6B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......rIDATx.....!.....k{.g..Qw..:-..T...!p.K`.*

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18158), with CRLF line terminators
Category:	dropped
Size (bytes):	18264
Entropy (8bit):	5.53612889231756
Encrypted:	false
SSDEEP:	384:5lmmVWa0uWU7NJp+SpD+Ap64ZMB/RGt81DT+CV:5CSx1ZqMO5V
MD5:	2EF30245466E5023C2187D138075CB5A
SHA1:	313F78EAE9B872F98FB188AF4675E99A40DA90AC
SHA-256:	27D7D958C79FE067447031F573E4B3296A3021169F6F7668FEDDDBDD7390A158
SHA-512:	2751AD32038BAD4E07B45050E53FA62130F4ECC2CFB184D00E9729016EF12B8116F87609EF04EBA3457C05E59195B4FC7D68B86ABBDB059E3ACF9DE50395375E
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (c) 2009 Simo Kinnunen... * Licensed under the MIT license... .. @version 1.09i.. /..var Cufon=(function(){var m=function(){return m.replace.apply(null,arguments)};var x=m.DOM={ready:(function(){var C=false,E={loaded:1,complete:1};var B=[],D=function(){if(C){return}C=true;for(var F;F=B.shift();F()){}};if(document.addEventListener){document.addEventListener("DOMContentLoaded",D,false);window.addEventListener("pageshow",D,false)}if(!window.opera&&document.readyState){(function(){E[document.readyState]?D():setTimeout(arguments.callee,10)})()}if(document.readyState&&document.createStyleSheet){(function(){try{document.body.doScroll("left");D()}catch(F){setTimeout(arguments.callee,1)}})()}q(window,"load",D);return function(F){if(!arguments.length){D()}else{C?F():B.push(F)}}})(),root:function(){return document.documentElement\|\|document.body}};var n=m.CSS={Size:function(C,B){this.value=parseFloat(C);this.unit=String(C).match(/[a-z%]$/)[0]\|\|"px";this.convert=function(D){re

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1493
Entropy (8bit):	7.0585085663684906
Encrypted:	false
SSDEEP:	24:s1hpunQWwjx82lY2T32HEVOag8yJ3V2AGNn7VOv3ocUiZzOQda4TVDqRrOH:SitNn2VQvJ3HmnhOvxrRXF1
MD5:	E37020BB94FDA837BEC5B5F96F048CF1
SHA1:	0D408CD0660F4D88F7BE1821F55CB2DF273392E3
SHA-256:	4FD7E32566D03DE28EF1D6CB12667F535282CDE584867E25B44B2B98E9A74C8C
SHA-512:	19E199E6C25C8B5D0EBB67FBBB7CD58586FE40BF122563C7C19691440C23D07E54BC2F00FC30514717DC162BEA7C867FF9ADCBCE21C1971E6BB2F8B70A715C81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:072A78F3F73B11E0B861FA327851256C" xmpMM:DocumentID="xmp.did:072A78F4F73B11E0B861FA327851256C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:072A78F1F73B11E0B861FA327851256C" stRef:documentID="xmp.did:072A78F2F73B11E0B861FA327851256C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.[.....KIDATx..X.n.1..)..q/..v.GlH..6i=.j.$.`.j.G..7Y\|^./...l.@.....em.*..y>[.A...v.\|n.O._..s.GA......Fs.(0P.........

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2826
Entropy (8bit):	4.364911624922898
Encrypted:	false
SSDEEP:	48:L/wqQNn2xBAJJ3ucZzqHf9zstZqHf9zstZzqnzstZzqHf9zkZzqHf9zstZqHfE:9Y2ffM
MD5:	C97655D7CC6DB013D998420B3A55A8D5
SHA1:	AE59DC78CA76F210FA240346C4DE27629892EF27
SHA-256:	D392BE6003EE931C1826607B4BA4980166AE55EF1F0028E78C419A1BF7F7C468
SHA-512:	B1B3D1AEF557E9071F943239298242D7D5BF15C408220FD8692E45D6F5E632CAD1F3837EB7457DFD28597BCC9BF8D6B332924CE65C731EA0DCD0165DB9F860BE
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/slide-overlay.png
Preview:	.PNG........IHDR.......r.....:K......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5007387BE54D11E29AD8835B9F4D1317" xmpMM:DocumentID="xmp.did:5007387CE54D11E29AD8835B9F4D1317"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:50073879E54D11E29AD8835B9F4D1317" stRef:documentID="xmp.did:5007387AE54D11E29AD8835B9F4D1317"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]Y.....~IDATx...A.....0.....!....I..........0....`..........................0....`....0....`...0....`...................

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 60x60, components 3
Category:	dropped
Size (bytes):	1790
Entropy (8bit):	7.708571043916374
Encrypted:	false
SSDEEP:	48:5fciWgbuERA1I8yT2E+HrVc9uVg7MJ+p1RNYT6:lCE2IUEiVcMZJS1ke
MD5:	4E6EAC723650FA4333B986A0929650B1
SHA1:	34A481FBA386B6A12353B862402FABFE35DF800F
SHA-256:	51A65D15D0A167CFC3450557D3BA7EF76E2DF4CC1E2B3A78F56F64684762A5C3
SHA-512:	E260B4CCB4F0533B5F23B8859C6BFF38823AF196D87AD1AAAE2CEC54E6538405AB2492FC12EEE102082E354E4DA911F0405FE27E86BB5DF978DAAF90368D80C7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......<.<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...S!......sZ...D&.\...m.'...X.o<.,...f<.My.oC.....7O..G....[T..T...<.f.#.E?.{V...PA..M..v.0.).....0ON....~..O/\.c.XPz.....+....b<.......1.#.^.zW.C....4.z._./.h..G.<#....wd..eW.`....C..?<b.......3B..tmZ.$.#...K...aD.v..OL._S.j0.......V...r..>...^).P\[izF....G...y..()....V...]U..x.....P.J.I,..4.o!.#.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	7.8536903297611325
Encrypted:	false
SSDEEP:	48:5Npa9j9OdonXW2Nf4FSOm0VkIVcfble+9Txo+V1nN3FwUoGMVkcTgAwnKsqi:7Y4OwFSONNcfbsA9NBzhorgAcqi
MD5:	1C790FE253FE185086C70F8D26A44466
SHA1:	90000F3B0627327F71F3E475B3EB176E09CC0475
SHA-256:	9CBE0B59D56ED3BDBCB0B63002334C611D574F2FB2496D436D276F4860D2D5FE
SHA-512:	F85336AE234A21A4DB0CD50D092563C9018E9BF49F29A24F88766D741C03D42CA9627BF7E132B77A8123C100F6FEE8FCDC3B7FB2DF8A3F1743D6C3616C02A2EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....k..O....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<.....IDATx...Ml..}....+.....%eJ$-J......j$5..5.\..0....E.......R.m.K...K/5\4...i.....I.$[V-J4EJ.E...r_./......RKI.-....9....<....y..^...6B.....B. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(..!......A.E. ."a.B.0..H..P$.B(.vW`+O..3..B...l.~6w..R.....axj..#..,...H.na.......4~.[`....=0:2..=.L:I.m_...5zp.u.8:....B^.p.:2...=O.T..~....q...b..m..k..].\....x..xY\.R.m4.m.T.u...q{.....X7....T.z.<.A...i...l.o*...t.<..5......@....SQm.....\,.sm...:....:v..8.Tmi..k..}~V..-...7].y}.j5R.E.\....a..C.........h4.n.K...S.kUg.W.>............^4..K..../.a.C.Q.[Y..y...0.......EN,/..x.!...0.o^..y.<.........m...R.;e.....x.....'04......C;.z...vnm....H...l..O.p.y..y....xx..7f.xf.8..c<7...F.P.,~x.m6.5^=..Q_..R......o......M.7...l."._..o.M./......}.....k..m....yyzS..=\|s.....m..M%W....w.j?w.t.4....g...

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4432), with CRLF line terminators
Category:	dropped
Size (bytes):	103058
Entropy (8bit):	5.317228137929507
Encrypted:	false
SSDEEP:	1536:MNx1Nx6IX7yqCDmxgGaWU4w4F13DZotL6aGEfM/JamvLv/psq3d709YNq3yY8RZb:MNzNAIXUGahPo132tL697LPd7/oQHp
MD5:	733F8D107E2A302A2DC57DE48FEC01A3
SHA1:	94FB671541C919CBCD19B31B5670D131361DC799
SHA-256:	87E816B9B8F3CC79A411E39BB35903F0E28D221BF8E18C1029CA556D494BB02C
SHA-512:	3C6FFC3C5FDFEAC2A4EEEC645E24500FA9891AA780FE72518C695EE4E682D3CBEEF0414C97753EDEDCD844969184193C8130E95A94DBAE3A3E10467E7AA707D2
Malicious:	false
Reputation:	low
Preview:	/*.. hoverIntent r6 // 2011.02.26 // jQuery 1.5.1+..* <http://cherne.net/brian/resources/jquery.hoverIntent.html>..* ..* @param f onMouseOver function \|\| An object with configuration options..* @param g onMouseOut function \|\| Nothing (use configuration options object)..* @author Brian Cherne brian(at)cherne(dot)net..*/..(function($){$.fn.hoverIntent=function(f,g){var cfg={sensitivity:7,interval:100,timeout:0};cfg=$.extend(cfg,g?{over:f,out:g}:f);var cX,cY,pX,pY;var track=function(ev){cX=ev.pageX;cY=ev.pageY};var compare=function(ev,ob){ob.hoverIntent_t=clearTimeout(ob.hoverIntent_t);if((Math.abs(pX-cX)+Math.abs(pY-cY))<cfg.sensitivity){$(ob).unbind("mousemove",track);ob.hoverIntent_s=1;return cfg.over.apply(ob,[ev])}else{pX=cX;pY=cY;ob.hoverIntent_t=setTimeout(function(){compare(ev,ob)},cfg.interval)}};var delay=function(ev,ob){ob.hoverIntent_t=clearTimeout(ob.hoverIntent_t);ob.hoverIntent_s=0;return cfg.out.apply(ob,[ev])};var handleHover=function(e){var ev=jQuery.extend({},

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	974
Entropy (8bit):	5.981717240770614
Encrypted:	false
SSDEEP:	24:n1hpunQWwjx82lY2T32HEVckSuNk7JbNOyJ3VcVU1N9JRNLGEIh7Uaj:1itNn2V8dJ3LXZcgu
MD5:	B8C17A650D40A984D3CA43CA3396B364
SHA1:	231FF00F8E2C8ECE4F8FDF42B8717A0967C66BAA
SHA-256:	BCCBB2C24E4B7AA2C9AB3975A7B57688E26AF0106EEA65E2706AAB2C221E3BBA
SHA-512:	109E6B6F93525EEC3AACA3167F0225C37F5D8F41FC8D155F17D43ECFED1D55D3BAF00A9AFF9E4A6ACA694EB9CD72A9B6B88BDDAC25C7ABF74356508BCD7F8325
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/button-highlight.png
Preview:	.PNG........IHDR.............;......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0B0B2473FE6011E0A247FD9598EE331F" xmpMM:DocumentID="xmp.did:0B0B2474FE6011E0A247FD9598EE331F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B0B2471FE6011E0A247FD9598EE331F" stRef:documentID="xmp.did:0B0B2472FE6011E0A247FD9598EE331F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>q!.J...DIDATx.<...0...M..Y.......Uy..1kN2f..]?5I...k...eN8..U..6Xa..3L....nI.n........IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	7.588524544622904
Encrypted:	false
SSDEEP:	12:6v/72riDDnpckqK2QnveEdJOQV84HmwrsQ8L0syi3zh6RormsAbA45z/N:3ivpck5XcQCKsQ8gsyZzs145rN
MD5:	8A4651741A25E75C9FE402C1228A8DBF
SHA1:	71438ADF82244A89FBD55C4D03C9E17927FBE73A
SHA-256:	440200E0E7DE0B4C8C4FA1A0F364642316560116431A61CEDA540C6F555E38C5
SHA-512:	624F02419134AC8ADE631235486548E09B17D91751B6AA21CAF4CD33DE4B230B709415986D2E6769AAFFC94A7904A8B412CA608A31D55F5A02AA830EC7BCA3BA
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/cross_circle.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...sIDATx..Ko.Q...3.t..)..b.....6MlMj...q.n..\|.~.V..$&]...E.6.G....,.Z.,...0.<<g..h.9........s.uY....q.......I.....6......O.T.U3.Cz..s7...E1.[^ND.......$_]..NO7.._j...wS..aqnn...v..8Q.uP...g!..c.`..`.?..M.' ..Bvuk+.eq!..^.7%...(.I133Yb..t.s4.N\J.x.P.....$I..M..I."....}T..........N..&..R..`..=.e..wa........ ...q.Q.a.....z!..A.T.z.n....a.Ni8.U..b&3..'4LW.,...,...<o..D.Y.......\j4.V...a@..p..8...... @...L..s...........ue.6 mT.....C.A.g.]...L.O...s..d.N.c<..i.T.B....o../.f.oY..u...#j.!.G...d...C....U....m..0...'.<..@A..1(kZ..i.3..x....:.t.AT....4..<.C.m.pj...'..\..CMT.Y}l.8...x....!.Q2.._...n..fZU......IEND.B`.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1405
Entropy (8bit):	7.819104626920053
Encrypted:	false
SSDEEP:	24:C1c9/T8Poa88GS9fxv6MGC0qWvBtOEsNrvrwQlCsVAZHmKKMOf:C1ctIvP7BGC0qUOE49CaAZHK9f
MD5:	8B8CE7DA7146B46A7F80E6218B6259B1
SHA1:	BCB01B9377D915342CAAF82604E73AA5462B8A4A
SHA-256:	969B6B07E5C708BE9B75A472FBD033D21EB01E84F9CF675AF5582F2ACDC6C8AA
SHA-512:	430A55B3FA708088893904A98CED6F24799588E2649344936F160B6C4D4CF3E384E360870035E74DEE6E00DA5A083B8BA78210A25DEACA91D6B0AAAA218C37E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........v.V....tEXtSoftware.www.inkscape.org..<.....IDATX...[lTE...s.{..m...JD...PK....E..x!&x{R.hT._L..Mx.F}C.....L...b@.ZHZ@...[K.e[.[....{...mi./9..\|3.\|..... ...P..!f.#...D..[(T4..X..z...}}}].B)E}..'.-..u..e....5.^..q............n^.h?.'u...?......5.W..w.x<.@..^.zoM..........E...k.').\|.'.s.h4.u.....^.\......v.p......NP..p..S.:.~...:...T..l..N......`..I.....a{..~..l.....6.H..' .....^.C..W..@Sbn.n....x....p[FB.+...g4.%/W...kzn.[.l,q.I..d..]......I..[.v=........v.[.8N..lk.fy]..N@.E...na..0..9.Z.-...0...:......x.6.@.).Y...j..k....7Mu.H.....cli..%fR.+..9@D.<}G.......F.e....?...R>.+.>h..1....n...i.(,..7.T...j...!A.W..2....=U...T.....bb..~2.en.QR...4V.....>..<.\|...1..k.t..t.[^......Zb..r../p..........j...8.6.?..O...TET....m.C#.P9IG..ty.H.c.^..M..@...+.V...!l...pJ..*C.....05..3.h..<~}x....2...7$.x.d.P.'.i~.q8..bK..(....3i.........jfW.Z....w.Rc.C.T.0;.(:........,X.5a..FF;[fMz....).&q.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30808
Entropy (8bit):	7.605427431729092
Encrypted:	false
SSDEEP:	768:/9sO6wRtyGjFbZdG6pSHH1z2LYZb/dglZK8:/9sVwRtCESnR2854K8
MD5:	F5106764FC6C9AAD7ECD42D0FEC3A2E9
SHA1:	D30347C68E4562C850070591E7E12FE69EE2CAE5
SHA-256:	879ECCDCA6BEF10E5AE0F45938B0DC3068FA7EC6C85BD4D440D0AC21A6629209
SHA-512:	5A84FC948DD8AA1CB7415EEBC4183F923C64AC3B8C686CA17526ED53D05892CBAD6CB4B970D000FB190CC3D6246D38E266FCEC28EB8B1219E7E165558C629467
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............M.......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:07F61AA0E54B11E2B80991BE7862150F" xmpMM:InstanceID="xmp.iid:07F61A9FE54B11E2B80991BE7862150F" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:338745D64AE5E2118FE4AE946BB41E5B" stRef:documentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......t.IDATx......u....l.^...r.....#%....Q4t.E.......

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	974
Entropy (8bit):	5.981717240770614
Encrypted:	false
SSDEEP:	24:n1hpunQWwjx82lY2T32HEVckSuNk7JbNOyJ3VcVU1N9JRNLGEIh7Uaj:1itNn2V8dJ3LXZcgu
MD5:	B8C17A650D40A984D3CA43CA3396B364
SHA1:	231FF00F8E2C8ECE4F8FDF42B8717A0967C66BAA
SHA-256:	BCCBB2C24E4B7AA2C9AB3975A7B57688E26AF0106EEA65E2706AAB2C221E3BBA
SHA-512:	109E6B6F93525EEC3AACA3167F0225C37F5D8F41FC8D155F17D43ECFED1D55D3BAF00A9AFF9E4A6ACA694EB9CD72A9B6B88BDDAC25C7ABF74356508BCD7F8325
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0B0B2473FE6011E0A247FD9598EE331F" xmpMM:DocumentID="xmp.did:0B0B2474FE6011E0A247FD9598EE331F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B0B2471FE6011E0A247FD9598EE331F" stRef:documentID="xmp.did:0B0B2472FE6011E0A247FD9598EE331F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>q!.J...DIDATx.<...0...M..Y.......Uy..1kN2f..]?5I...k...eN8..U..6Xa..3L....nI.n........IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.856807876054071
Encrypted:	false
SSDEEP:	3:zIRBEBc2LGRNajmQfKi8F9LxMyff/tR7RNcIwJyNofkGYKuKyVvn:0ULzmI8F9LxMQFR7RnwwuFuDF
MD5:	DFC3574CFEF7E596238AB2C14539F207
SHA1:	10F5DD8FC6B71DC4AAE352FA087C56740F9AC775
SHA-256:	3D5DF17532EDB15E01AE547D6936DF770D6474668D56B82B649EDF8241F5804C
SHA-512:	A18AF16F65BD783624B74B9BDC669E23E9AC207C7C24E008365E1812C54DDA3A360859C3360E0D50F2DADE82CCDB873E25E95C37A6E93EBDC3303094E0C237E2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/main.js
Preview:	$(document).ready(function () {.../...$('.simple-drop-down-menu a').click(function(){....if($(this).next().is('ul')){.....return false;....}...});.../..});..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	3101
Entropy (8bit):	7.537817306457639
Encrypted:	false
SSDEEP:	48:oitvnL8Pl0J3FO11VBw4cwo9B/BXlGx2t0cyMEj41z/Hhi:L49SO11VBw4cdfGx271w41DE
MD5:	755F71B4A1669C290E05478216337D76
SHA1:	471572EDB8BBBED812C8821AC6755DED69037D2A
SHA-256:	3964D464AE705EF77CB795B9FF64A918529D57395BB19BD846DD1417B48A28C9
SHA-512:	7164B9AF55C38F1B9D7B8A483351465966373987AFEABACB0565CDF6D06960F482AA92AD14A53C011B0F82E0416B1CE73682834D458CAAC815288DDCD55A59A6
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/maginifier-light.jpg
Preview:	......Exif..II*.................Ducky.......d.....mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F1174072068119109F8FE27718D5A" xmpMM:DocumentID="xmp.did:A6D6B3B40DF611E1AE4CAFBAA4C2A751" xmpMM:InstanceID="xmp.iid:A6D6B3B30DF611E1AE4CAFBAA4C2A751" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D1C87E325206811A6138A31EE5F34E6" stRef:documentID="xmp.did:F77F1174072068119109F8FE27718D5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18158), with CRLF line terminators
Category:	downloaded
Size (bytes):	18264
Entropy (8bit):	5.53612889231756
Encrypted:	false
SSDEEP:	384:5lmmVWa0uWU7NJp+SpD+Ap64ZMB/RGt81DT+CV:5CSx1ZqMO5V
MD5:	2EF30245466E5023C2187D138075CB5A
SHA1:	313F78EAE9B872F98FB188AF4675E99A40DA90AC
SHA-256:	27D7D958C79FE067447031F573E4B3296A3021169F6F7668FEDDDBDD7390A158
SHA-512:	2751AD32038BAD4E07B45050E53FA62130F4ECC2CFB184D00E9729016EF12B8116F87609EF04EBA3457C05E59195B4FC7D68B86ABBDB059E3ACF9DE50395375E
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/cufon-yui.js
Preview:	/.. Copyright (c) 2009 Simo Kinnunen... * Licensed under the MIT license... .. @version 1.09i.. /..var Cufon=(function(){var m=function(){return m.replace.apply(null,arguments)};var x=m.DOM={ready:(function(){var C=false,E={loaded:1,complete:1};var B=[],D=function(){if(C){return}C=true;for(var F;F=B.shift();F()){}};if(document.addEventListener){document.addEventListener("DOMContentLoaded",D,false);window.addEventListener("pageshow",D,false)}if(!window.opera&&document.readyState){(function(){E[document.readyState]?D():setTimeout(arguments.callee,10)})()}if(document.readyState&&document.createStyleSheet){(function(){try{document.body.doScroll("left");D()}catch(F){setTimeout(arguments.callee,1)}})()}q(window,"load",D);return function(F){if(!arguments.length){D()}else{C?F():B.push(F)}}})(),root:function(){return document.documentElement\|\|document.body}};var n=m.CSS={Size:function(C,B){this.value=parseFloat(C);this.unit=String(C).match(/[a-z%]$/)[0]\|\|"px";this.convert=function(D){re

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2456
Entropy (8bit):	7.889708035419822
Encrypted:	false
SSDEEP:	48:SXa90/hBcp/h46Pk/JOXdY/u4UTwUZm5CuouxXgyPtjlxIS1:SXdLcbTsROXdYCwU/tuXztLt1
MD5:	DB6515CD7690422731591D5E5A6D3BE4
SHA1:	18C2AE8EA9790FA6787FCD0373D7BE691BE2BE6C
SHA-256:	DB1562FFDB17BF3239EF7F30176897967EE9D3AA1F96DBB2E0B5807F4F5CA2A1
SHA-512:	719EC5BD7A532BC9D7038B6C567EFFD9866F72EEF619B4F97F3120F467563DCC287F962B30214947F4766C89E71CA219CCD9CA616E3DB1393C941AC0FBC787FB
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/djukebox_front.png
Preview:	.PNG........IHDR...<...<.....:..r..._IDATh..M..G....].3._.u.....$..m.H.B..B..'.C.H.H.......$.@.8..!...K$.....db.........sfvz...9.j.._UW...V.T....zU=...T..8.S;v]...T.bS......P..w.u6.(..\/....u..G...JQ..g2..jceX...-?....8e.U5..&..(.g0.ej.U.GU.......)h.0..S..{Puu.Q.0..I1].:Lu.:..$u.zO...5....m....$[.......n.S.){.QYVW...K...Vg..m...8.H)..i..A.$2?...)F..F......y^.^.F=..fM..)..l..%."..C...DQ..q..9z..z... @...g..Z.4..SW...g..#.C..cL&...d2AQ......1. .E.6.EQT..eNM.3..EQ...i.\|..8./.y^fL&.mT.)P..R.W....a."..R=.q.y.\|..$.i.y..\|^..l`+....M.....q...iy..yd.J.sm..S..4..m..<.d2A.....\|.0US....q......Ja.l..r.1...EQi...]....EQ3S.9.T...!2,e...\|..@.@.......4Ujl....>.9.^....u...W,DDf.I.uT..L....M...7.....q..i...,..........y......V!uj..6....S~........vy.....0;.A7......_q.....m&.:....r..u..E....,..;...-L&......?{.O.."...D..5l...5.].E.e..u&...L.......0.2y.<.{{{H.....x./.../...O.G....1......E.....9.o....u.,e.B...`0.G.e........}.9\.x...x..~u._..%.o.../...>...sHn......

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 960 x 370, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	341389
Entropy (8bit):	7.98850102990836
Encrypted:	false
SSDEEP:	6144:Qmi3ekZGNDckgLFOgOCEAWIiv1SIAwiePTOOobhRoFDq7D8nzco1oy0HNw34GQAX:Q3ekGBckgC/Al21vfih/hiFD0QLoyANG
MD5:	F444BC349218AEBADE31072B1E464682
SHA1:	1DA2786DE6B0280FB2340EA16A389F7474B51F35
SHA-256:	B7C19E2A89D4B81316F05B1A46F97716BB0154E2C99B158131487AEBFEA403B2
SHA-512:	ED79772326D64F023D9EA2AD4481B71247907DBED64B33CE8109D979185EC9921B6D22B82BCE477ACB64D51D4B58891095267D254E4A8C738F99E75995CA44B4
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/uploads/slider_umzug.png
Preview:	.PNG........IHDR.......r.....:K......sBIT....\|.d.....pHYs..'...'.....f....tEXtSoftware.www.inkscape.org..<... .IDATx..g...}...0i......,..T.(Q..uW...C9...N..J...e.V.;.w.........GWI.e.J..MQ"H*.b&....x..M3......... .H.O......t..............m[....x<.....x<?..=zT.m..x.+v...x<.....x<....\.w....\|7...x<.....x<.s........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<.....`....x<.....\.x...x<.....x<.../.=.....x<...sQ......x<.....x.....x<.....x<..E........x<....(..........c..Z{....x<..............x<..G.....n....x<.....\v.e...^.{<.....#.djj.\|7...x<...,...y}.....x<.....x.....x<.....x<..E........x<....(.....x<.....x<..^.{<.....x<....g..x<........R.!$R.@t....(..D1w-\w..YC.60yF..H!... ...E1.V.@..s.g-RH..Xkh.)QR"JJ8..^.._.-..n..E..{.iZ...J.Y+.I_.;

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_rounded/btnPrevious.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 80, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1365
Entropy (8bit):	6.681171889178052
Encrypted:	false
SSDEEP:	24:k1he91Wwh82lYSKwxqCiVSCdT3ouyJ3VkmGDaEKEvIg9QTu5lE:qqQvnLnCicCdIJ3bIVvI0au5+
MD5:	C7F0D3375638022B9812C23AFE4D8DAA
SHA1:	0FE9380268AC0E136EE6E3AE802CED0A9835CC13
SHA-256:	01E0E14D43599F4DEAF26B4DF24FA8D50255EE37AB9A33ECA454A776011CACE1
SHA-512:	6B4FE18D73630BDF585966EA528664EB992A88FF840033AEEDCE3201916FDDCCFEE144DA7F35EB946CBDABC4B668644B34160E167C5FAA261A36409A65319EB0
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/sprite-menu.png
Preview:	.PNG........IHDR.......P.............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:348745D64AE5E2118FE4AE946BB41E5B" xmpMM:DocumentID="xmp.did:F2DD9A92E56411E2A594A053E3703C48" xmpMM:InstanceID="xmp.iid:F2DD9A91E56411E2A594A053E3703C48" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:378745D64AE5E2118FE4AE946BB41E5B" stRef:documentID="xmp.did:348745D64AE5E2118FE4AE946BB41E5B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx...AN.0...I..\.q..H.....ka.#\|..m+....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	25511
Entropy (8bit):	4.857526227218579
Encrypted:	false
SSDEEP:	384:vAeacyiL5iLLemFn79itCNtCbtCSwhiMhIXJc:YeaXS8BhiMhIZc
MD5:	B0DB0C054C174D4B4F971C1B71D0F4F0
SHA1:	AC129AEA443594F188F939CE74F1FF92F48648DA
SHA-256:	34F701D368FB150B10C8D38803367FD55AEF1221768EF7906BF06CBA2DB19535
SHA-512:	30F10AC3BBFC3BD1A56097A97250A13C758991A0F989B341C7CD8DD1A08A1E4C9754DD42E1085E307DA2A48C282A8694C90A50B49E65F89C373F9C9FB0A04C2A
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/jquery.nivo.slider.js
Preview:	/.. jQuery Nivo Slider v2.6.. * http://nivo.dev7studios.com.. .. Copyright 2011, Gilbert Pellegrom.. * Free to use and abuse under the MIT license... * http://www.opensource.org/licenses/mit-license.php.. * .. * March 2010.. */....(function($) {.... var NivoSlider = function(element, options){....//Defaults are below....var settings = $.extend({}, $.fn.nivoSlider.defaults, options);.... //Useful variables. Play carefully... var vars = {.. currentSlide: 0,.. currentImage: '',.. totalSlides: 0,.. randAnim: '',.. running: false,.. paused: false,.. stop: false.. };.. .. //Get this slider.. var slider = $(element);.. slider.data('nivo:vars', vars);.. slider.css('position','relative');.. slider.addClass('nivoSlider');.. .. //Find our slider children.. var kids = slider.children();.. kids.each(function() {.. var

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2910
Entropy (8bit):	7.903879985147939
Encrypted:	false
SSDEEP:	48:mNyDuPXbA1SKMWFftJLFKYlTGNPlYrqBGu5/h/9FKJofa2jUUJ7RmZhIDRi43hEy:mNvj6SetJjGkrqBh5Z/90of7juhL43hz
MD5:	630563EAF606C623E50816F5345937D1
SHA1:	241E57A64C06090667C2AFBDD74EA1A2C0198C20
SHA-256:	2D1C130FC7E92BF1348AEEACC5CB0B42107631AE305BE12649C6A6DD96997BE7
SHA-512:	CC681AC68993F163AF23B994D624C9450DC3FB54196CCBA779BB6220FEEA5CE1C88DA4DE5815CBC4254A29B283965D137C87CD31EA18E2AC747418BBFF9B4C39
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png
Preview:	.PNG........IHDR...<...<.....:..r...%IDATh..[M....~..........r..D8....''..\.H.(... ?!..p.R....".......K8D.H,.....e?...tw.9TW.[..3...QJ.....z.....5.9.........{.....0>\|....H.....3/...B}?CP...@y%.h....hU.%U...#..e.R.>.q....V..p...LS...m.{... .CJe.....D.........x...()...H%...r....@U;..T.\|~..E..uv..P...Nk..#......!.........gK.V.K.}x`..`.a.p7...'....H!.....`..@....:.}."..{N.\|.q.-.c(.......=v.^.f..k..........L.^G.a.T...0pU4n........N....T.y8....$C.$..}X..N.HI.S....u.vf...S{.(..^.0......To.4p`i.F.HG.r.L.{g.......Y..a...QR..K......i....4Q....E...\|.x0}..8U.^#.IM1T.uK..4D....\... 1...$BV.\|.!......7."..pJ.F..8Y`6v).`.M..R/N..0.u.....E.MS.U..V..,6K.I....*t..?....R&..]8.=6e .ee.s:..VAOv..m.X$W....HL.qL...........%.a..7........<QYH...x....A.W.`..C.f6<..4.\b~.U.r......\....F....>.lX../.r.4TeZ..2.. .P.....NPY..x.Z._\|y..6...1o.(..d;.fY.s<.Q."Ua.P..T>Q......m.....\..A+@+.h..5.RPJ.K?.O........W.5...O..X..pg....%`...U.Wm...Q....G...(.X......;;...>......TE...\...m.v...

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 47, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	828
Entropy (8bit):	7.6152199453865315
Encrypted:	false
SSDEEP:	24:pQFzTNZnwKSZTg+irervixbDjonlGyrW70yM0:pQFzTN5w2qinjylJW60
MD5:	B251170307BCB724AC5B4E97482DC6ED
SHA1:	910E491867242AE45AC7E3E670F8F3911CCD23CA
SHA-256:	84DB4592C7E89984D8AE40F81B779D97B6BB55D4741BBA4329033EC4F854C1F1
SHA-512:	2D3979F69F666572D54E65B2091D07787440C4FCD7775B702BA2DE9F2BD55776001E235E4C757B7322F2B41995749332FE3209D63171444F212D58EE68645CC4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9.../.....Y.b.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?hZA...i.5..ZBm.C.X..v.PZ..J.....M.A]2Dpi.. . 8.X..C..R..1C....bjIk.UJR.....RHK...{...]n..}....y..F#.?.8.f.....6./.mBi...n.?.k\|......x.<...m.:..Y@.......4.W......o#..=...x....">N+)...@l..RJ.H..N3...q.@.!65G.id..D.9.(.4..y..D"....U..c..M..{.F....B..~..V..C...Z....B..d......,..(.....h4.V.h.%....M$..T....B...N.s&..>.h4.D.r.3&f.f.....") 3.:??....O.Z..''A .V.T.X\|...b...!-..d.TZ4..z.Vr..&..\.\~h4.g...B&.I..l...F....T..zC..N....L...-$V...w8..V..#[H.Z...@_...].BbU...n...v....kss..r.^.z.....~@..!}ooo_.V.eq...;p.\|..d.....Z....`p [H.T.XYY...d.......`07..G...Z[[....uX..4..@......Z*.$[H....~..k....$.-F![$.[.Bn.@.b.]..;8n.H.aW..\|..&.'..X.....;V..~0w.6tT."5.{.~..:;9......0.c.UtT.?._...3...'tB..o...../.......IEND.B`.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4439
Entropy (8bit):	7.925020351886879
Encrypted:	false
SSDEEP:	48:9dmz8Vsn3R9+k9EM9HGYJdezUa8cGLHXmvoRn1Rdlt2TACtIm0rSa+ed+iWPAj7K:Tmz8QExYr9L39zRfoTNSmaCi35bf4x
MD5:	A005A2C797F685D4F939DDAA27E35148
SHA1:	0194E8A63B1936228B814C4432F247065B206FF5
SHA-256:	13046D8346799AC822028FE0B3E8DCBDFACDB8434A48CE6BE9687695FA895C8C
SHA-512:	47912B9C14B32AB919E7F0282FB1F735B5397413BAC89FAA3868C3BDAC30D3EA61BC802C5F6C9D59EC669348341C07EC394E5B7549887F68B5C5926D4946A8C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....IDATh...r\.u...;...3..B..$.n.T[......#...^9.o /.s8...x'......v+4..#..n.$.....<.)3..U..@.S.G..9.y2O...%..C.a.B...d.2...tz1.....m..@.Jk0`Y.c.Z.I&c..h.....l........Bp&..I&........}.......XZZ..h.$..R...5vvv.R...q..1(..}.8..,.)%.F..q.V......&"...k#\|.4.1..\|......q.#.dkk.....Hi0.p..u..>\|.R.....y.....aH..\.t..q..o..z...R....._..5.e....+.2..!./_&......\.u...(.qV....M.3....E[#.FZ...G.).......b...1..h.t..'....ZS,/......w...A......a..'O2b.6/n.{Y#.1$Q.2.KJ<.;Q.._.=....Q......~.....>..w.......9..@\|....?.7..)...N.....2O....0.x.s.Zm...O...l.X\,L$vT.(...mYX..R...........j6....S./;\|QO....N."....}d...A{.........s.?...I.;..../..,.C8.x.t..D...[.i...G..P....qmI..D`...'...<..C....lo_BHI..#....C:.2..S..m.v..[...f.%.......&V.U..H#f.x\|...>.).$.......o.A#h.6.89D....,h.q...&.T..eq......Z...q...t..%..m...4.5l.'m.q..u.n.......[O.N...H'@..V.F.Xn....4DZ.NPD:.$.L..R.n..j...?....N8...7..$J..w0...90fBb\.4y3...q..Pa.."...K...,7.!I.m.m.&

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1700
Entropy (8bit):	7.823521519901636
Encrypted:	false
SSDEEP:	48:C0aTMscLpq1+Zb/qyFfKxaJnpzEju9GBuo:aTMscO+syIs1U0GQo
MD5:	DD17DD66DC8D0867C02D6637BC9CC17E
SHA1:	77C69465D0C81D1AAE11040553897E9A065D488D
SHA-256:	2387037BB1B126692EDAB045DC529C4B39015418F1BD5DC71060B53FF7554D9C
SHA-512:	E9ADAFE165D37D9555B0AF8265C105C78F12B642D9CFB9FAA72DAA096008F619741BD741DD438FD2F1E6CD0086D703887A5347F8DFA039439FFCB529DE9574F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........\.r....tEXtSoftware.www.inkscape.org..<....!IDATX..WklTE.=......l.}J)...<T..$B.)...b4.A$(...!`!Q.h....H."A .EP@...E....t[..;s.?v;...RHp..;w.3.;3..7s%.9...t.F..JY.p..J..fL......9.2.K...}.v.o...9GB.c.U.n}{..6.{d+.....Fu.......nj..S.x....A..J.=.h..V.%..ZY..Ir:..mT...s.\..%.#4..Qg.....^..U.c..B.....g.Y;w...=.eF..>.F..N(.@{..../ho.m........Mwka....T+.$U.F......\L3.#.:....{...k....H..b...*.xZ\L,t..Y7.h..(C\|....q.:.........T.....m]v$......2...."4U..n.Obi...R..d........Vm.<..K..)-G..<s......_..wG..r......dH....9.;.Q.[...wIC.]...u...n.5.pd. .g.t......s..7.Wc.....y{...N[.h......D..0(..........F..k.....`...:C...h....+7.sp......."&........}..TUk"..l6b.. .^xk.1q.{.UE...~....8...(.-f 6.)@=^~Z,.m....&.I.....q..g..-].J...............Q.'...S...d.DR...........6a.....mu7.b....r1.. ....I&`..Q.;.......d..X..c.$...0.#?w..5........F.#3..L.....b.N........Y.....'/>..`.....D.....c..U_...[..^.u...V.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2802
Entropy (8bit):	7.89034976047261
Encrypted:	false
SSDEEP:	48:9pz0Yvoyx9m/arteG/zWHba+sZdAvrCzh8x32RjXm:9KwmiUe+OdA2zh8Krm
MD5:	F4459B22DB83170FCD271289C8941A69
SHA1:	48247BD64707DDF242831C44F053FF7104F96463
SHA-256:	5726D4C5C83437E9FF07322002699A82210BDD0EEF4DF9833F38735455414A83
SHA-512:	84C30647A089FD47F8632739E30D8F3459EAE1D34DE94B6D9F88DAF2F1725C667CE345D5E93772AA46DFB80D8292C436CADD33D59C20755194D9A1FA47D2EAD8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....^#.P....sBIT....\|.d.....pHYs.................tEXtSoftware.www.inkscape.org..<....oIDATx..{pT.......!.).#@Q...Q.UTl..d.n.d.A4...2Vm.........c..S.m..... .B.>@.(.......G $.f..?n6.1$..,).o.........s...U..r7.. .......N.O.......,..v......'.$.q..hC..;.......$..4...I.;!V$I.=...wR>....C.$....uR^..N.!I.COs..;)/M..I.F2.Nr^....<.W...I."..9`...v.q.....0.....K.B=..L...+[.MXm.......m.,,..L.......K_.....J%e..b.W.....jK#V"~Q.r.@m...m.."`.0....(..X.T.....<.\.r...1y.....Y.iq..J.....@.............mb"....\|..L...& ..K....?..=..\ ...2.P.).$6.`<5i....CA]..c4...zb....x_...+uRh..R.}@TGo`6.ctt...X.wG.......^...c]....be......0J%...&..>.................R.!`...0.@m.HE.m.b..!~.m.X]}.8..3....9.M.r........p...{..F6}.........r.~Xm.R...39...pl...X.m-.3..xQ6..X..X;V/...b.....3.\|F.e....t.....-.5...S.M]..j..v...9_...f......`f7.0...>_.D.......j.....].4./.&%@_...+...]J........#..]....iE.^P.rrW..!.s.~Z....1......l:........_b...g).....).......~.e_.Y.P

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	7.833178636678629
Encrypted:	false
SSDEEP:	24:C1c1fa5gixWyi5Ea91gKseZXDA5GGOOXAPRfl6FYreuCAyvJ/dyryTEHf35L53Lw:C1c0LWykBtFDA5IOXApfEFY1CAyvlkcd
MD5:	AC7812F2C18D2CB7B3D43FA8A32504B2
SHA1:	7A030CFA506BD85AE7FAE22432FDA8FECCCA076E
SHA-256:	501A505B450A8F2878951637E6AF588CB44F51ADEE4F154C03156DBB2FA3EEEE
SHA-512:	F5A3EAEE17F62CFCEE04B3A726B22E5FF9C4EBE5A12C0F35033327BB60D005E766F83808DDB10422855BB2D0A51DA6FB6A9C17E63E92E28AA586F10582287A52
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_inis.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........v.V....tEXtSoftware.www.inkscape.org..<.....IDATX..ml.U.....g.SJ;C....N.i-b..d............~..Y..4.a.@..mk...F0..1.a...[.@....n7.B;3m.-...0.N.3.1Q8.dr.......s.\!..@....;UXk+".QUA.&\|..L{9.K).....t&<.h4z.@H)..K7.<..Oo..m._T...C..e.Z..e..S....S{.....W.9.....1.2.N.....-.y..=O.>X.i.......^g....k.SHe\|.d..(.~...Q.J)..f..z.....i ...$'.9s..dH..c.8e..r.o.W.QA.ZV][..F.C...d...t.<.z,.9:6Y.......U ....>. 0..Y{....r...`..0.j...(.....(.g.:.J.......B:NN.x..P..L...d.I.\|5c.$0G.3....a.Y.1G..6....E2....Y.3....OF...}.........L....1.3...D.......L.R..:.aR.(I.1...\|y...o#PS....m....=AaX........q.v...E..........4<x/..kg.'{Y....%...).L..b}+..0.n`.:..Z..z=NR.1M.w<H....vw..n......TW.P..6.....`..U.....I.......6..:L....[.qt..H%U....b^C..i.;y........P..N@`....)...#]..j.....yg.BQh~...`..jU...[.#<.Z.}[..v(......Q..(,...-b.Xc..k.. ..Q..Pq.Z.+I...K.G.....<\|...DJ.k..C.4l..x8.. ..7qh.C.50.LC.yQT...\A......oq...

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF line terminators
Category:	downloaded
Size (bytes):	21762
Entropy (8bit):	5.195773543794844
Encrypted:	false
SSDEEP:	384:rC5tBunq+JU7BQvB+ecL7TmVLztLH0wS7wr/aO1OOoV2/nDTyPimRkVVmAbLiK8X:r26/JU7yv0ecL7TmVLztj0wS7wr/aO1A
MD5:	CEECBA30B1B2A19F2293E0E9144480DE
SHA1:	97B9F7505C8907CEA18A444F4E3445FDDD751636
SHA-256:	CCCB873EACC8ECDBD7F12BE4AAAEE73689FCB80A5B784C04E7417F627F5C4ADB
SHA-512:	031F781C987665370C31F026E71E52F5D435D395E1717AA64D445DCBC108C79B90B6F4A0E6FEF6CE4040ECF41A95538BF9123A249AEA4AFC1E32561A23FC7779
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/base.css
Preview:	@charset "utf-8";../* CSS Document /......../ CUSTOM /...pagewrap....{ background:#fff; -moz-box-shadow: 0 0 5px #323232; -webkit-box-shadow: 0px 0px 8px #323232; box-shadow: 0px 0px 8px #323232; width:980px; margin:auto; }...content_wrap...{ padding:10px 25px 10px 25px; }...teaserShaddow...{ width:90%; position:absolute; bottom:-18px; left:20px;}...youtube_video...{ float:left; margin:10px 15px 30px 25px; padding:5px; -moz-box-shadow: 0 0 5px #aaa; -webkit-box-shadow: 0px 0px 8px #aaa; box-shadow: 0px 0px 8px #aaa; border:5px solid #fff; border-bottom:0px; }../ GALLERY /..ul.image_gallery..{ list-style:none; }..ul.image_gallery li..{ float:left; padding:4px; border:1px solid #eee; margin:5px; }../ GALLERY LIST */.....gallery-preview ..{ float:left; padding:4px; margin:5px; }...gallery-preview img.{ float:none; }.....gallery-preview p ..{ display:block; }........body{...background-image:url(../images/light-bg.png);...background-repeat:no-repeat;...background-position:center

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 799 x 53, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3514
Entropy (8bit):	7.6913033167730145
Encrypted:	false
SSDEEP:	48:L2LitvnLML2Lr0J3Jcv+RW4/UgqqL9Y4mf77yVSfDi9vTIDNx0EBfSnRnrO21dfS:5trnWLqqL9Ybf77BLOTiz0KX
MD5:	2763A016659890C3DFD720C737589629
SHA1:	87D5E6E42BF3D4CA03D876809B6ABE33A9B2F2FA
SHA-256:	5D890263E219E5ED47F2BACDAAFE78815FFE9CDE04B8C2A086F4481873B4C221
SHA-512:	7A21A89A2843EA5A96C29508545C9AD36DF216D533A1F4CAA19143555AEE3CB0B36132033C3182C3C0D94EDC2E1614FB3FFCAABA1233790BAED2648CAEF6D5C8
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/seperator-980-50-opa.png
Preview:	.PNG........IHDR.......5..... {Vh....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2E68354F8E511E08907D7FE5372C94F" xmpMM:InstanceID="xmp.iid:A2E68353F8E511E08907D7FE5372C94F" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx....6.DGA../3H.....-.E-.....JQT...U

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/dark_rounded/btnNext.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1067
Entropy (8bit):	7.685576596405306
Encrypted:	false
SSDEEP:	24:CF3XxnhxU04w/jwC/CNRzbunQM54rbfJ8pL2ruQJeSPOaYyt1VN:CF3XxhxUFW5KjunQGJqrXXPOa3bN
MD5:	BA31C50CAE5AEC9F5CD01F92B8E899CE
SHA1:	078C16019A87B01FD4A6A43830D2AA72E90128CB
SHA-256:	3EE4A8758E17C70BBFC805DF67CD734C7CE15465AD853D52704E2274B29D120B
SHA-512:	0F0F914D39DBBF884F4BE73143D637A3B15ECFF535309DFA7FE9F1F049CCD4950F44B31C9B184B0AC4153D3B8774B75092DFFF6A35B3CE81C2DF88EFF97C3D57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<.....IDATX..WKo.D...n;..$.,N...Z)..0 `..q.=....H\.i...H......{....H.8,'...dB...... ...LHI%[]...>W.......0.....1...../.=yRd;.ND.....{"...h...#",,\...676..kk.ss.`.Ak..J.B[.^..Z.....M.^O.J.?8.........w?.]ZZ.0.Y........6.nr..66......o..<,.q.(..8....V..)g.o....4M'....f.q..s"...n...DX.......].J).l6!..$..y0.,s.9..P.&I.(.`.......0ND.._..N..N.SX.... ..(.y...@..1.L..=M.!..u.<.+....!...6.....Y...)t......t.!...E...I{..Cp..Qy.M.....J/.........iDB.L};3%0..x..!.w....$...........0jJ%._..<.I..fz.....n.)......S..r@k..`.@......O.....h(!.....>.w....9X.7....\|...dY:.`;.,....p...B.X.e-.....Z.C..6..^gk>..ne.3.k..y..uA9e(w.px...h......C..G...!r.j..G.fn......~..............y........P....RB.TD.8s.....u..s.8......-..0.....~.9..1.....0..........[u4>...h....Z..d.E:V..P..:g.;... "lm.......B4.s.O...4..H..$..B..W.>p.N.\|.K...8.{r..(.......v....p..8.5..ca.V.z\.>3.H\.H)...g.`7.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9585
Entropy (8bit):	5.176229075364599
Encrypted:	false
SSDEEP:	192:WHCZvIFvp293XQ6t79010Iu5zfrAZr90zNKZy9sH:WHC6FA93XQi2eIu5PlNK1H
MD5:	1F1F56C33A00EAF0F0928D16ADDC9463
SHA1:	46B404223CF82EAC2ABE08047B27692286921CF3
SHA-256:	898A9F6BE83D89B2835A71F4CA210C30D6A18A1CEA07EEE78B757E86DB1E6E0B
SHA-512:	0288AD183F14990486EC8DCBFB854F9CE1C71C87D7C50560E6773B6CDB712A8A8BA3D8A2F1A7FC275D50BA4FAC9BFA5C0C377974452C7D6A322A8AFEF564A724
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/custom.js
Preview:	/Multilevel dropdown menu../ ====================================================================================../..$(document).ready(function(){...$("ul.simple-drop-down-menu li").each(function () {....$(this).hoverIntent({.....timeout: 300,.....over: function () {......var current = $("ul:first", this);......current.fadeIn(300);..............},.....out: function () {......var current = $("ul:first", this);......current.fadeOut(300);.....}....});...});...$("ul.simple-drop-down-menu li:has(ul)").find("a:first").append("<span></span>");...$("ul.simple-drop-down-menu li:has(ul) a").addClass("parent");.....});..../Get first Word in heading tag & Peload image in css../ ====================================================================================../..$(document).ready(function(){.../Preload image in Css file/...$.preloadCssImages();...../Get first word/...$(".first-word").each(function(){.. var me = $(this);.. me.html(me.html().replace(/^(\w+)/, "<strong>$1</strong>

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30808
Entropy (8bit):	7.605427431729092
Encrypted:	false
SSDEEP:	768:/9sO6wRtyGjFbZdG6pSHH1z2LYZb/dglZK8:/9sVwRtCESnR2854K8
MD5:	F5106764FC6C9AAD7ECD42D0FEC3A2E9
SHA1:	D30347C68E4562C850070591E7E12FE69EE2CAE5
SHA-256:	879ECCDCA6BEF10E5AE0F45938B0DC3068FA7EC6C85BD4D440D0AC21A6629209
SHA-512:	5A84FC948DD8AA1CB7415EEBC4183F923C64AC3B8C686CA17526ED53D05892CBAD6CB4B970D000FB190CC3D6246D38E266FCEC28EB8B1219E7E165558C629467
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/sprite.png
Preview:	.PNG........IHDR.............M.......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F" xmpMM:DocumentID="xmp.did:07F61AA0E54B11E2B80991BE7862150F" xmpMM:InstanceID="xmp.iid:07F61A9FE54B11E2B80991BE7862150F" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:338745D64AE5E2118FE4AE946BB41E5B" stRef:documentID="xmp.did:F9B917B0AEF7E01196EA900CCD9DA82F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......t.IDATx......u....l.^...r.....#%....Q4t.E.......

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4432), with CRLF line terminators
Category:	downloaded
Size (bytes):	103058
Entropy (8bit):	5.317228137929507
Encrypted:	false
SSDEEP:	1536:MNx1Nx6IX7yqCDmxgGaWU4w4F13DZotL6aGEfM/JamvLv/psq3d709YNq3yY8RZb:MNzNAIXUGahPo132tL697LPd7/oQHp
MD5:	733F8D107E2A302A2DC57DE48FEC01A3
SHA1:	94FB671541C919CBCD19B31B5670D131361DC799
SHA-256:	87E816B9B8F3CC79A411E39BB35903F0E28D221BF8E18C1029CA556D494BB02C
SHA-512:	3C6FFC3C5FDFEAC2A4EEEC645E24500FA9891AA780FE72518C695EE4E682D3CBEEF0414C97753EDEDCD844969184193C8130E95A94DBAE3A3E10467E7AA707D2
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/scripts.js
Preview:	/*.. hoverIntent r6 // 2011.02.26 // jQuery 1.5.1+..* <http://cherne.net/brian/resources/jquery.hoverIntent.html>..* ..* @param f onMouseOver function \|\| An object with configuration options..* @param g onMouseOut function \|\| Nothing (use configuration options object)..* @author Brian Cherne brian(at)cherne(dot)net..*/..(function($){$.fn.hoverIntent=function(f,g){var cfg={sensitivity:7,interval:100,timeout:0};cfg=$.extend(cfg,g?{over:f,out:g}:f);var cX,cY,pX,pY;var track=function(ev){cX=ev.pageX;cY=ev.pageY};var compare=function(ev,ob){ob.hoverIntent_t=clearTimeout(ob.hoverIntent_t);if((Math.abs(pX-cX)+Math.abs(pY-cY))<cfg.sensitivity){$(ob).unbind("mousemove",track);ob.hoverIntent_s=1;return cfg.over.apply(ob,[ev])}else{pX=cX;pY=cY;ob.hoverIntent_t=setTimeout(function(){compare(ev,ob)},cfg.interval)}};var delay=function(ev,ob){ob.hoverIntent_t=clearTimeout(ob.hoverIntent_t);ob.hoverIntent_s=0;return cfg.out.apply(ob,[ev])};var handleHover=function(e){var ev=jQuery.extend({},

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (306), with CRLF line terminators
Category:	downloaded
Size (bytes):	2072
Entropy (8bit):	5.058371430639735
Encrypted:	false
SSDEEP:	48:MPFGAEhl4REh9Cdlq0Ffnp9boGIAWpif/YAiownx/Nd:MdGbw+Xe/p9EGWVp
MD5:	088B46E88E3B8AFC776B7B8437E94B8E
SHA1:	83CBDF53D35D2949950A93B7B43C18B80EB9BDE0
SHA-256:	4F9EC32E80DF99738B8610C920081A160EE640C98D988F196D441C6FEE3A79AE
SHA-512:	A585106074A494FF5504049B18594A4D4FAD856D26CE7A264A0B023F87612C2FBDD13362C64D735DD4710F558415416DF606AECF6B8BB673A5ED4D8F1DE141BF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/css/reset.css
Preview:	/Reset/..* {.. padding:0;.. margin:0;..}..html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, font, img, ins, kbd, q, s, samp, small, strike, sub, sup, tt, var, dd, dl, dt, fieldset, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td..{......margin: 0;...padding: 0;...border: 0;...outline: 0;...font-weight: inherit;...font-style: inherit;...font-family: inherit;...font-size:100%;...text-align: left;...vertical-align: baseline;...list-style-type:none..}....ul{...margin:10px;...padding:10px;...}....#header ul, #header ol, #header li{...margin: 0;...padding: 0;...border: 0;...outline: 0;...font-weight: inherit;...font-style: inherit;...font-family: inherit;...font-size:100%;...text-align: left;...vertical-align: baseline;...list-style-type:none....}....h1,h2,h3,h4,h5,h6{...font-weight:normal;...display:block..}..span{...line-height: 20px;..}....em,small{...text-transfor

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	931
Entropy (8bit):	5.8015096818863565
Encrypted:	false
SSDEEP:	24:TB/1hpunQWwjx82lY2T32HEVASyJ3VbrhGb:/itNn2VkJ3Zhu
MD5:	5365886F24E292040479E15100F9D46F
SHA1:	F7B08948BFD8BD9846A571BBB9F201409F8297D9
SHA-256:	B242EA8E6B822ADEC62087C98AEB12EF910CC99DF63D6A847677B0EC376FF556
SHA-512:	48707BBFCC49A425143A9FBFA616652663455A5989F7FF7C01D7E38D253CE9DE52DD1F028352974F579DAB6839B32FAD1115A110231941B221B974CB1448FAF7
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/sp.png
Preview:	.PNG........IHDR.............r..$....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:72FA78F3FD3011E0BA2DB881C1EE6DFF" xmpMM:DocumentID="xmp.did:72FA78F4FD3011E0BA2DB881C1EE6DFF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:72FA78F1FD3011E0BA2DB881C1EE6DFF" stRef:documentID="xmp.did:72FA78F2FD3011E0BA2DB881C1EE6DFF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Z)....IDATx.bd``..b.......1.....?..*.. ....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 415 x 2, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1094
Entropy (8bit):	6.3653730036591565
Encrypted:	false
SSDEEP:	24:8d1hpunQWwjx82lY2T32HEVpFLJFTyJ3VfFyCgFUGps3c:8DitNn2VgJ3dxQs3c
MD5:	34C9F89BDFCAB35BE10B9CC9439BF567
SHA1:	B697709CD7DAC99FF92129AB5A682664AC723A74
SHA-256:	86F0AB96D6477CEAC7E392147CD3A8A2B674FA4DD379D8948EE90BF739CAF588
SHA-512:	E3A5984457157A457FCA6996A40155825D57DB9C46F7F436E5F9AD7C35AAE4F4D8BAD678A2F5501629F4AF86E2653253220C1A76DF0BEF5E19BA3F2B1D7635FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:67A9CA5300A511E18A2AB918BC680A13" xmpMM:DocumentID="xmp.did:67A9CA5400A511E18A2AB918BC680A13"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67A9CA5100A511E18A2AB918BC680A13" stRef:documentID="xmp.did:67A9CA5200A511E18A2AB918BC680A13"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..T[..0...O.h.......Ad...D....&..&3..o...=x)W.><....j.xq...w..h.oz...{;.1...{!$ ....0.....3o....sq..Aj..-.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 147, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4227
Entropy (8bit):	7.930811985286809
Encrypted:	false
SSDEEP:	96:Gm6QUqfmeV4pNVM85pIrxxgnPVrLRtzxKqEcLX2blrLtbUF7R/:96ceeVA28HXhLRdxJuxrLO7R/
MD5:	A157EF765CE8288984373A7EBA6B9A23
SHA1:	2CBD5B75FAE344C3A7CD56F6E02039B54778FCAD
SHA-256:	BCAB8884B5A7E525CB27EA39CAB9166DFACE8FF7028D8B311FEC10971944529D
SHA-512:	B56E35812C32BBAC2DFA5BD35E0562ABEEF65D4A52E881C2B9FAF70B921AAB201E6D334C857C2C1D891F6671AD856D6D008A14FCAD884E3787A4A93B84C569CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............B.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx..]}L.W....Z. .......X....Z....".G..Zm..U?Rk....~.&...n..G...v.".b..Pi..Z[Je+..J..({...8..3o>..\.73......s'....E ...-[\......e4.H(.PXY.....+PNA...I.....E......grD.._C9.d.......>..H.D"....#.(..~...yD.0..~..#B`.........}....g...x.hhh.C.2............"...]..t......b7l.0.;^.....<...c.....i.(jJ. B.<.....1....4...4c.A........r..t.6\.....$jJ?%BNN........H.].v..}..U.V....n.Q__.e.....).#......wBg.....LMMM.:....i.E.p.....sss..n.....]s...b...G..jkk.y.....OD@....<{.l...DSS..G..P..."......-........y....... jF?&Bdddp^^^.8..C......UVV..INN..C.h...D(*..b..AAA.\|t.x....M..0.@2..7...O.......O.%K..~..M.SWZZZ1l.-...)..7.F.wdffzV.\y..._L~.WJ.........}.....; .8@M..y.5...s.Gp..p...S.:....P.)j^...$.o\.......x..qj^. ..q..ny<...{.......J9.J...@g.g1.hh ......N(..9..T5....)(.&..1g.e..h.\.F..7....\g..R...X$...A..._..Ox.J5..<..m.\........y.;nK].....u.7~[mg.......o..#..h........cY...9Z.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 30, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	5.88374880647534
Encrypted:	false
SSDEEP:	24:XL1hpunQWwh82lYSKwluIEVaYT3ZyJ3VsExqGtXD5:XxitvnLnp0J3JcqD5
MD5:	EF164A719FFB029AFAD7E284CB12E294
SHA1:	994215A81704BDEE66ACEE368D1163EF688330D1
SHA-256:	24C8B982D6368A901F575440BB27AD998E4E8435B53AF29D0C203F2396D71108
SHA-512:	B39D12E91433239B737FE21752D589B644300751D57DE4F9C562B95EBF9A5A6989E796ABFE84D1426571584600F831A5799E1337CD8D2F6EDDADA4D05EFCFAFF
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/text-field-bg.png
Preview:	.PNG........IHDR.............b......tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1" xmpMM:DocumentID="xmp.did:A2C8FE42F73A11E0ADFF9AFB3722E0EC" xmpMM:InstanceID="xmp.iid:A2C8FE41F73A11E0ADFF9AFB3722E0EC" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93A65E40F3F4E011AF7AA3B610A32F6E" stRef:documentID="xmp.did:23F40FE313E4E011B4A0D0B331EA1AF1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.;L....)IDATx.b......?.........41lb...............4.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	7.796195835300586
Encrypted:	false
SSDEEP:	24:mICRZawKpWtceJnM8SHh2gKD4o/gGJuQzRVkiTEru2kWxMg6Z+46fx+bbp:MRZa6JM0gKko/oE2iTErupWxr46fx4V
MD5:	0A89018B6E4A1492623CA2B608B606FF
SHA1:	8485B1846BA871A61D48DABD63A90CA49E47228A
SHA-256:	F70F9BA6B6A11BACEAB4D76131276C68A8381739F8528CD4577ED0ACED90D9B7
SHA-512:	1F4ECF58010C1ADF0E868E77367F38E01AAAE15DD030B717525E802ABD0FE027E672E0E6656F4104E0BE3D840A7179640267DEF676C23F294C9F03A253151636
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/prettyPhoto/light_square/btnNext.png
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...%IDATx...KdI....W.....h....V\p.QQ<8...w/.e..=..G.....sp\f. :..(n..pW.}.../.(._W.e_...._f..E\|...ln..l6.........\|..}J...Fn....W.....u..v...AI.\..3.7....F....'.........RQ""".^__.X.L......C....b..A.$&&...c._.....z.....R.`<.,T.?....c......X.(...0.....[..c...5..4<.`..z...o...........+...O..X.#gT@r.....C?5..Q...........%..\,b...F.VVVD.f1..xH...4.5<....I...T.C)j...gi.z..........q....C......,m.A.....)==...........Y...X.....2.A222D=...Rq...G...trrBeee2^.'.988...\|y.1x.~...j~Q'....B.g.......E.....X..M....25.fv5.Y.......ZZZ......._CC...@...TWWG...b....:<<...B...>iii...&.HII........J...2......G..x.2.J....0.V]]M.....U..P.j8S^VcTVV....c...P...ibbB....)55........:;;)33....hmmMv...k*))......`.........R....~uu%....,m....\|.d6??/...Y.<....>......sss".@OOO.1..T.....Q.<.%..5)..z.DL/.W\|..B...1j...IQOww..X.6.........`m.>??......D\....-3B.......q..b.333..A....@...........SZ^^...u.... $TH{ooO....!.33.{

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1700
Entropy (8bit):	7.823521519901636
Encrypted:	false
SSDEEP:	48:C0aTMscLpq1+Zb/qyFfKxaJnpzEju9GBuo:aTMscO+syIs1U0GQo
MD5:	DD17DD66DC8D0867C02D6637BC9CC17E
SHA1:	77C69465D0C81D1AAE11040553897E9A065D488D
SHA-256:	2387037BB1B126692EDAB045DC529C4B39015418F1BD5DC71060B53FF7554D9C
SHA-512:	E9ADAFE165D37D9555B0AF8265C105C78F12B642D9CFB9FAA72DAA096008F619741BD741DD438FD2F1E6CD0086D703887A5347F8DFA039439FFCB529DE9574F9
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_xschool.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs..........\.r....tEXtSoftware.www.inkscape.org..<....!IDATX..WklTE.=......l.}J)...<T..$B.)...b4.A$(...!`!Q.h....H."A .EP@...E....t[..;s.?v;...RHp..;w.3.;3..7s%.9...t.F..JY.p..J..fL......9.2.K...}.v.o...9GB.c.U.n}{..6.{d+.....Fu.......nj..S.x....A..J.=.h..V.%..ZY..Ir:..mT...s.\..%.#4..Qg.....^..U.c..B.....g.Y;w...=.eF..>.F..N(.@{..../ho.m........Mwka....T+.$U.F......\L3.#.:....{...k....H..b...*.xZ\L,t..Y7.h..(C\|....q.:.........T.....m]v$......2...."4U..n.Obi...R..d........Vm.<..K..)-G..<s......_..wG..r......dH....9.;.Q.[...wIC.]...u...n.5.pd. .g.t......s..7.Wc.....y{...N[.h......D..0(..........F..k.....`...:C...h....+7.sp......."&........}..TUk"..l6b.. .^xk.1q.{.UE...~....8...(.-f 6.)@=^~Z,.m....&.I.....q..g..-].J...............Q.'...S...d.DR...........6a.....mu7.b....r1.. ....I&`..Q.;.......d..X..c.$...0.#?w..5........F.#3..L.....b.N........Y.....'/>..`.....D.....c..U_...[..^.u...V.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1807
Entropy (8bit):	7.846296955938726
Encrypted:	false
SSDEEP:	24:CF3bZsHee3CVbHVlVlavO5/G/IfalS7M3bwN3V2gZlQOq2ycIWuefcBBgrLNyH4:CF3bZsv3C9HVUmYplS7UkN3wgnQOVf3z
MD5:	61C7475267F441933B113A755CB74FA8
SHA1:	978077C650061F0C0BC5B5D13DBE1944132CBE56
SHA-256:	87693202FD266AED4EAC9E4405EE19AF61242AD1003E9A3A1DCE60354D7E8DDC
SHA-512:	00C9038B5DDC1656B1B5EC09F80169E273D48BBFDF411E4907A919C7B81ED8EA2C8A1858D4E5463836C4E708AC84111607322C951C16BB540A5F46E4A72CA335
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/images/icons/app_32_xmood.png
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<.....IDATX....lU...?......{..b)".Ag..,d.!n85t.[tn..`.d..Q...K.%.7.G.f.@.D3...q.e.0.s..(.).. .......?.y..=..m 1...{..}...<..y.s^...@<..Ov...Z...p8l.j.2..lk3.1..h..w.bK___..2.P^^.......u+.).)..Bi..]..^j'mM9..)9.....R...U&z> y..b....7.x<>/;'.._......,...>.......3.&....y".....7f.........y%R9H."..T.....z.....sQ..H..XR;>..gp.e.b.'.....X..e...R....R....TN...p...sB....:...rU<._.Pz.Xy......`.%1.."h.E;...r.{..W.2...(.."...J;...y.....h..EY8++...U...;..Bj.Xn6.}.)...:u..;..0#...~..u......[.9..yo`..c..1....AJ...Bil..).na.[j...;s.3.z..4./`Qu....#..7.-.(...-o.....TN.....4...^~...B9..y.......w}.3.......b.\|...x.....L....-4BiOI.....NR..aym.....y......[.R^....dx.....'/........D.r...<.m1.By....\#........+.o...F.l.u.}.I~r.j.V,....h..'3...c..Mz/..t.,....1..x?Kj......Y......\|.....<..Z....n~..Cs.r...L....y.}.Wx.....N.mpd.........x.7.&;..`4)y............rAz.pC..7

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	5.00769583383081
Encrypted:	false
SSDEEP:	24:NkTraRrtmFu+7mEFrr7mVFVzUl8NomCh+jmGVPrej6SR/dr7mXqi:N4eRoFu+qkPqzDN5g+yGVDej1jqz
MD5:	3B762E8E29F485C9F858965A5B2C9818
SHA1:	291ECF6B9948B61B6DD5119F53AC2A39C2FC3BD8
SHA-256:	94A5F2B85BDE7EF49D84F3494E1C462CD863403A64D012BA09CE9F3B59F95D2F
SHA-512:	8DAFCBFE96CD18110EC6794CB83EED0DA290E05E4D80B091FAB47F9409917DFF74F2CE0FC423408C7D3089F9226CCEB2D79DDDC17BA9C1A057BC3D0ED420ABDD
Malicious:	false
Reputation:	low
URL:	https://www.ritana.de/js/autocomplete/autocomplete.js
Preview:	$(document).ready(function(){../.****************************************************./../.AUTOCOMPLETE....................../../.****************************************************./........var std_val = $('#acInput').val();......$('#acInput').blur(function(){....if($(this).val()==""){.....$(this).val(std_val);....}...});...$('#acInput').focus(function(){....if($(this).val()==std_val){.....$(this).val("");....}...});.....function closeResults(){....$('body').unbind('click', closeResults);....$('#acResult').hide();...}........function autoComplete(){....if($('#acInput').val().length >= 3){.....$.ajax({......type: "POST",......url: $__FH+"/includes/global.autocomplete.php",......data: "q=" + $('#acInput').val(),......success: function(response) {........if($.trim(response)!=""){.........$('#acResult').html(response).slideDown('fast');.........$('body').bind('click', closeResults);........}......}.....});.....}....else{.....closeResults();....}...}.....$('#acInput').keyup(func

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1442
Entropy (8bit):	7.745642674296619
Encrypted:	false
SSDEEP:	24:m8gu625fhiOPpvnWcluOrc5PcUxiMCjBR+eYIeqHh1fEeAMzkpq3TZLo9w6eWXZ5:1ffTPplPrcRPIse/eqHffEeAHE3TZU9D
MD5:	9AD8565740908ECAB23FF67990E590CC
SHA1:	3083B9A86DF7FE936B715F0C528C11CFCB83E949
SHA-256:	FA43438BEFEEEF390166CE541DBD8F585097629CB2DF6AB3D6A5ABC72D3413DC
SHA-512:	58501F009B02383AB698DE8C714A91F98813258AC364C244D4EECBEEF5146EEDC9DF9ED2D6D96346564E5AB3FA66341CC18C41D39AB19597D59A93899A40A2F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=.........s.......tEXtSoftware.Adobe ImageReadyq.e<...DIDATx..XIK,W.>=8.........D.N(N...Yd.. .\..W...EP..Hp....".q$(.M.Q.84N8.C.~'}.k..k....K..u.\|.;.....]...0..>.<>>Z...m.....'....._^^.P._..gu...%u.4....9.#....X...#...N'_.X.V....c[].......?=.[FGG..4.^\\......0....y.8A..^....w...?.o...1.>==...K>......@...SG.........>U.V.v...9A.:.Kt~~N777.....L........../...3.._3}}}.....I...)88.AK~...#j....PS.....)........I...8B...5...'..k.G.b..8... ....S<.3............x?.Q:>Wl....`7yMU=......=....JKKc........YYY.Ra.....)33.u.ax..###iss..g...$...........[ONNX..Hu-E.En.f..........2...QMM.....1...txx./III.{....p8......\X.............y.QWW..Z\\d.=E7^?..8A...333..?..a.........&..........n....I........Dv.dcc.:;;.I.......6......1.Bll,-,,.\.4. ..C.....`IG.ZW.. 8..<....s(........$......]w....SCC.......3\__O.........Eaaa...1=.u..W[[K.....?.......Z..[huuu...........r...p...aee........6.Gz.`.3.m;}..d..F..lY....0F(..###....s......@..`wmm.....-*,,.T@h.eo-H/`

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	622
Entropy (8bit):	7.560482113192412
Encrypted:	false
SSDEEP:	12:6v/72r1sKg+5VXBsHjqiqXRqbhgCiOcH1b9lrkIXlsXueHCs8jpUZ2BB2vhyc:31ZVPixpulrwNOUQBKAc
MD5:	785E6140FAD654B5DD8C1F1560C32AD0
SHA1:	8C26EB9A5151C74176E6CE1D5D8C52396DEFD434
SHA-256:	E38162787105CD62FCE2F776F510B70E5871542F8C8D44D6C58FE458715E0D31
SHA-512:	D16AE56ECE6B01EFF88E5F4D736EFEC84915386AE68D4858E47A199BC57C9C9563F9D12A090C6626B4BA458D0DDB42C9FF283F87756BC7EECCCCB5DDD3C11B1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...n.@.......8...G#.&...R.8...B.BA q..P....x.^.....$P...!.......1...XI.4....;;.Y....1.O......2.'..]..iN...s.[...G9.(.....<..u..X2J.%iu.M.....;."wG.....5..(..iU9UZ.....G_a..7.........!.L..;.....0......p..k#....B.iD...3..f....$.A..i-..ly.}&54...T..../\....x...V.l...U..G.3V5.}h.Q.....[......ss.V....6...v...........CM.+.;..\|....yC/..{.W.G=.......d.K...2............=[.,?z.R."...q?a<G.T.f.Y.5.%A.eQR....)..H......k&...Z.X.eZzE...8...S\l.^...{....A,.f*o..[...{.b..../..(.....J.5r..V1..8.o.....,...P.....IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 130, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	5.81451473708326
Encrypted:	false
SSDEEP:	24:N1hpunQWwh82lYSKwy6eVfT34yJ3VJP5YGgEg2z/c:zitvnLXpZfJ33as/c
MD5:	096E04FBFB474C46CF17A9A878B3D221
SHA1:	746411EF61F8D94AD7874F230379DDD6933AB335
SHA-256:	7385CFEF6CA7555144D6E75B17A3805B8C46D6663D06B7B4692327B92251FCAC
SHA-512:	552460504EA8765297A2A1201DABF88D211205B88CA28CF16308877966A6BF92B1B8869CF0FC58A7ADFB802CFCD3A90EDE3CFCD3EEC450CAAA49794D18CF4AA5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=............I....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:01801174072068118BF2F6B511368090" xmpMM:DocumentID="xmp.did:6FD77D953E6B11E08E6F9312EF314E02" xmpMM:InstanceID="xmp.iid:6FD77D943E6B11E08E6F9312EF314E02" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:05801174072068118BF2F6B511368090" stRef:documentID="xmp.did:01801174072068118BF2F6B511368090"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> .KJ....IDATx.....0.........\:#..(.D.}aYvuQUm,"....

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 119, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3507
Entropy (8bit):	7.9237730290016835
Encrypted:	false
SSDEEP:	96:j9mg4Z8bNJvHfnl2xATaJvFvTCbBdjN+3BDsu:5l4uF2xxFTYniB7
MD5:	6B25600839837ED891E1D2F17BA01C28
SHA1:	1DA373E3DB998FA1A7EF9AD0ACC802949B1FE190
SHA-256:	EC6447BF74951685AD6773AD32A9A9123AF6FED69FC20EEFCAA33956F315EEBC
SHA-512:	1DE235E61422FB9847522701F57E9E12DFB296C801521934022F6E10D7F4F5C5C69B9628E965AA94E3010F35D7F29DE5477393F2E43B1319E4CE5A79402F43E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...w.......E....tEXtSoftware.Adobe ImageReadyq.e<...UIDATx..]il......`...`@F..}E2...... ....".....h#.B.....vI..EX.o$..?"-!.. ..PVd....22`q.`np.WTM......gzF.J.]..z_...u.x........n....6.....eTK...Z...N.%.J.(P.{.^.z.......o.f.y.. .'....)..7n....ZyeUVVr..?..k...`.XA.>..!H.L+.(..`1...P.v.Svv6.YYY......7m.t...So.t...t..}..S0...1.4..../8P...k..AO .P...m.N....r...G$....X.i+1.`.i.Q'.....`.s.<y.={.:I..Uq...4(d...>.Y.L.7........Dp.?..Y.,;I.3....v/_.d---.T.$HN...~....Y.N.:t.j6+...Oss3z%.......T.(>..c..t...}.....j..!.<'r.j.......a....3.{.v...v.M...Y..PA.%. x....N.ki...........h..cG6c.......UUK.XS.L.G...z.....>.u.w..2..&..&...\....O(z..5VWW.&M...............'...\|>.K...>.u.....6\|.p.bCC..z.*......-c.V..w.r.t..>r.dA.L.B..9~.8{..il.C..x.......~4....L.d.....Z .W.^l..\Y(..K.,a..>deee...(...<.Z.f........p.B.`....F9P.-..j..l....8w.\...!C..C.l]...vrET....@...S.dJ.`.F.....g......W.x...G.....s....Y.]......\|_.?....?~<.......&>.h///......w....

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1519
Entropy (8bit):	7.800895359148556
Encrypted:	false
SSDEEP:	24:CF3XUBaaWXA0i+NjHCwd2hcyIUzVM/MmiID7IIKem39WLFQ2l09b+sRt3Xt:CF3EBaahJ+NjR2hcyIqV2iID7IAaWLeJ
MD5:	6AAD34D0561D934A6521B00B3F217B3D
SHA1:	501E6B5A998217FFB1E0EC469C25EC1533E275F7
SHA-256:	0CFB2066347649D2331F0065D8B63E472A1123D8857CB3A45FBBEFED6D24F7A4
SHA-512:	D35A5D20BECC4942BADBADB8C208E2A60208661262E6006CB22159786D3ECC3531C71EA4A2C959E4E7B8B7776E05A9ED38A1E196177464A910F4067A0AA3B53A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sBIT....\|.d.....pHYs.........^......tEXtSoftware.www.inkscape.org..<....lIDATX..W.o.E...z.y4.&q.N.Wc5)4M.J.R....BH=..!q.R%...z.8!U...r..!Q......y9q.'...q.v..;3;....w....O..\|3..~.c=DJ....B=:1."..d......l.'..U.K).N.U).3..t:...".D{{.;5F....]...}).......r.?o.p.rX..c.[.M,......y...ml.o.P(.....^.......T.?.8j2....v...1.h.o.v..g.GGG5.!.q.....u\....N-....n.!....@..v..!..N...dU.{:.Ev8.`y@..g.P8(......{..%.HSCS.S.C...%0.gN.v0....N.+)..f0."...\|.. .o..e..K .........f.K......d...Y.St............q..A#.$$......\...2^.%.......Cx..7]..v..~...../ ...'W?.w.../.....j.......H...(..4...Pq.".}..O..../:.,....Q.....S6.dX.J..i..)....dx....k......dJ9..x.........#.......=.V6..K....`..Q.N....]..vW..v.......!.....B...S. D5T.=.{.iR.w..Q...........x...3..^^.GN...F.\...y/..Ae]_..-Pe.>...1p.1t...e....3.....cq"....!-P...0..[..:..A4...;...Lc.I5..kGkgK.......6.....p.<....!.>..&.>..Z..u.....9s...7.`mP........L_.\v..D..(Ct.t?s..X.;Ov..`..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	810
Entropy (8bit):	7.60956475333558
Encrypted:	false
SSDEEP:	24:DR5awwGIar7FWfFdeDktUupjdb84z7Kr2YGitN:Xawww7FtktUGnz7FYx
MD5:	3EE6A960781B74C30625A4BDD1E25C4F
SHA1:	8F7B8F95B6C780A89114F59A560DA8709DD733CF
SHA-256:	AF72508BA6B263325BE8EE6E5FADC55F9323D26D18F240AD8083A571B61C1A7A
SHA-512:	586AB9B7D24445DBBEF5746E7F15826DE5F1154A19301F6EFCAAD83B788880783964319A77116FD88CF2A9009D89CD62519E2D510AECFA6BB8495EF06FFCAA5B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......]......IDATXG..O.Q..3o..]..&....U.@ ..b..........7..&.L....&.+11....^@.\L..(.i..-..-ec]9......yovK....w..?.ZqH..j.!.C...T..P....:E%....577............i..........D.......'.533.....c.......$........8.I.......J..V.X...c.7..B...H.Z........M..066..Ldi....<.l6..[.\.\.G.'.U........}.uu.]<iR.\|Tuiiiee.R.LNL._X...j...V,....\|pX.bH._g8...?P......f.k.R.F..Tf6.....E..0.:.T..Z....P..CK.i.T...Q.zor......?....DG.z...*...P...0;......yW\|.U...F.sp..q;...@.G.>z."...>R.u.uB..%f.Z.Z.W=........5."...f...5>8(..~.....P7?i.LTW...........K...r<P.%rX.e......;...m[.K....l.p.}.D.V..{.SO@]:L....,..".....&l.%...`..T:}.8......U.+....2..xR-&....j..<^....P).M..p.8".P%..DM.B.K..7n...u]&..?P...kL...Xt.#....Y.\.U[................A...T+..V.R.8.ZqH..pN.~.G/...ac.....IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:45:00.356090069 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:00.356116056 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:00.606143951 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:09.633390903 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:09.633871078 CEST	49710	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:09.639034986 CEST	80	49709	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:09.639116049 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:09.639271021 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:09.639727116 CEST	80	49710	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:09.639786005 CEST	49710	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:09.644738913 CEST	80	49709	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:09.967993021 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:09.968060017 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:10.207686901 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:10.508514881 CEST	80	49709	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:10.542268991 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:10.542324066 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:10.542398930 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:10.542655945 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:10.542670012 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:10.549894094 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.399763107 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.400038004 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.400079012 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.401201010 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.401276112 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.402554989 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.402658939 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.402776957 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.402791977 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.453099966 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.704524994 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.704552889 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.704560995 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.704617023 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.704642057 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.755801916 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.755830050 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.768801928 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.768855095 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.768973112 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.769273043 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.769320011 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.769512892 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.769526005 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.769541025 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.769726992 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.769746065 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.770143986 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770184040 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.770242929 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770473957 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770509958 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.770561934 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770682096 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770694971 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.770831108 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.770843029 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.771226883 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.771234989 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.774691105 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.774853945 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.774868965 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.798171997 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.819087029 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.819104910 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.819145918 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.819216967 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.819255114 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.819266081 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.838347912 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.838357925 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.838395119 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.838452101 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.838479996 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.838495016 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.893373013 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.935004950 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.935019970 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.935098886 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.935127974 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.935188055 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.935753107 CEST	49713	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.935772896 CEST	443	49713	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.936434031 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.936479092 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.937695980 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.937695980 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:11.937731981 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:11.996659994 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:11.996701002 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.000416994 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.000550985 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.000571012 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.195693016 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:12.195828915 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:12.627454042 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.630623102 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.630649090 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.631761074 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.631840944 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.632395029 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.632456064 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.632627010 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.632632971 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.635202885 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.635428905 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.635441065 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.635802984 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.637938023 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.638015032 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.638271093 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.641407013 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.641678095 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.641694069 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.641715050 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.641882896 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.641908884 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.642875910 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.642967939 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.643136024 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.643716097 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.643887997 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.644292116 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.644376040 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.644417048 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.644522905 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.644536018 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.648082972 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.650840044 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.650852919 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.651901007 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.651978970 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.653559923 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.653628111 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.653718948 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.675244093 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.683332920 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.690747976 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.691335917 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.695347071 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.705873966 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.705913067 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.730482101 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:12.730536938 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:12.730688095 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:12.732248068 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:12.732264042 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:12.753386021 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.805886984 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.806217909 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.806236029 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.807713985 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.808273077 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.808273077 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.808362961 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.808439970 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.808446884 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.862308979 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.882097006 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.882112026 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.882184029 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.882189989 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.882250071 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.885588884 CEST	49716	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.885607958 CEST	443	49716	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.886198997 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.886233091 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.886285067 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.888053894 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.888066053 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.889538050 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.890060902 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.890067101 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.891184092 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.891241074 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.892187119 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.892205954 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.892258883 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.892271042 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.895577908 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.895704031 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.897305012 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.897327900 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.897363901 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.897376060 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.897393942 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.897428036 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.900243044 CEST	49715	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.900253057 CEST	443	49715	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.902179003 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.902213097 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.902244091 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.902271986 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.902280092 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.902282000 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.902329922 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.902359962 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.903297901 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.903307915 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910834074 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910866022 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910872936 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910893917 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910908937 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.910928965 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:12.910943985 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.938615084 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.938616037 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:12.938628912 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:12.954216003 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.954214096 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:12.984812975 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:13.011838913 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.011848927 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.011909008 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.017741919 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.017800093 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.017807961 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.017821074 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.017862082 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.021676064 CEST	49714	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.021691084 CEST	443	49714	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.022306919 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.022340059 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.022504091 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.026256084 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.026273012 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.026773930 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.026789904 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.026837111 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.026850939 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.026871920 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.026921034 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.028673887 CEST	49717	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.028682947 CEST	443	49717	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.029290915 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.029325008 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.029382944 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.035036087 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.035046101 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.035089016 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.035106897 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.035134077 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.035149097 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.035195112 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.040791035 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.040800095 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.040867090 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.040868998 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.040913105 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.041697979 CEST	49718	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.041713953 CEST	443	49718	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.042542934 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.042574883 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.042635918 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.047287941 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.047306061 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.065493107 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.065525055 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.065570116 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.065583944 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.065619946 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.065620899 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.065686941 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.067732096 CEST	49719	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.067743063 CEST	443	49719	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.068439960 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.068466902 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.068526983 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.070198059 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.070209026 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.590723991 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.590895891 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.651781082 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.651803017 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.652374029 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.703846931 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.730027914 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.764044046 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.764458895 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.764473915 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.764823914 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.765244961 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.765312910 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.765527964 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.775326014 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.784347057 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.784707069 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.784718990 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.785068989 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.785527945 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.785595894 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.785927057 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.811336994 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.831331015 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.889458895 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.889832020 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.889842987 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.890809059 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.890990019 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.891052961 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.891130924 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.891143084 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.891628981 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.891691923 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.891813040 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.891819954 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.892235994 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.892287970 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.892671108 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.892734051 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.892843962 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.892851114 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.902201891 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.902416945 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.902432919 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.903518915 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.903597116 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.903942108 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.904012918 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.904284954 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.904304028 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.918282986 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.918664932 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.918674946 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.920162916 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.920223951 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.920608044 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.920701981 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.920738935 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.940229893 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.940248013 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.955698967 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.963335991 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.971311092 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:13.971333027 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:13.976082087 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.976162910 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.976219893 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.976375103 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.976391077 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:13.976403952 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:13.976409912 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.008333921 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.008374929 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.008444071 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.009092093 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.009102106 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.017704010 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.023807049 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.023830891 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.023893118 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.023897886 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.023952961 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.025451899 CEST	49723	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.025469065 CEST	443	49723	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.025847912 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.025856972 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.025947094 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.026525974 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.026535034 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.053303957 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.053381920 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.053565979 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.054312944 CEST	49722	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.054327011 CEST	443	49722	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.054873943 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.054910898 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.055049896 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.055540085 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.055547953 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.149281025 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.149310112 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.149318933 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.149372101 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.149385929 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.149415016 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.150579929 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.150604010 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.150650024 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.150661945 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.150695086 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.150705099 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.150728941 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.152406931 CEST	49724	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.152420044 CEST	443	49724	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.152745008 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.152767897 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.152988911 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.153536081 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.153548956 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159657955 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159687996 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159694910 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159723997 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159729958 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.159749985 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.159771919 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.174671888 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.174707890 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.174717903 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.174732924 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.174767971 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.174778938 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.174844027 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.190599918 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.205816984 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.221769094 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.268057108 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.268070936 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.268099070 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.268129110 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.268167019 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.275592089 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.275602102 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.275676966 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.276899099 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.276909113 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.276967049 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.278667927 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.278686047 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.278723001 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.278758049 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.278796911 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.286097050 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.286109924 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.286154032 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.286184072 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.286202908 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.286242962 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.286246061 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.286288023 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.287446022 CEST	49726	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.287461042 CEST	443	49726	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.287998915 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.288041115 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.288260937 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.293740988 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.293761015 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.295346022 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.295360088 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.295377970 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.295420885 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.295456886 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.300254107 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.300304890 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.300313950 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.300342083 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.300543070 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.300642967 CEST	49727	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.300654888 CEST	443	49727	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.300887108 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.300909042 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.300973892 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.301632881 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.301642895 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.326888084 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.326924086 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.326988935 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.327092886 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.327109098 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.327234030 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.327645063 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.327652931 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.327824116 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.327838898 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.394202948 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.394216061 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.394268990 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.394318104 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.394659042 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.394733906 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.401736021 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.401812077 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.402584076 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.402646065 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.403388023 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.403450966 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.404460907 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.404526949 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.405344963 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.405414104 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.428131104 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.428201914 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.428211927 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.428225040 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.428250074 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.428278923 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.428587914 CEST	49725	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.428603888 CEST	443	49725	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.428992033 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.429033041 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.429320097 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.430020094 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.430032015 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.433897972 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.433945894 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.434026957 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.434217930 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.434232950 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.863656044 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.863950968 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.865838051 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.865854979 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.866118908 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.868794918 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:14.886091948 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.886492968 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.886513948 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.886873960 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.887340069 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.887341022 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.887358904 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.887415886 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.915330887 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:14.922693968 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.923010111 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.923024893 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.923513889 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.923868895 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.923953056 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:14.924112082 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.931081057 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:14.967333078 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.027046919 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.027431011 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.027446032 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.028496027 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.028647900 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.029107094 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.029156923 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.029192924 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.073286057 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.073306084 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.122507095 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:15.122551918 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.122710943 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:15.123574972 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:15.123574972 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:15.123574972 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:15.148648977 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.148674965 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.148684978 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.149000883 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.149014950 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.165882111 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.166409016 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.166423082 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.167515993 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.167813063 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.168066025 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.168066025 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.168076992 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.168119907 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.168133020 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.168431997 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.168450117 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.169531107 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.169625044 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.170006037 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.170006037 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.170018911 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.170073986 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.181535006 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.181567907 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.181704044 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.181714058 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.201102972 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.206371069 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.206662893 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.206676006 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.207781076 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.207945108 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.207947969 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.208342075 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.208348036 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.208360910 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.208399057 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.208507061 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.209393978 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.209520102 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.209757090 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.209817886 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.209917068 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.217075109 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.217080116 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.217092037 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.217093945 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.233145952 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.249227047 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.249247074 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.251341105 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.252271891 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.252283096 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.268156052 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.268161058 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.271857977 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.271894932 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.271912098 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.271985054 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.272162914 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.279263973 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.279299974 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.279386997 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.279386997 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.280488014 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.280514956 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.280555964 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.281315088 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.288103104 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.288187027 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.290635109 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.291140079 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.292139053 CEST	49731	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.292139053 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.292161942 CEST	443	49731	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.292165041 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.292623997 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.292651892 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.293240070 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.293335915 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.293335915 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.294275999 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.294286013 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.294677019 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.294677019 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.294688940 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.294761896 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.300086021 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.300090075 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.300132036 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.300164938 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.300473928 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.300488949 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.300566912 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.300760031 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.301390886 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.301404953 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.308269978 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.308279037 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.308331966 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.309201002 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.309284925 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.336410999 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.336690903 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.336702108 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.337743044 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.338139057 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.338139057 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.338207960 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.338275909 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.348177910 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.348191977 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.380146027 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.380163908 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.396223068 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.401348114 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.401385069 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.401482105 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.401482105 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.402113914 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.402133942 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.402199984 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.402199984 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.408704042 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.409008980 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.409776926 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.410017967 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.410605907 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.410757065 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.411858082 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.412142038 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.413258076 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.413479090 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.424767017 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.424797058 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.424804926 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.424841881 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.424884081 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.424897909 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.424932957 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.426585913 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426683903 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426702023 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.426718950 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426731110 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426749945 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426775932 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426790953 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.426811934 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.426836014 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.426870108 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.427021980 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.427093029 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.427115917 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.427196026 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.427256107 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.428083897 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.428109884 CEST	49728	443	192.168.2.5	184.28.90.27
Oct 25, 2024 00:45:15.428141117 CEST	443	49728	184.28.90.27	192.168.2.5
Oct 25, 2024 00:45:15.429073095 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.429090977 CEST	443	49733	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.429117918 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.429538012 CEST	49733	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.429542065 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.429584980 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.429776907 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.430228949 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.430246115 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.432629108 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.432667971 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.432858944 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.433013916 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.433029890 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.433233023 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.433347940 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.434422970 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.434580088 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.434977055 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.435065031 CEST	443	49730	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.435086966 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.435267925 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.435267925 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.435327053 CEST	49730	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.435580969 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.435609102 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.436006069 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.436100960 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.436126947 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.437889099 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.437906981 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.440746069 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.440781116 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.441034079 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.441034079 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.441065073 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464632034 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464659929 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464668989 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464699030 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464730978 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.464749098 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.464776993 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.466517925 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.466546059 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.466553926 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.466573000 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.466617107 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.466633081 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.466675043 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.472441912 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.518610954 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.518611908 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.532109022 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.532375097 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.532776117 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.532819986 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.532870054 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.532881021 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.533011913 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.533011913 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.538913965 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.539458990 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.539505005 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.539514065 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.539948940 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.539948940 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.540294886 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.540440083 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.541285992 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.542140961 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.542258024 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.542258024 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.542269945 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.542648077 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.542648077 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.549205065 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.549258947 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.549467087 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.550386906 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.550399065 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554650068 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554666996 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554694891 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554769993 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.554769993 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.554917097 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554944038 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554951906 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.554980993 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555011988 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.555038929 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555067062 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.555068016 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555155039 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.555787086 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555797100 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555813074 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.555871964 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.555871964 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.557157040 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.557164907 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.557193995 CEST	49736	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.557207108 CEST	443	49736	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.557359934 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.559900999 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.559920073 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.560185909 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.560323954 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.560333014 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.582871914 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.582887888 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.582917929 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.582971096 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.583554983 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.586014986 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.586025000 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.586055040 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.586119890 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.586119890 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.590384007 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.590394020 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.590416908 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.590899944 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.591088057 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.591157913 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.591185093 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.591665983 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.591669083 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.591672897 CEST	443	49735	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.591698885 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.591698885 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.591845036 CEST	49735	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.592245102 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.592272997 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.592308998 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.592334986 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.592993975 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.594229937 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.594240904 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.597103119 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.597134113 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.597141027 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.597162008 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.597234011 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.597234011 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.597243071 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.599822998 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.599848986 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.601571083 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.601572037 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.601597071 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.603650093 CEST	49734	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.603668928 CEST	443	49734	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.637423992 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.639909983 CEST	80	49709	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.640336990 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.671220064 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.671236038 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.671675920 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.671724081 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.671756029 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.671756029 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.671773911 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.673681974 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.677429914 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.677455902 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.678071976 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.678119898 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.678131104 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.678273916 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.678900003 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.678946972 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.678955078 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.679003000 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.679740906 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.679812908 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.680315971 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.681145906 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.681294918 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.682076931 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.682770014 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.715575933 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.715593100 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.715626955 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.715744019 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.715744019 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.722991943 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.723006010 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.723366976 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.724627018 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.724637032 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.725052118 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.813946009 CEST	49709	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.858114958 CEST	49729	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.858163118 CEST	443	49729	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995624065 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995682955 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995702982 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995735884 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995752096 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995774031 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995812893 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995820999 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995846987 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995851040 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995865107 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995883942 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.995907068 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995946884 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.995980024 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996017933 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996048927 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996053934 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996074915 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996200085 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996244907 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996257067 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996260881 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996284008 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996299028 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996316910 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996320963 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996336937 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.996368885 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:15.996402025 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:15.997206926 CEST	80	49709	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.014111996 CEST	49737	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.014132023 CEST	443	49737	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.028048038 CEST	49732	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.028074026 CEST	443	49732	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.161147118 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.161190987 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.161257029 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.161591053 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.161602020 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.165909052 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.166704893 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.166726112 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.167129040 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.168334961 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.168433905 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.168466091 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.176343918 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.177788019 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.177817106 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.178179026 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.178581953 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.178644896 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.178769112 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.215334892 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.219356060 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.222182989 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.288675070 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.289822102 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.289865971 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.290263891 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.290833950 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.290911913 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.291096926 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.299851894 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.300349951 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.300371885 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.300738096 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.301326036 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.301419020 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.301526070 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.302916050 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.303859949 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.303941011 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.303950071 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.304130077 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.304146051 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.304311991 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.304517984 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.304795027 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.304867029 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.305234909 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.305315971 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.305460930 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.305641890 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.335339069 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.347331047 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.347330093 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.347333908 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.409388065 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.409729004 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.409763098 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.410649061 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.410718918 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.411257029 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.411305904 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.411513090 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.411520004 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.413069010 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.413290024 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.413317919 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.414316893 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.414410114 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.414968967 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.415028095 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.415246010 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.415255070 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.419954062 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.420042992 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.420115948 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.421040058 CEST	49739	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.421058893 CEST	443	49739	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.442698956 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.442789078 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.442852020 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.447871923 CEST	49738	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.447894096 CEST	443	49738	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.450670004 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.452658892 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.452680111 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.453705072 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.453769922 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.454516888 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.454581022 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.456721067 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.456727982 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.460396051 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.460397005 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.465197086 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.465235949 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.465296030 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.465754032 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.465768099 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.479355097 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.479876995 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.479892015 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.480967999 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.481035948 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.481738091 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.481805086 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.481904984 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.481910944 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.508403063 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.524401903 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.557322979 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.557421923 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.557478905 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.557503939 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.557538033 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.557600975 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.557620049 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.558352947 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.558398962 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.558408022 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.558423996 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.558469057 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.559622049 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.559649944 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.559711933 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.559720993 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.560920000 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.560986042 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.561028957 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.562206984 CEST	49740	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.562216997 CEST	443	49740	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.571507931 CEST	49742	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.571551085 CEST	443	49742	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.575905085 CEST	49741	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.575927019 CEST	443	49741	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.603199005 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.662888050 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.662916899 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.662956953 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.662985086 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.662992001 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.663049936 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.671091080 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.671117067 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.671124935 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.671179056 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.671205997 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.678275108 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.678289890 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.678356886 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.684474945 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.684540987 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.686131001 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.686203003 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.707370043 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.707400084 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.707406998 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.707428932 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.707459927 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.707470894 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.707525969 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.713327885 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.741254091 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.741276026 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.741283894 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.741322994 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.741343021 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.741373062 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.741858959 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.741908073 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755187988 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755239010 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.755441904 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755527973 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755575895 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.755621910 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755740881 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.755764961 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.755816936 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.756108999 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.756115913 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.756221056 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.757853985 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.757883072 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.758272886 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.758296013 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.758467913 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.758477926 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.758665085 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.758675098 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.785586119 CEST	49745	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.785624981 CEST	443	49745	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.786043882 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.786072969 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.786303997 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.787411928 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.787421942 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.788659096 CEST	49747	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.788666964 CEST	443	49747	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.789041996 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.789055109 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.789108038 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.789150953 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.795764923 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.795772076 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.795824051 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.796860933 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.796871901 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.796920061 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.796952963 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.826268911 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.826286077 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.826374054 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.833995104 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.834062099 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.834698915 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.834758043 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.834779978 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.834923029 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.914658070 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.914714098 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.914750099 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.914777040 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.914819002 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.914829969 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.920444965 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.920511007 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.920804024 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.920865059 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.921977997 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.922040939 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.922457933 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.922521114 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.923377037 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.923437119 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.924444914 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.924500942 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.952672005 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.952760935 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.953039885 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.953098059 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.953120947 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.953136921 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.953154087 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.953187943 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.953598022 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.953661919 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.954668999 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.954715967 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.954736948 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.954746962 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.954780102 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.954792976 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.954837084 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.955780983 CEST	49743	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.955795050 CEST	443	49743	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.960109949 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.960213900 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.960854053 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.960918903 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.961811066 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.961874962 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.962768078 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.962809086 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.962831020 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.962836981 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.962876081 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.962892056 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:16.993738890 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:16.993829966 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.028290987 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.035327911 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.035353899 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.036861897 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.036961079 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.040221930 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.040292025 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.041018009 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.041100025 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.046220064 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.046293020 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.046523094 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.046557903 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.046595097 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.046605110 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.046624899 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.046649933 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.047240973 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.047329903 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.047863007 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.047903061 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.047939062 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.047944069 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.047975063 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.047991991 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.048616886 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.048702002 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.049446106 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.049503088 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.049555063 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.049612045 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.051884890 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.051922083 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.051944017 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.051948071 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.051990032 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.052699089 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.052759886 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.066414118 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.066800117 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.066994905 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.071587086 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.071608067 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.079271078 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.079356909 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.079821110 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.079894066 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.086028099 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.086097956 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.086500883 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.086580038 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.086903095 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.086957932 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088578939 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088640928 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088663101 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088716984 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088722944 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088732004 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088768005 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088768959 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088783979 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088793993 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088819027 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088845015 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.088849068 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088867903 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.088918924 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.089164972 CEST	49746	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.089179039 CEST	443	49746	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.105710030 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.105747938 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.105967999 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.106219053 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.106231928 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.106611967 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.106647015 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.106705904 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.106951952 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.106966019 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.109936953 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.109956980 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.111432076 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.112133980 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.112140894 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.124685049 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.166109085 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166158915 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166193008 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166198015 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.166214943 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166254997 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.166347980 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166398048 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.166402102 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166490078 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.166548014 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.166553020 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.171700001 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.171768904 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.171781063 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.171817064 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.171870947 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.171875954 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172154903 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172209024 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.172214985 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172449112 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172502995 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.172508001 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172648907 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172694921 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.172702074 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172832012 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.172883034 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.172888994 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173074961 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173131943 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173137903 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173367023 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173418999 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173424006 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173469067 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173521996 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173532963 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173774004 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173818111 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173821926 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173826933 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173856974 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173870087 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173902035 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.173954010 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.173959017 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.174001932 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.174042940 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.174618959 CEST	49744	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.174633026 CEST	443	49744	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.175035000 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.175057888 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.175213099 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.175575018 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.175590038 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.329216957 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.329248905 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.329257011 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.329288006 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.329380989 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.329411983 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.336893082 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.337157965 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.337166071 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.337513924 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.339339972 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.339432955 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.339601040 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.370891094 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.383321047 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.405507088 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.405520916 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.405551910 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.405570030 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.405623913 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.451324940 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.451340914 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.451396942 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.452687979 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.452699900 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.452758074 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.531497002 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.531507969 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.531589985 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.531935930 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.531943083 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.532018900 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.575968027 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.576071978 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.576873064 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.576970100 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.577855110 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.577930927 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.578807116 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.578887939 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.579687119 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.579756021 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.580974102 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.581041098 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.614255905 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.614729881 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.614759922 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.615233898 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.615943909 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.616055012 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.616525888 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.617126942 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.617722034 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.617738008 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.618288994 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.619664907 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.619750977 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.620800972 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.626894951 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.626959085 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.627069950 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.627423048 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.627691031 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.627710104 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.627852917 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.629224062 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.629280090 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.629302979 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.629316092 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.630367041 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.630449057 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.631356001 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.631417036 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.632051945 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.632061005 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.632088900 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.632088900 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.632100105 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.632145882 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.643296003 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.649144888 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.649154902 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.649542093 CEST	49750	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.649560928 CEST	443	49750	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.650290966 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.650738001 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.650902033 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.650954962 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.651002884 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.651007891 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.654639006 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.654684067 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.655365944 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.657135963 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.657150984 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.657826900 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.657902956 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.657915115 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.658087015 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.658341885 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.658361912 CEST	443	49749	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.658375025 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.658406973 CEST	49749	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.659320116 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.667321920 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.672983885 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.673058033 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.673070908 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.704860926 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.724172115 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.871797085 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.871817112 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.871876001 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.871893883 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.871906042 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.871946096 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.875293016 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.875308037 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.875354052 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.875369072 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.875412941 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.875545025 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.889081955 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.889153004 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.889214993 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.889228106 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.889327049 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.889586926 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.890059948 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.890084982 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.890094995 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.890116930 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.890140057 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.890151978 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.890177965 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.902946949 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.902966976 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.902975082 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.902992964 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.903013945 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.903018951 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.903054953 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.936836958 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:17.963109016 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.976676941 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:17.977057934 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.010305882 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.010318995 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.010359049 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.010436058 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.010466099 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.016895056 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.016902924 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.016937971 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.016956091 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.016973019 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.017035007 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.018074989 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.018084049 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.018196106 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.019464016 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.019531012 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.019539118 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.019551039 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.019588947 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.066714048 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.067624092 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.067636013 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.068080902 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.068917990 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.068923950 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.069134951 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.069149971 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.069629908 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.069672108 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.069684029 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.069695950 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.070040941 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.070054054 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.070095062 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.070215940 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.070264101 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.070871115 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.070919037 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.071455956 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.071518898 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.071933031 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.071985006 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.072035074 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.072181940 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.072187901 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.072343111 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.073111057 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.073122978 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.115322113 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.115324974 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.128649950 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.128655910 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.323793888 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.323890924 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.324326992 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.326486111 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.326647997 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.327008963 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.330095053 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.330123901 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.330132008 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.330203056 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.330209017 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.330260038 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.332931995 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.332992077 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.333048105 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.333076000 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.333173037 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.333223104 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.495023012 CEST	49753	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.495052099 CEST	443	49753	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.495773077 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.495821953 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.495971918 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.499854088 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.499887943 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.517024040 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.517571926 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.517597914 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.517977953 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.518979073 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.519049883 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.519088030 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.544068098 CEST	49752	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.544115067 CEST	443	49752	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.544806957 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.544871092 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.545017958 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.555093050 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.555135965 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.559330940 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.560465097 CEST	49751	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.560494900 CEST	443	49751	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.561517000 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.561562061 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.561629057 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.564789057 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.568295002 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.568320036 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.571063042 CEST	49758	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.571099043 CEST	443	49758	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.572804928 CEST	49757	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.572834969 CEST	443	49757	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.574973106 CEST	49760	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.575009108 CEST	443	49760	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.575429916 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.575465918 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.575527906 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.582514048 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.582529068 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.587167025 CEST	49755	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.587188959 CEST	443	49755	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.587733984 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.587762117 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.587845087 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.591239929 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.591259003 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.591778040 CEST	49754	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.591797113 CEST	443	49754	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.592462063 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.592492104 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.592674017 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.604048967 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.604070902 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.644927979 CEST	49759	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.644953012 CEST	443	49759	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.774091959 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.774121046 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.774128914 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.776190042 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.776221991 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.824472904 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.901818991 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.901833057 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.901863098 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.901881933 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.901930094 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.905685902 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.905694008 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.905760050 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:18.907309055 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.907320976 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:18.907375097 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.018888950 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.018901110 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.018966913 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.019556046 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.019565105 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.019619942 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.025325060 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.025392056 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.026808023 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.026876926 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.028642893 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.028721094 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.029521942 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.029581070 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.031177044 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.031244993 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.032233000 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.032288074 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.143384933 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.143461943 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.143841982 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.143898964 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.150796890 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.150865078 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.151081085 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.151129961 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.151599884 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.151654005 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.152128935 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.152185917 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.152590990 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.152647018 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.152985096 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.153034925 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.153038025 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.153075933 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.153088093 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.153121948 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.154032946 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.154077053 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.154089928 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.154103041 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.154133081 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.154155970 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.154997110 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.155062914 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.155103922 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.155152082 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.155929089 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.155992031 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.231620073 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.231676102 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.231832027 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.232676029 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.232707024 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.245311022 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.245347023 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.245398998 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.245940924 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.245950937 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.256683111 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.256727934 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.256989956 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.257252932 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.257266045 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.260309935 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.260335922 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.260390997 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.260931015 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.260938883 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.269834042 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.269901991 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.270179033 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.270231962 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.270531893 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.270586967 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.270670891 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.270716906 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.271028042 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.271076918 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.271912098 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.271940947 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.271990061 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.272768021 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.272782087 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.276788950 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.276845932 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.277030945 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.277081966 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.277381897 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.277429104 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.277626991 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.277674913 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.277858019 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.277906895 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.278295994 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.278350115 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.278450966 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.278502941 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.278804064 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.278862953 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.279294968 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.279346943 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.279542923 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.279586077 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.279900074 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.279947042 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.280492067 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.280539989 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.280551910 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.280572891 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.280610085 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.285449982 CEST	49761	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.285466909 CEST	443	49761	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.285940886 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.285988092 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.286375046 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.288309097 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.288319111 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.362517118 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.369807005 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.369827986 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.370220900 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.370829105 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.370889902 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.371131897 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.408955097 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.415326118 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.417848110 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.439943075 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.439975977 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.440201998 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.440227985 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.440697908 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.441138983 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.441148996 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.441205025 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.441234112 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.441273928 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.441893101 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.441951990 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.442368984 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.442375898 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.447521925 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.447846889 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.447863102 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.448982954 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.449039936 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.449608088 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.449681044 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.450026989 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.450033903 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.450807095 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.451005936 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.451013088 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.452471018 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.452518940 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.456615925 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.456717968 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.458372116 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.458376884 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.461148024 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.461333036 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.461350918 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.462412119 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.462466002 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.462858915 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.462907076 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.463174105 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.463181019 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.484766960 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.487330914 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.500216961 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.500221968 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.516938925 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.622908115 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.622937918 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.622987032 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.623007059 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.623032093 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.623069048 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.624466896 CEST	49762	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.624486923 CEST	443	49762	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.625627995 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.625659943 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.625716925 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.626279116 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.626290083 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.692759037 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.692773104 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.692831039 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.692846060 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.692908049 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.692977905 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.693005085 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.693013906 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.693039894 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.693049908 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.693072081 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.693084002 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.694252014 CEST	49763	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.694268942 CEST	443	49763	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.694705963 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.694741964 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.694942951 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.695575953 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.695590019 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710676908 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710681915 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710709095 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710760117 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710772991 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.710784912 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710803986 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.710824966 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.710864067 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.712137938 CEST	49765	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.712155104 CEST	443	49765	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.712479115 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.712513924 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.712573051 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.713335991 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.713351965 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.713447094 CEST	49766	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.713462114 CEST	443	49766	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.713808060 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.713843107 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.714354038 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.714354038 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.714380980 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.719995975 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.720021009 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.720072985 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.720086098 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.720098019 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.720165968 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.721425056 CEST	49767	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.721437931 CEST	443	49767	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.722172976 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.722203970 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.722255945 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.722743988 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.722753048 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.735416889 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.793396950 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.793411016 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.793445110 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.793483973 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.793575048 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.819451094 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.819463015 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.819763899 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.820286036 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.820293903 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.820377111 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.820410967 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.820508957 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.820588112 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.820619106 CEST	443	49764	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.820743084 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.820818901 CEST	49764	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.832401991 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.832446098 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:19.834602118 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.834602118 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:19.834635973 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.096386909 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.098757982 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.098776102 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.099239111 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.103713989 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.103713989 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.103820086 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.114905119 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.115855932 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.126002073 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.126014948 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.126229048 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.126239061 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.126631975 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.127197027 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.127295017 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.127830029 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.127888918 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.128196001 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.128262997 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.128333092 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.129393101 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.129400969 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.138880014 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.139102936 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.139121056 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.140141010 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.140512943 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.140512943 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.140577078 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.140686035 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.140697002 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.151114941 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.151421070 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.151436090 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.152481079 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.152863979 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.152863979 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.152916908 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.153304100 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.153311014 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.158571959 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.171329021 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.172441959 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.187041044 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.187392950 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.187408924 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.188287020 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.188473940 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.188617945 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.189132929 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.189132929 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.189193010 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.203624010 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.235723972 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.235738993 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.283437967 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.355452061 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.355495930 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.355652094 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.355851889 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.356486082 CEST	49768	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.356503010 CEST	443	49768	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.379910946 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.379946947 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.380029917 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.380064011 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.380199909 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.381325006 CEST	49770	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.381333113 CEST	443	49770	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.384753942 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.384777069 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.384845018 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.384880066 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.385111094 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.385993958 CEST	49769	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.386009932 CEST	443	49769	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.397399902 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.397423029 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.397509098 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.397553921 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.397929907 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.398246050 CEST	49772	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.398266077 CEST	443	49772	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.416708946 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.416738033 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.416745901 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.416941881 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.416973114 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451653004 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451688051 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451694965 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451734066 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451761961 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.451775074 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.451802015 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.457345009 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.491398096 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.492441893 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.493577957 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.493592978 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.493964911 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.495726109 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.495796919 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.495847940 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.535167933 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.535187960 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.535271883 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.535294056 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.535512924 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.543327093 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.551594019 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.551594973 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.551594973 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.551621914 CEST	443	49771	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.551778078 CEST	49771	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.556513071 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.556855917 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.556871891 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.557208061 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.560641050 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.560707092 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.560878992 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.571352005 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.571367979 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.571403980 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.571439028 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.571587086 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.572788954 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.573112011 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.573134899 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.574039936 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.574143887 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.574501038 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.574563980 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.574774981 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.574779987 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.578042984 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.578052998 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.578133106 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.578346014 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.579916000 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.579926014 CEST	443	49773	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.579962015 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.580112934 CEST	49773	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.582988024 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.583611012 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.583622932 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.584702969 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.585125923 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.585285902 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.585355997 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.587471008 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.587476969 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.603342056 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.608365059 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.608834982 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.608854055 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.609910011 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.610038996 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.611057043 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.611119032 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.611298084 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.611305952 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.628233910 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.628532887 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.660661936 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.700383902 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.749253035 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.749274015 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.749284029 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.749342918 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.749392986 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.752334118 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.755330086 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.811588049 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.811664104 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.811703920 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.827554941 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.827579021 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.827644110 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.827702999 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.827702999 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.838424921 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.838502884 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.839159012 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.870661020 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.870695114 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.870702028 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.870718002 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.870851040 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.870877981 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.919822931 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.991005898 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.991024017 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.991065979 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.991118908 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.991254091 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.997706890 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.997716904 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.997817039 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.998990059 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.998997927 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:20.999069929 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:20.999069929 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.117327929 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.117345095 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.117901087 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.117976904 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.117976904 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.118010998 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.118551970 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.123745918 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.123828888 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.124892950 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.125576019 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.125629902 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.125631094 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.125639915 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.126486063 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.126548052 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.126548052 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.126553059 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.127485037 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.127533913 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.127533913 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.127538919 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.128249884 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.170639992 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.172188997 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.243845940 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.243932962 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.244529963 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.247194052 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.247194052 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.247224092 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.248461962 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.248477936 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.250041962 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.250122070 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.250122070 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.250494957 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.250983953 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.251046896 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.251046896 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.251059055 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.251142025 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.251575947 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.251633883 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.251699924 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.251699924 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.251707077 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.252427101 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.252485037 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.252485037 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.252492905 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.253259897 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.253320932 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.253320932 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.253328085 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.253364086 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.253418922 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.253418922 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.253423929 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.253995895 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.254262924 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.255119085 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.255179882 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.255179882 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.255191088 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.255204916 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.255281925 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.255281925 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.255287886 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.257221937 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.257222891 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.294855118 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.295337915 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.299344063 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.301273108 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.301464081 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.319585085 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.319647074 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.370440960 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.370774984 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.370839119 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.370839119 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.370872021 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.370989084 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.371006012 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.371011972 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.371063948 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.371063948 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.371278048 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.371356010 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.371706009 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.371819019 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.372824907 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.376605988 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.376697063 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.376702070 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.376777887 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.376832008 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.577245951 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.577274084 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.577352047 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.577405930 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.577405930 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.659486055 CEST	49778	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.659517050 CEST	443	49778	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.660089016 CEST	49776	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.660098076 CEST	443	49776	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.660794020 CEST	49775	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.660821915 CEST	443	49775	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.796200037 CEST	49774	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.796235085 CEST	443	49774	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.838408947 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.841319084 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.841371059 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.841593981 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.850917101 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.850945950 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.851126909 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.852312088 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.852343082 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.852446079 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.853935957 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.853948116 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.854351997 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.854366064 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.854899883 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.854918003 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.890136003 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.893171072 CEST	49779	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.893192053 CEST	443	49779	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.898185968 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.898222923 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.898441076 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.899569988 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.899591923 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.901526928 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.901563883 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.901690006 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.902369976 CEST	49777	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.902378082 CEST	443	49777	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.903552055 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.903565884 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.914228916 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.914267063 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:21.914325953 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.914807081 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:21.914823055 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.258498907 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.258553028 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.258708954 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.259099960 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.259113073 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.263911963 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.263953924 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.264050007 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.264849901 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.264868021 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.267865896 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.267904997 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.268194914 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.268465996 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.268476009 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.270591021 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.270627975 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.270713091 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.271475077 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.271486044 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.277076006 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.277098894 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.277262926 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.277834892 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.277843952 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.279326916 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.279339075 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.279686928 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.280199051 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.280209064 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.712141037 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.714246035 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.714253902 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.714744091 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.716773987 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.716881037 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.717035055 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.721846104 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.722352982 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.722362995 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.723431110 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.723536015 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.724282980 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.729237080 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.729384899 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.729476929 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.729490042 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.729679108 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.729702950 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.729921103 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.733907938 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.734052896 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.734333992 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.749325037 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:22.749360085 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:22.749428988 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:22.750556946 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:22.750572920 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:22.759452105 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.759807110 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.759824038 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.760921955 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.760998011 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.761344910 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.761559010 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.761647940 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.761830091 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.761842012 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.762118101 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.762129068 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.762887001 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.763015032 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.763329983 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.763412952 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.763482094 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.763482094 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.769849062 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.779335976 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.807338953 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.813484907 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.813811064 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.813823938 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.815037966 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.815118074 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.815556049 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.815694094 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.815874100 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.815880060 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.816793919 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.816809893 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.816811085 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.865585089 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.865760088 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.905536890 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:22.905611038 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:22.905694008 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:22.922081947 CEST	49720	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:45:22.922113895 CEST	443	49720	216.58.206.68	192.168.2.5
Oct 25, 2024 00:45:22.976358891 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.976389885 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.976463079 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.976463079 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.976557016 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.977806091 CEST	49780	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.977823019 CEST	443	49780	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.982845068 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.982892990 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.982965946 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.983547926 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.983565092 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.993275881 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.993300915 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.993376017 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.993390083 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.993433952 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.994901896 CEST	49782	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.994916916 CEST	443	49782	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999025106 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.999062061 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999125957 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.999454021 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.999480009 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999504089 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999526978 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999583006 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.999597073 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999651909 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:22.999738932 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999793053 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:22.999893904 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.004236937 CEST	49781	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.004250050 CEST	443	49781	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.012541056 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.012587070 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.012789965 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.013179064 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.013197899 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024499893 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024511099 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024533033 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024537086 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024548054 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024597883 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.024605036 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024620056 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.024636984 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.024652958 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.024678946 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.033298969 CEST	49784	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.033322096 CEST	443	49784	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.038275957 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.038307905 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.038414955 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.039043903 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.039060116 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.039429903 CEST	49783	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.039449930 CEST	443	49783	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.078244925 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.078320026 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.078493118 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.092034101 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.092101097 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.092207909 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.092952967 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.092978001 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.094206095 CEST	49785	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.094225883 CEST	443	49785	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.097778082 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.097812891 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.098113060 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.098220110 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.098232985 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.125304937 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.126075029 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.126097918 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.126755953 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.127232075 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.127324104 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.127408981 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.130727053 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.130954981 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.130975008 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.131305933 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.131669044 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.131737947 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.131848097 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.135974884 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.136176109 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.136204004 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.136729956 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.137007952 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.137016058 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.137232065 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.137315989 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.137674093 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.137743950 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.137873888 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.137881994 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.138030052 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.138092041 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.138467073 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.138529062 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.138573885 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.143049955 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.143362045 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.143384933 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.145001888 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.145066023 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.145145893 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.145374060 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.145482063 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.145610094 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.145617962 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.145838022 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.145843983 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.146842957 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.146902084 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.147286892 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.147345066 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.147480965 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.147489071 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.171341896 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.175343037 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.176765919 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.179342031 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.192778111 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.192846060 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.192857981 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.240761995 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.283282995 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.283308983 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.382143974 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.382173061 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.382236958 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.382266998 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.382332087 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.387094021 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.387118101 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.387171030 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.387178898 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.387207985 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.392174959 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.392208099 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.392215967 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.392240047 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.392256021 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.392285109 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.392298937 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.394825935 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.394891977 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.395073891 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.415676117 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.415698051 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.415705919 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.415766954 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.415782928 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.415827036 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.420876026 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.420892000 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.420962095 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.420975924 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.420993090 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.421060085 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.442652941 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.506103039 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:23.506241083 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:23.512068987 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.512082100 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.512119055 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.512176991 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.512204885 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.516602993 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.516612053 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.516635895 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.516716003 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.516741991 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.517388105 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.517395020 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.517455101 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.517478943 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.517494917 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.517549992 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.847354889 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.852427959 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.895138979 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.905507088 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.909207106 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.947607994 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.952279091 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.952316046 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.952687979 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.952697992 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.952809095 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.953268051 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.978029013 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.981018066 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.981209993 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.981477022 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.981508017 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.981725931 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.981739044 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.982096910 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.982115984 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.982819080 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.982829094 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.982886076 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.982975960 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.982994080 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.983036995 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.983247995 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.983309984 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.983854055 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.983962059 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.985502005 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.985517025 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.986548901 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.986618042 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.986753941 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.986867905 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.987586021 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.987653017 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.988562107 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.988668919 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.988748074 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.989801884 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.989878893 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.990255117 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.990431070 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.990437984 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.990438938 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.990446091 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.990858078 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.990865946 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.990916967 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:23.990926027 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:23.992872000 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:23.992902040 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:23.993181944 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.031342983 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.031344891 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.035188913 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.036423922 CEST	49787	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.036453962 CEST	443	49787	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.037013054 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.037045002 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.037111998 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.037419081 CEST	49789	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.037444115 CEST	443	49789	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.037889957 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.037921906 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.037977934 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.041503906 CEST	49788	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.041536093 CEST	443	49788	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.041822910 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.041836023 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.041899920 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.042146921 CEST	49786	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.042172909 CEST	443	49786	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.042726040 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.042803049 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.042869091 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.043987036 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.043998957 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.044418097 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.044429064 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.044883013 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.044903994 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.045325041 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.045339108 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.045984983 CEST	49790	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.046010017 CEST	443	49790	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.046314955 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.046344995 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.046401024 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.048038006 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.048051119 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.056801081 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.066751957 CEST	49791	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.066788912 CEST	443	49791	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.067230940 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.067276001 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.067361116 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.068022966 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.068038940 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.075370073 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.077831030 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.077831030 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.077832937 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.237212896 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.237298012 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.237345934 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.241523027 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241548061 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241564035 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241588116 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241610050 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.241612911 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241643906 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241655111 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.241672039 CEST	49800	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.241672039 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.241689920 CEST	443	49800	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.241717100 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.242738008 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.242799997 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.242846012 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.245183945 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.245204926 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.245250940 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.245265961 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.245280027 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.245316029 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.251369953 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.251393080 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.251440048 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.251450062 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.251600981 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.251641035 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.282583952 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282613039 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282620907 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282633066 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282649994 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282695055 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.282723904 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.282753944 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.282768965 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.284898996 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.284919977 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.284960032 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.284966946 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.285006046 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.285901070 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.285933971 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.285990000 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.289529085 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.289541006 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.291204929 CEST	49802	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.291223049 CEST	443	49802	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.292366982 CEST	49803	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.292387962 CEST	443	49803	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.294267893 CEST	49799	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.294281960 CEST	443	49799	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.295320034 CEST	49804	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.295334101 CEST	443	49804	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.300088882 CEST	49801	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.300096035 CEST	443	49801	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.302150965 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.302175999 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.302238941 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.302865982 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.302881956 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.302980900 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.304428101 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.304438114 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.304548025 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.305033922 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.305071115 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.305120945 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.305907965 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.305917978 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.306287050 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.306302071 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.307081938 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.307115078 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.307178020 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.308109999 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.308116913 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.308609009 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.308634043 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.308924913 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.308942080 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.402290106 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.402321100 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.402373075 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.402384996 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.402415991 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.402443886 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.403884888 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.403913975 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.403953075 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.403959036 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.404000044 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.405704021 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.405731916 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.405776024 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.405782938 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.405817032 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.405836105 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.407454014 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.407481909 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.407521963 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.407527924 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.407579899 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.522145033 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.522176027 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.522238970 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.522269964 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.522303104 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.522322893 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.523015976 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.523034096 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.523092031 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.523101091 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.523144007 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.524255991 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.524275064 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.524329901 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.524338961 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.524395943 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.533813000 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.533839941 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.533907890 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.533921003 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.533970118 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534099102 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534116030 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534163952 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534172058 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534220934 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534651995 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534670115 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534713984 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534720898 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534745932 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534753084 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534759045 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534790993 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534797907 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534807920 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.534827948 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534847021 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.534864902 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.641884089 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.641958952 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.641958952 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.642011881 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.642811060 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.642828941 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.642839909 CEST	49794	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.642846107 CEST	443	49794	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.720551968 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.720607042 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.720685005 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.721961975 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.721999884 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.722064018 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.722173929 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.722198963 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.722261906 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.723803997 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.723830938 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.723882914 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.724026918 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.724042892 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.724132061 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.724162102 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.724471092 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.724487066 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.724610090 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.724628925 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.725533962 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.725552082 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.725614071 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.725958109 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:24.725972891 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:24.902257919 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.904212952 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.904236078 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.905455112 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.906018972 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.907299995 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.907947063 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.909996986 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.915484905 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.915641069 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.915944099 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.915957928 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.915992975 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.916004896 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.916405916 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.916529894 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.916543961 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.916569948 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.916583061 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.916894913 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.916960955 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.917160988 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.917181015 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.917419910 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.917453051 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.917970896 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.917974949 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.918030977 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.918081045 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.918240070 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.918241978 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.918245077 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.931658030 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.932148933 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.932168961 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.933284998 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.933739901 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.933739901 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.933814049 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.934103012 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.943820000 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.944700003 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.944720030 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.945754051 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.945992947 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.946378946 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.946444988 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.946832895 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.946841955 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.959326982 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.959341049 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.979329109 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:24.991579056 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.991579056 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:24.991597891 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.007582903 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.007621050 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.136517048 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.137423038 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.137438059 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.137797117 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.138158083 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.138230085 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.138494968 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.169043064 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.169415951 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.169482946 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.169491053 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.169498920 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.169687033 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.170483112 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.170711994 CEST	49807	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.170726061 CEST	443	49807	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.170802116 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.171905041 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.171924114 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.172018051 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.172049999 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.172102928 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.172452927 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.173630953 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173635960 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173655033 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173674107 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.173702002 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173707962 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173712015 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.173738003 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.173805952 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.173814058 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.173844099 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.175141096 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.175143957 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.175168991 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.175199986 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.175973892 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.175988913 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.176204920 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.176342964 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.176800966 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.176809072 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.176990032 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.177056074 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.177995920 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.178004980 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.178677082 CEST	49809	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.178677082 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.178705931 CEST	443	49809	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.178725004 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.178992987 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.178993940 CEST	49805	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.179002047 CEST	443	49805	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.179330111 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.179656982 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.179678917 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.179693937 CEST	49806	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.179706097 CEST	443	49806	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.179969072 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.179991007 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.180016041 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.180645943 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.180924892 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.180934906 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.180998087 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.181006908 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.182818890 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.182907104 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.182914972 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.183255911 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.183263063 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.184494972 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.186850071 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.186850071 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.186866045 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.186934948 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.187632084 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.188230038 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.188251972 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.189342022 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.189343929 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.189503908 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.191289902 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.191289902 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.191304922 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.191366911 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.194614887 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.195358992 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.195368052 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.196425915 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.196600914 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.197560072 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.197628975 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.198453903 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.198458910 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.213221073 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.213251114 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.213263035 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.213490009 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.213510036 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.294821024 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:25.295296907 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:25.296325922 CEST	49830	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:25.296370983 CEST	443	49830	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:25.297291994 CEST	49830	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:25.302000046 CEST	49830	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:25.302020073 CEST	443	49830	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:25.302151918 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:25.303797960 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:25.336756945 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.337439060 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.337456942 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.343904018 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.343919039 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.343950033 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.344053984 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.344067097 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.344258070 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.376421928 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.376441002 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.376513958 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.376571894 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.376703024 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.377724886 CEST	49810	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.377751112 CEST	443	49810	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.378500938 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.378500938 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.378500938 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.378539085 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.378582954 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.378603935 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.378633976 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.380769014 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.380779982 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.387334108 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.390412092 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.392887115 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.392904997 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.392955065 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.393004894 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.393230915 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.393805981 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.397025108 CEST	49812	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.397047043 CEST	443	49812	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.399411917 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.399451017 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.399707079 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.399806023 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.399821997 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.427464008 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.427493095 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.427550077 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.427582979 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.427862883 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.428702116 CEST	49815	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.428714037 CEST	443	49815	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.431497097 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.431548119 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.431736946 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.434510946 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.434524059 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.434540033 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.434540987 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.434602976 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.434637070 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.440665960 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.441503048 CEST	49816	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.441524029 CEST	443	49816	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.444819927 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.444845915 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.444993019 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.446979046 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.446997881 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.447005033 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.447016954 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.447033882 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.447124004 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.447153091 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.447237015 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.448085070 CEST	49813	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.448096037 CEST	443	49813	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.451267958 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.451431036 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.460712910 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.460870981 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.461046934 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.461899042 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.462666988 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.462692022 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.463383913 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.463390112 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.466965914 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.466978073 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.467005968 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.467036963 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.467051983 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.467081070 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.467402935 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.468242884 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.468276024 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.468709946 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.468718052 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.473476887 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.474519014 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.474549055 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.475042105 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.475050926 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.486850023 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.486888885 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.487066031 CEST	49817	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.487078905 CEST	443	49817	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.487124920 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.487977982 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.487987995 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.491024017 CEST	49814	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.491035938 CEST	443	49814	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.494391918 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.494430065 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.494780064 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.495233059 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.495234013 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.495246887 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.495253086 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.495589972 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.495589972 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.495618105 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.499094963 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.499677896 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.499695063 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.502715111 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.502841949 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.502865076 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.505783081 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.505783081 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.505815983 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.505827904 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.585201979 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.585213900 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.585266113 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.585339069 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.585360050 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.585469961 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.590939999 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.590950012 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.590981960 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.591057062 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.591073990 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.591110945 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.599899054 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.599924088 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.600565910 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.600655079 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.601562023 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.602981091 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.603004932 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.603029966 CEST	49823	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.603043079 CEST	443	49823	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.604178905 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.604203939 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.604254961 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.604310989 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.604549885 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.610349894 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.610629082 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.611500978 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.617182016 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.617206097 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.617398977 CEST	49819	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.617405891 CEST	443	49819	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.622884989 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.622885942 CEST	49820	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.622917891 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.622927904 CEST	443	49820	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.631057024 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.631098032 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.631345034 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.631561995 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.631580114 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.632992983 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.633055925 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.633075953 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.633102894 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.634361029 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.634445906 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.634603977 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.634624004 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.634712934 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.634725094 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.637981892 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.638233900 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.638698101 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.638698101 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.638956070 CEST	49822	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.638966084 CEST	443	49822	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.642275095 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.642309904 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.642520905 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.643846035 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.643862963 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.645191908 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.645217896 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.645268917 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.645370007 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.645370007 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.645670891 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.645689964 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.645718098 CEST	49821	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.645726919 CEST	443	49821	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.648883104 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.648914099 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.649161100 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.649161100 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:25.649190903 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:25.691342115 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.708710909 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.708726883 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.708762884 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.708882093 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.708883047 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.714859009 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.714870930 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.714900970 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.714936972 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.715240002 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.832801104 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.832814932 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.832850933 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.832871914 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.832986116 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.838778019 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.838787079 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.838816881 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.838849068 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.838905096 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.839945078 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.839953899 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.839979887 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.839994907 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.840286016 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.962852001 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.962866068 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.963068008 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.963237047 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.963244915 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:25.963291883 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.963349104 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:25.984738111 CEST	443	49830	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:25.984908104 CEST	49830	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:26.042602062 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.046809912 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.051234007 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.062968016 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.086616039 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.086631060 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.086736917 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.087287903 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.087299109 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.087367058 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.098095894 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.177076101 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.178472996 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.199058056 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.210484028 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.210566998 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.210870028 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.210949898 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.247653961 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.262725115 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.295506001 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.298223019 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.299021006 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.328695059 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.328788996 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.334809065 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.334882021 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.352813959 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.359440088 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.359473944 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.359882116 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.359905958 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360141039 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.360166073 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360567093 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.360575914 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360656023 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360656977 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360724926 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.360724926 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.360738993 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.360860109 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.360873938 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361011982 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.361042976 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361124992 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361150980 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.361186028 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361201048 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361217976 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361264944 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.361309052 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.361325979 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.361516953 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362415075 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362441063 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362461090 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362462044 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362481117 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.362502098 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.362634897 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.362726927 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.362811089 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.363118887 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.363203049 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.363575935 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.363584042 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.363630056 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.363643885 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.364561081 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.364658117 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.365021944 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.365096092 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.365477085 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.365571022 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.365912914 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.366125107 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.366461992 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.366610050 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.366796017 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.366890907 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367069006 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367182970 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367305040 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367357016 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367372036 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367456913 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367511988 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367530107 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367558002 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367598057 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367662907 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367671013 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367763042 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367767096 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.367773056 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367780924 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.367945910 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.368586063 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.368933916 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.373039961 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.373058081 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.373197079 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.373215914 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.374129057 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.374201059 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.374510050 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.374577999 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.374664068 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.374670982 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.374732971 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.374794006 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.375040054 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.375113010 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.375127077 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.375174046 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.380353928 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.380429983 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.381452084 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.386904001 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.411326885 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.411340952 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.411361933 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.411395073 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.415338993 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.458262920 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.458417892 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.459074974 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.459137917 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.482168913 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.482187033 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.482189894 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.482312918 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.483228922 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.483228922 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.544452906 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.544631004 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.575329065 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.575400114 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.579328060 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.579330921 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.579338074 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.579396963 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.579415083 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.579418898 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.582379103 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.582470894 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.583008051 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.583072901 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.583327055 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.583400011 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.591322899 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.591367960 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.616589069 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616611958 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616641998 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616648912 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616672039 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616707087 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.616717100 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.616758108 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.616775990 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.618149996 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618217945 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618258953 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.618416071 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618433952 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618472099 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.618485928 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618500948 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.618549109 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.627815962 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.627837896 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.627893925 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.627902985 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.627948999 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.631186008 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.631273985 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.631320953 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.700433016 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.700506926 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.706593990 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.706667900 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.751770020 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.751796961 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.751817942 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.751847982 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.751863956 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.751880884 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.751907110 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.751934052 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.753374100 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753400087 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753428936 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753448963 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753458977 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753515959 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.753519058 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.753530025 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.753576994 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.753576994 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.758089066 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.758121967 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.758173943 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.758179903 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.758222103 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.769309044 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.769331932 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.769386053 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.769396067 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.769408941 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.769452095 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.777431011 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.777457952 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.779494047 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.779499054 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.779865026 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.779874086 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.780388117 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.780391932 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.780793905 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.780814886 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.781188011 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.781194925 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.781544924 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.781574011 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.783618927 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.783623934 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.785773039 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.785785913 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.786324024 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.786345005 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.789871931 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.824495077 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.824582100 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.830348969 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.830416918 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.872136116 CEST	49835	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.872159004 CEST	443	49835	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.873426914 CEST	49832	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.873462915 CEST	443	49832	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.873812914 CEST	49833	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.873819113 CEST	443	49833	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.875577927 CEST	49836	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.875592947 CEST	443	49836	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.875890970 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.876035929 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.876468897 CEST	49828	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.876485109 CEST	443	49828	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.876878023 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.876923084 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.876997948 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.877475023 CEST	49826	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.877492905 CEST	443	49826	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.877796888 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.877825975 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.878046989 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.878427029 CEST	49829	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.878447056 CEST	443	49829	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.878637075 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.878653049 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.878859997 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.881726980 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.881763935 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.882226944 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.882236958 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.883040905 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.883050919 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.893256903 CEST	49834	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.893279076 CEST	443	49834	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.894429922 CEST	49837	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.894439936 CEST	443	49837	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.895426989 CEST	49827	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.895445108 CEST	443	49827	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.896400928 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.896414042 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.896676064 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.897012949 CEST	49831	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.897021055 CEST	443	49831	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.897507906 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.897528887 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.897671938 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.899070024 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.899101019 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.899234056 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.899544001 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.899563074 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.899674892 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.900707006 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.900727034 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.900784969 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.902435064 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.902461052 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.902540922 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.903225899 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.903239012 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.904191017 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.904203892 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.904208899 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.904218912 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.904759884 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.904774904 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.905674934 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.905689001 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.906001091 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.906017065 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.906656027 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.906661987 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.906807899 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.906858921 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.906888962 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.906936884 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.907963037 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.907984972 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.908000946 CEST	49839	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.908006907 CEST	443	49839	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.908361912 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.908368111 CEST	49842	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.908376932 CEST	443	49842	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.908648968 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.908703089 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.908840895 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.909033060 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.909073114 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.910703897 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.910711050 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.910723925 CEST	49840	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.910728931 CEST	443	49840	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.910782099 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.910789967 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.910809040 CEST	49838	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.910814047 CEST	443	49838	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.913063049 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.913141966 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.913163900 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.913222075 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.913274050 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.913316965 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.913989067 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.913996935 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.914263964 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.914290905 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.914345980 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917205095 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917244911 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.917370081 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917376041 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.917390108 CEST	49841	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917393923 CEST	443	49841	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.917620897 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917983055 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.917995930 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.918196917 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.918217897 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.918968916 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.918988943 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.919285059 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.919430017 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.919440985 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.920301914 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.920327902 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.920478106 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.920568943 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.920579910 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.920712948 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.920847893 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.920860052 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.921155930 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.921171904 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.922732115 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.922741890 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.923010111 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.923158884 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:26.923166990 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:26.948596001 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.948674917 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.948687077 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.948734045 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.949158907 CEST	49808	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.949181080 CEST	443	49808	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.949642897 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.949668884 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:26.949728012 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.950299025 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:26.950314045 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.650046110 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.651207924 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.651245117 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.653834105 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.655735016 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.658416986 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.663126945 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.663146019 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.663446903 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.663470030 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.664045095 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.664288044 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.664294958 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.664577007 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.664582014 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.664642096 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.664647102 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.664709091 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.664720058 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.665066957 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.665071964 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.665102005 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.665116072 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.665457964 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.665462017 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.737863064 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.738203049 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.738228083 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.739264011 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.739327908 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.739770889 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.739825010 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.740123034 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.740128994 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.740560055 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.740748882 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.740775108 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.741308928 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.741625071 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.741710901 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.741718054 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.746912956 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.747149944 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.747176886 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.747659922 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.747967005 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.748023033 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.748209000 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.760189056 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.760468960 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.760487080 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.760809898 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.761109114 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.761157990 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.761226892 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.762758017 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.762931108 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.762948990 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.763961077 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.764034033 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.764419079 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.764473915 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.764592886 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.764858007 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.766241074 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.766259909 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.766769886 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.766979933 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.766992092 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.767282009 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.767338037 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.767407894 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.767611027 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.767667055 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.767857075 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.767920017 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.768007040 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.768013954 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.768191099 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.768234015 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.768398046 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.768404961 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.769434929 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.769489050 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.769782066 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.769826889 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.769867897 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.772351027 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.772553921 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.772567987 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.774005890 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.774071932 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.774445057 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.774513006 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.774565935 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.787329912 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.787844896 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.790247917 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.790333986 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.790415049 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.790608883 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.790632010 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.790667057 CEST	49859	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.790679932 CEST	443	49859	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.791171074 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.791337967 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.791347027 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.791413069 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.791470051 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.791594028 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.791601896 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.791613102 CEST	49857	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.791618109 CEST	443	49857	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.792373896 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.792386055 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.793441057 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.793528080 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.793622017 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.793730021 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.793787003 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.793930054 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.793939114 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.793967009 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.793978930 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.794028997 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.794048071 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.794171095 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.794171095 CEST	49855	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.794187069 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.794194937 CEST	443	49855	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.794270992 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.794284105 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.794688940 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.794770956 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.795001030 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.795006990 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.795197964 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.795222044 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.795275927 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.795344114 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.795433998 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.795479059 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.795479059 CEST	49858	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.795485020 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.795492887 CEST	443	49858	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.797239065 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.797251940 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.797419071 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.797554970 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.797565937 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.798832893 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.798861027 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.798902988 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.798966885 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.799020052 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.799043894 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.799140930 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.799146891 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.799160004 CEST	49854	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.799164057 CEST	443	49854	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.799215078 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.799232960 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.801079035 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.801104069 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.801172018 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.801312923 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:27.801325083 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:27.807329893 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.808613062 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.808844090 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.808855057 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.810029030 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.810118914 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.810441971 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.810519934 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.810713053 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.810724974 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.811321974 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.811330080 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.813764095 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.813998938 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.814007044 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.815335989 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.815361023 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.817666054 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.817734957 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.818079948 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.818136930 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.818284988 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.818290949 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.821477890 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.821523905 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.821544886 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.821568966 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.971335888 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.974268913 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.979336977 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.979491949 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.979837894 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.994844913 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.995022058 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.995338917 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.995831013 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.995851994 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.995851994 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.998212099 CEST	49845	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.998224974 CEST	443	49845	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.998702049 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.998723030 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.998737097 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.998810053 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:27.998823881 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:27.998868942 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.000802040 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.000817060 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.004601955 CEST	49844	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.004617929 CEST	443	49844	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.005400896 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.005423069 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.005491972 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.006428957 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.006444931 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.006611109 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.006638050 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.006686926 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.006705046 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.006756067 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.008512020 CEST	49843	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.008529902 CEST	443	49843	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.011588097 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.011619091 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.011837959 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.012712955 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.012731075 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.016484976 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.016504049 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.016560078 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.016565084 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.016629934 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.017606020 CEST	49849	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.017620087 CEST	443	49849	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.018909931 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.018932104 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.018985033 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.019001007 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.019054890 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.019107103 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.019767046 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.019798994 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.019856930 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.019876957 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.019918919 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.022672892 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.022737980 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.022789001 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.024282932 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.024365902 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.024565935 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.025568008 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.025593996 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.025742054 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.025849104 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.025873899 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.025918961 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.025929928 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.025943041 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.025996923 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.026319981 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.026334047 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.029212952 CEST	49848	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.029227018 CEST	443	49848	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.029589891 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.029619932 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.029808044 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.029917002 CEST	49850	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.029922009 CEST	443	49850	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.030349016 CEST	49851	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.030359030 CEST	443	49851	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.030571938 CEST	49856	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.030586004 CEST	443	49856	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.030775070 CEST	49852	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.030803919 CEST	443	49852	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.031410933 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.031431913 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.037384033 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.037391901 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.037585020 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.037916899 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.037930965 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.037976980 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.038206100 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.038217068 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.038357973 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.038369894 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.038718939 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.038746119 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.038888931 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.039078951 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.039088011 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.039448977 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.039457083 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.039539099 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.039747953 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.039760113 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.052392006 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.052467108 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.052511930 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.055529118 CEST	49847	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.055537939 CEST	443	49847	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.056231976 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.056246996 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.056364059 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.057610989 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.057624102 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.063275099 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.063296080 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.063352108 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.063368082 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.063401937 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.064692974 CEST	49860	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.064699888 CEST	443	49860	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.065159082 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.065179110 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.065246105 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.065543890 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.065557003 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.074038982 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.074091911 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.074153900 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.074166059 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.074222088 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.074331045 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.074754953 CEST	49853	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.074763060 CEST	443	49853	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.078336954 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.078370094 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.078670025 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.078871012 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.078882933 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.516458035 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.517049074 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.517076015 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.518703938 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.518711090 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.522460938 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.522835016 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.522857904 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.523288965 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.523293972 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.532162905 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.532630920 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.532649994 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.533094883 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.533101082 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.534151077 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.534518003 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.534531116 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.534924984 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.534929991 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.546097994 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.546515942 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.546545982 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.547008991 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.547013998 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.649162054 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.649230003 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.649466038 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.649736881 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.649751902 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.649808884 CEST	49864	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.649816036 CEST	443	49864	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.654102087 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.654154062 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.654270887 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.654527903 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.654544115 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.655766010 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.655833960 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.655932903 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.656131029 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.656150103 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.656162977 CEST	49861	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.656167984 CEST	443	49861	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.660501003 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.660546064 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.660607100 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.660746098 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.660757065 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.679481983 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.679562092 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.679761887 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.680644035 CEST	49862	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.680670023 CEST	443	49862	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.681512117 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.681946039 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.682054043 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.682099104 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.682121038 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.682133913 CEST	49865	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.682141066 CEST	443	49865	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.684626102 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.684675932 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.684712887 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.684751987 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.684756994 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.684900045 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.684911013 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.684930086 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.685036898 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.685054064 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.731082916 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.731174946 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.731240034 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.731410027 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.731431007 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.731441975 CEST	49863	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.731447935 CEST	443	49863	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.734220982 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.734251976 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.734535933 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.734709978 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:28.734719992 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:28.854095936 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.854414940 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.854440928 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.854871988 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.855549097 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.855653048 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.855700970 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.859535933 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.859782934 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.859802008 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.860987902 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.861674070 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.861916065 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.862024069 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.866314888 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.866633892 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.866667032 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.868129969 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.868216991 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.868602037 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.868684053 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.868968964 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.868978024 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.883732080 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.883888006 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.884088039 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.884113073 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.884324074 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.884334087 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.884491920 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.884884119 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.884944916 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.885181904 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.885349035 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.885405064 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.885757923 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.885819912 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.885984898 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.885991096 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.891432047 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.892115116 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.892132044 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.893205881 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.893342018 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.893733025 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.893798113 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.894001961 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.894007921 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.895195007 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.895447016 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.895462036 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.895833015 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.896186113 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.896248102 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.896461010 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.899332047 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.901458979 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.901796103 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.901813984 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.902822971 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.902888060 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.903326988 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.903510094 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.903573990 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.903722048 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.903729916 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.905252934 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.905365944 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.913623095 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.914011002 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.914021969 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.915076971 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.915154934 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.915806055 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.915877104 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.916109085 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.916114092 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.921231031 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.927337885 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.932383060 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.932717085 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.932746887 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.933763027 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.933835983 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.933903933 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.934050083 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.934077978 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.934514046 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.934588909 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.934952974 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.934961081 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.937254906 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.937275887 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.937969923 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.938044071 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.939332962 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.941565990 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.941656113 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.941812992 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.941822052 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.953248024 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.959106922 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.959587097 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.959619045 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.960680008 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.960901976 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.961355925 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.961436987 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.961601973 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.961612940 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:28.969264030 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.985239983 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:28.987309933 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.017287970 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.110053062 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.110079050 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.110143900 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.110194921 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.110244036 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.115793943 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.115817070 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.115878105 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.115935087 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.115935087 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.124313116 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.124337912 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.124408960 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.124412060 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.124463081 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.141844034 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.141865015 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.141923904 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.141933918 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.141942024 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.141948938 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.141998053 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.142004013 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.142008066 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.142040968 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.150489092 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.150518894 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.150571108 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.150610924 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.150646925 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.153289080 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.153410912 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.153476000 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.162883997 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.162905931 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.162971973 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.162977934 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.163142920 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.178339005 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.178361893 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.178419113 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.178450108 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.178500891 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.192718983 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.192747116 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.192775011 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.192814112 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.192871094 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.192884922 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.192924976 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.192929029 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.195077896 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.229284048 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.229407072 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.229533911 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.372167110 CEST	49869	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.372189045 CEST	443	49869	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.372549057 CEST	49870	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.372577906 CEST	443	49870	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.372847080 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.372879028 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.372934103 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.373214960 CEST	49868	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.373222113 CEST	443	49868	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.373536110 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.373579979 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.373627901 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.373924971 CEST	49866	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.373944044 CEST	443	49866	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.374152899 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.374183893 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.374561071 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.375437975 CEST	49867	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.375485897 CEST	443	49867	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.375937939 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.375953913 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.376054049 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.376460075 CEST	49873	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.376471996 CEST	443	49873	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.376568079 CEST	49871	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.376579046 CEST	443	49871	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.376758099 CEST	49872	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.376773119 CEST	443	49872	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.377044916 CEST	49874	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.377052069 CEST	443	49874	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.377310991 CEST	49875	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.377319098 CEST	443	49875	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.377460957 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.377470970 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.377610922 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.378310919 CEST	49877	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.378321886 CEST	443	49877	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.379751921 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.379767895 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.380146027 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.380163908 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.380619049 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.380634069 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.380938053 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.380953074 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.381839991 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.381850958 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.389067888 CEST	49876	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.389080048 CEST	443	49876	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.389426947 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.389465094 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.389672041 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.390433073 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.390449047 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.392514944 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.392544031 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.392647028 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.393111944 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.393126011 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.396970987 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.396985054 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.397156000 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.397317886 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.397330046 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.397839069 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.397861004 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.397943974 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.398114920 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.398127079 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.399393082 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.399410009 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.399471045 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.399620056 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.399631023 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.400070906 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.400784016 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.400809050 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.400870085 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.401045084 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.401057959 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.401169062 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.401190042 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.401601076 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.401606083 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.402143002 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.402152061 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.402272940 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.402440071 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:29.402451992 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:29.405793905 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.406352997 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.406373024 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.406982899 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.406989098 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.447484016 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.449136972 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.449176073 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.449611902 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.449619055 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.460382938 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.460832119 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.460850000 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.461324930 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.461329937 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.469470978 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.470112085 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.470146894 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.470484972 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.470490932 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.532553911 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.533032894 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.533104897 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.533148050 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.533169031 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.533180952 CEST	49879	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.533185959 CEST	443	49879	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.535840034 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.535866976 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.536041975 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.536226988 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.536245108 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.542485952 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.542653084 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.542788029 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.542788029 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.542824030 CEST	49878	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.542844057 CEST	443	49878	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.545042038 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.545083046 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.545171022 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.545332909 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.545346975 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.587563038 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.587644100 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.587696075 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.587902069 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.587922096 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.587933064 CEST	49880	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.587939978 CEST	443	49880	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.590727091 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.590765953 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.590842009 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.590984106 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.590996027 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.598602057 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.598877907 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.598942995 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.598978043 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.598990917 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.599001884 CEST	49881	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.599005938 CEST	443	49881	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.601541996 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.601573944 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.601650000 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.601757050 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.601772070 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.604005098 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.604310036 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.604376078 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.604443073 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.604453087 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.604464054 CEST	49882	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.604469061 CEST	443	49882	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.606503010 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.606533051 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:29.606595993 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.606702089 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:29.606715918 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.242770910 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.243035078 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.243051052 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.244060040 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.244127989 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.244631052 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.244689941 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.244782925 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.245765924 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.245942116 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.245959044 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.246263027 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.246571064 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.246632099 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.246716976 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.253948927 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.254148006 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.254163027 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.255187035 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.255248070 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.255547047 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.255606890 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.255721092 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.258336067 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.258682013 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.258707047 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.259584904 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.259756088 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.259778023 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.260777950 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.261219978 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.261219978 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.261219978 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.261238098 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.261285067 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.262269020 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.262334108 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.262701035 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.262823105 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.262831926 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.262870073 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.263885975 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.264182091 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.264189959 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.264525890 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.264872074 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.264930010 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.264991045 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.266932011 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.267122030 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.267153978 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.268246889 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.268340111 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.268712044 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.268805027 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.268896103 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.268912077 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.273703098 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.273721933 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.273905039 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.273912907 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.274010897 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.274024010 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.274352074 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.274630070 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.274694920 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.274730921 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.274876118 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.274933100 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.275279045 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.275440931 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.275490999 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.278343916 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.278522015 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.278538942 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.278949022 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.279258013 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.279360056 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.279369116 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.280070066 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.280235052 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.280251980 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.282118082 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.282181025 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.282829046 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.282911062 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.282960892 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.285303116 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.285556078 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.285568953 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.286539078 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.286601067 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.286986113 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.287046909 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.287092924 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.291327953 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.291332960 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.293613911 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.294147968 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.294199944 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.294585943 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.294596910 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.297336102 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.297714949 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.297734022 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.298104048 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.298108101 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.299438000 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.299448967 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.299454927 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.299460888 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.307327986 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.314181089 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.314692974 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.314709902 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.315121889 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.315134048 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.315454006 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.315466881 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.315471888 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.315473080 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.315476894 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.315480947 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.315486908 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.315498114 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.315505981 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.327327967 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.327328920 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.327332973 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.331444025 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.331455946 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.331485987 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.331491947 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.331501007 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.347428083 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.347446918 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.350466967 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.351332903 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.351357937 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.352046013 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.352051973 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.356342077 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.356542110 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.363446951 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.371256113 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.373902082 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.373922110 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.374517918 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.374526024 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.379441023 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.379581928 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.424025059 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.424266100 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.424341917 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.424421072 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.424421072 CEST	49895	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.424467087 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.424513102 CEST	443	49895	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.426126003 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.426188946 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.426253080 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.426403046 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.426423073 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.426436901 CEST	49896	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.426441908 CEST	443	49896	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.427212954 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.427247047 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.427360058 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.427680969 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.427695036 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.429348946 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.429385900 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.429459095 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.429616928 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.429627895 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.442764997 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.442962885 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.443017960 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.443090916 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.443090916 CEST	49897	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.443106890 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.443116903 CEST	443	49897	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.445092916 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.445120096 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.445385933 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.445537090 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.445549965 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.482799053 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.482995033 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.483052969 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.483083010 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.483098030 CEST	49899	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.483103037 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.483108997 CEST	443	49899	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.485572100 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.485605955 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.485872984 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.486042976 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.486052990 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.497591972 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.497658968 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.497714996 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.498550892 CEST	49886	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.498558998 CEST	443	49886	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.498882055 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.498919010 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.499087095 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.499352932 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.499366999 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.502439022 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.502505064 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.502594948 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.504434109 CEST	49883	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.504448891 CEST	443	49883	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.504786968 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.504801035 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.504914045 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.505297899 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.505309105 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.506685019 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.506908894 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.506959915 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.507024050 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.507044077 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.507055998 CEST	49898	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.507061958 CEST	443	49898	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.510936022 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.510961056 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511018991 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511030912 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511043072 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511084080 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511451960 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511480093 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511528969 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511547089 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511560917 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.511585951 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511612892 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511872053 CEST	49887	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.511879921 CEST	443	49887	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.512346983 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.512368917 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.512440920 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.513072968 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.513083935 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.513998032 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.514019966 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.514072895 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.514070988 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.514260054 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.514569044 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.514590979 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.514745951 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.515832901 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:30.515841961 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:30.516510010 CEST	49893	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.516529083 CEST	443	49893	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.517755985 CEST	49891	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.517771006 CEST	443	49891	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.520447016 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.520503044 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.520548105 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.521611929 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.521627903 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.521898031 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.522150040 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.522157907 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.522669077 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.522696972 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.522787094 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.523297071 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.523317099 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.524350882 CEST	49889	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.524363041 CEST	443	49889	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.526351929 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.527040005 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.527056932 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.527190924 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.527195930 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.527256012 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.527689934 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.527698994 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.528265953 CEST	49888	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.528305054 CEST	443	49888	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.528547049 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.528558969 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.528812885 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.529288054 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.529300928 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.534384966 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.534694910 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.534739017 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.535083055 CEST	49884	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.535090923 CEST	443	49884	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535185099 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535203934 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535211086 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535263062 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.535274982 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535285950 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535341978 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.535491943 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.535518885 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.535696983 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.536412954 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.536427021 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.539877892 CEST	49885	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.539881945 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.539886951 CEST	443	49885	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.539947987 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.540004969 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.540268898 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.540330887 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.540424109 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.540467978 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.540543079 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.540592909 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.541240931 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.541271925 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.543272972 CEST	49890	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.543293953 CEST	443	49890	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.544414043 CEST	49894	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.544437885 CEST	443	49894	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.547127962 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.547164917 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.547236919 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.547431946 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.547446012 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.548183918 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.548213005 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.548295021 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.548479080 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.548508883 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.556550980 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.556571960 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.556629896 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.556674957 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.556675911 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.557486057 CEST	49892	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.557503939 CEST	443	49892	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.560961962 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.560991049 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:30.561141968 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.561378956 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:30.561389923 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.149995089 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.151654959 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.151654959 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.151684046 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.151690960 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.175651073 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.176668882 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.176686049 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.178251982 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.178256989 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.194349051 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.195306063 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.195306063 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.195337057 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.195354939 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.227075100 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.227922916 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.227972031 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.228671074 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.228678942 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.257392883 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.258569956 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.258569956 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.258603096 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.258620977 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.283822060 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.283898115 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.284261942 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.284261942 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.286505938 CEST	49900	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.286525965 CEST	443	49900	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.287992001 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.288028955 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.291167021 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.291167021 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.291198015 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.306751013 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.306838036 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.307199001 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.307199001 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.307199001 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.310694933 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.310726881 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.311079979 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.311079979 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.311105967 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.331104994 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.331197977 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.331425905 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.331425905 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.331715107 CEST	49901	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.331732035 CEST	443	49901	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.336455107 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.336484909 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.338902950 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.339104891 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.339116096 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.359091043 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.361340046 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.362509012 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.365124941 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.366600990 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.366600990 CEST	49903	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.366617918 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.366626978 CEST	443	49903	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.367197990 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.367228031 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.367619038 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.368081093 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.368791103 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.368793011 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.368805885 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.368855953 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.369162083 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.369196892 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.369582891 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.369584084 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.369663954 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.370773077 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.374303102 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.374313116 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.374336958 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.374373913 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.375411987 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.375471115 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.375663042 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.375916004 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.375932932 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.376018047 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.376151085 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.376173973 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.376275063 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.376827955 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.376841068 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.378158092 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.378910065 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.378910065 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.378981113 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.379333973 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.380220890 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.380561113 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.380568027 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.380999088 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.382132053 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.382132053 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.382144928 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.382262945 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.389883995 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.391268015 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.391338110 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.391366005 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.391433954 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.391621113 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.391727924 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.391727924 CEST	49907	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.391745090 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.391755104 CEST	443	49907	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.391927004 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.392533064 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.392599106 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.392678022 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.392712116 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.396259069 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.396298885 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.396620035 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.396631002 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.396956921 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.397824049 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.398389101 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.399959087 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.399959087 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.399982929 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.400048971 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.401776075 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.401792049 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.407267094 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.407706022 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.407975912 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.407985926 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.408283949 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.408307076 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.409168005 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.409318924 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.409663916 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.409701109 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.409769058 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.409811020 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.410161018 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.410268068 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.410347939 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.410355091 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.410679102 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.410687923 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.412759066 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.412760973 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.412770033 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.413806915 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.413806915 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.414269924 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.414273977 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.414278030 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.414279938 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.415354967 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.415381908 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.415446043 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.415646076 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.415728092 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.416017056 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.416090965 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.416219950 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.416244030 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.416609049 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.416619062 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.416646957 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.416755915 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.417135954 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.417140961 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.417283058 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.417588949 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.417588949 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.417660952 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.417788982 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.419328928 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.427324057 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.428702116 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.428713083 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.428734064 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.428734064 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.428747892 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.439331055 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.444665909 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.444665909 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.444695950 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.460689068 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.460688114 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.460688114 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.461705923 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.461707115 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.461729050 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.476708889 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.476825953 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.492847919 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.508774042 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.620692968 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.620714903 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.620789051 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.620827913 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.620889902 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.620889902 CEST	49902	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:31.620930910 CEST	443	49902	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:31.624171972 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.624197006 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.624265909 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.626267910 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.626312017 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.626610994 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.627037048 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.629385948 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.629472017 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.631269932 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.635657072 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.635803938 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.636372089 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.647936106 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.648005962 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.653954029 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.654026031 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.654217958 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.655225992 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.663003922 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.663016081 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.663084984 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.663199902 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.663229942 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.663393974 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.663451910 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.668431997 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.670957088 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.671046972 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.672208071 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.672224045 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.672280073 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.672341108 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.672344923 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.672661066 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.674787045 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.674808979 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.674881935 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.674935102 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.675069094 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.677136898 CEST	49909	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.677159071 CEST	443	49909	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.681911945 CEST	49911	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.681920052 CEST	443	49911	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.684264898 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.684343100 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.690995932 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.723107100 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.723143101 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.732144117 CEST	49906	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.732176065 CEST	443	49906	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.900199890 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.900243044 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.900317907 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.912935019 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.912954092 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.917778015 CEST	49905	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.917792082 CEST	443	49905	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.928299904 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.928363085 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.928453922 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.931297064 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.931332111 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.936151981 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:31.936187029 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:31.936258078 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.006558895 CEST	49908	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.006619930 CEST	443	49908	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.007739067 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.007761002 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.012147903 CEST	49904	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.012176991 CEST	443	49904	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.012587070 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.012645960 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.012716055 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.013195992 CEST	49916	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.013225079 CEST	443	49916	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.013904095 CEST	49914	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.013931036 CEST	443	49914	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.014245987 CEST	49915	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.014271975 CEST	443	49915	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.015269041 CEST	49910	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.015286922 CEST	443	49910	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.016653061 CEST	49913	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.016659975 CEST	443	49913	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.017431021 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.017466068 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.017535925 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.018330097 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.018357038 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.019012928 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.019045115 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.019105911 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.020638943 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.020653009 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.021653891 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.021672964 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.022382021 CEST	49912	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.022394896 CEST	443	49912	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.022727966 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.022758961 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.022829056 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.023401022 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.023416042 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.023466110 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.023894072 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.023910046 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.025151014 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.025161982 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.025217056 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.025585890 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.025604010 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.025985003 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.026000023 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.026619911 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.026659012 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.026710987 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.027394056 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.027412891 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.028352976 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.033109903 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.033155918 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.033222914 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.033694983 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.033715010 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.041215897 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.064675093 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.064692020 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.065203905 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.065208912 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.065237999 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.065268993 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.065591097 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.065594912 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.066488028 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.066947937 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.066956997 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.067595005 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.067599058 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.104964018 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.105730057 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.105743885 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.106549025 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.106554031 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.148659945 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.149375916 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.149425983 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.149951935 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.149964094 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.192724943 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.192897081 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.192991972 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.193052053 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193108082 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.193131924 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193147898 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.193159103 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193191051 CEST	49918	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193195105 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193197012 CEST	443	49918	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.193218946 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.193232059 CEST	49917	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.193237066 CEST	443	49917	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.196849108 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.196873903 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.196896076 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.196923018 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.196949959 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.197010040 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.197123051 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.197134018 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.197139025 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.197151899 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.198007107 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.198163986 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.198220968 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.198262930 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.198268890 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.198285103 CEST	49919	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.198288918 CEST	443	49919	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.201231956 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.201272011 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.201363087 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.201636076 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.201651096 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.236139059 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.236378908 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.236438036 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.236618996 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.236640930 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.236651897 CEST	49920	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.236658096 CEST	443	49920	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.240313053 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.240375996 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.240454912 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.240689993 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.240705013 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.284459114 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.284532070 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.284598112 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.284923077 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.284945965 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.284962893 CEST	49921	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.284969091 CEST	443	49921	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.288583040 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.288619041 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.288688898 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.288856030 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.288871050 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.582263947 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.582623959 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.582638025 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.582978010 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.583435059 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.583503008 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.583796024 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.627326012 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.785037994 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.785438061 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.785456896 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.785840034 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.786231995 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.786302090 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.786434889 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.815979958 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.816318989 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.816350937 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.818855047 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.818922043 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.819298983 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.819372892 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.819621086 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.819628954 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.831329107 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.843513966 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.843554974 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.843622923 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.843640089 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.843666077 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.843719959 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.844788074 CEST	49922	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.844805956 CEST	443	49922	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.845232010 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.845276117 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.845376968 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.845964909 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.845982075 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.868402004 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.875307083 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.875628948 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.875648022 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.876844883 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.876955986 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.877217054 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.877381086 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.877391100 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.877499104 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.877507925 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.878464937 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.878535986 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.878911018 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.878947020 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.879005909 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.879024029 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.879054070 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.879179955 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.879209995 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.880260944 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.880326986 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.880702019 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.880772114 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.880836964 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.880848885 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.890877008 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.891133070 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.891185045 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.891566038 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.892066002 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.892074108 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.892437935 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.893153906 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.893227100 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.893256903 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.894962072 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.895044088 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.895392895 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.895513058 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.895528078 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.895595074 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.896454096 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.896637917 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.896655083 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.897211075 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.897481918 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.897509098 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.897747040 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.897825956 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.898195982 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.898278952 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.898380995 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.898397923 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.898566008 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.898642063 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.898922920 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.898997068 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.899048090 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.900589943 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.900883913 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.900901079 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.904617071 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.904737949 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.905044079 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.905220032 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.905237913 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.918986082 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.923085928 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.923321962 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.923331976 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.923352957 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.924421072 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.924715996 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.925077915 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.925077915 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.925147057 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.931473970 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.931482077 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.931608915 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.932873964 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.933521032 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.933537006 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.934071064 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.934076071 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.935331106 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.943327904 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.943855047 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.944397926 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.944431067 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.945084095 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.945630074 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.945641994 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.947419882 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.947419882 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.947437048 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.947443008 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.947452068 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.947453976 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.947458982 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.947465897 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.954493046 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.954511881 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.955099106 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.955106974 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.973368883 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.973934889 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.973957062 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.974536896 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:32.974545956 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:32.978317022 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.978319883 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.978337049 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:32.994302034 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.994304895 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:32.994383097 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.026309013 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.046035051 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.046062946 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.046139956 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.046191931 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.046191931 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.047334909 CEST	49923	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.047358990 CEST	443	49923	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.048463106 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.048512936 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.049118042 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.050012112 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.050028086 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.066586971 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.066663980 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.066895008 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.067271948 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.067284107 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.067305088 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.067310095 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.073600054 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.073637009 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.073733091 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.074151039 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.074176073 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.074184895 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.074194908 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.074350119 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.074379921 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.074610949 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.075164080 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.075217962 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.075283051 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.076817989 CEST	49924	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.076842070 CEST	443	49924	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.077480078 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.077518940 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.077933073 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.083457947 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:33.083479881 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:33.083956957 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.083966017 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.084214926 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.084224939 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.084280014 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.084321976 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.086158037 CEST	49934	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.086172104 CEST	443	49934	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.087080956 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.087106943 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.087121010 CEST	49936	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.087126970 CEST	443	49936	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.102267027 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.102298021 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.102513075 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.103905916 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.103920937 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.104410887 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.104463100 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:33.104654074 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.104923964 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:33.104937077 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.147381067 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.147471905 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.147473097 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147536039 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147537947 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147578001 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.147597075 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147598982 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147630930 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147651911 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147655964 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147691965 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147700071 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147713900 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147725105 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147732973 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147753000 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147768021 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147780895 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147782087 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147788048 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147795916 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147835970 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147859097 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147859097 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147871017 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147890091 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147914886 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147917032 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.147919893 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147979975 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.147993088 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.148006916 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.148037910 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.148061991 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.148256063 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.148320913 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.148416042 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.148433924 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.148488998 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.152215004 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.152818918 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.153110027 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.153275967 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.155888081 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.155911922 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.155924082 CEST	49937	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.155931950 CEST	443	49937	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.167126894 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.167145967 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.167334080 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.167342901 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.167511940 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.167519093 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.167617083 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.167800903 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.167994022 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.168519974 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.168587923 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.169213057 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.169270039 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.170387030 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.170485020 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.170665026 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.170953989 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.170999050 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.186141014 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.186163902 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.186997890 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.187009096 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.211329937 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.211338997 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.215322971 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.219027042 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.219073057 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.219155073 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.281100988 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.314562082 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.314644098 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.314723015 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.333236933 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.374799967 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.374816895 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.389899015 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.389914989 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.394006968 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.394015074 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.424721003 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.424743891 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.424750090 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.424803972 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.424812078 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.424875021 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.424912930 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.424938917 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.431714058 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.431740999 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.431801081 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.431866884 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.521462917 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.521862030 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.522309065 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.589822054 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.589869022 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.589884996 CEST	49938	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.589893103 CEST	443	49938	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.608627081 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.608627081 CEST	49941	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.608663082 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.608675957 CEST	443	49941	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.623645067 CEST	49925	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.623672962 CEST	443	49925	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.651014090 CEST	49927	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.651034117 CEST	443	49927	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.651664972 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.651701927 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.651912928 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.652540922 CEST	49928	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.652579069 CEST	443	49928	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.653620005 CEST	49931	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.653639078 CEST	443	49931	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.654580116 CEST	49933	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.654602051 CEST	443	49933	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.656501055 CEST	49929	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.656507015 CEST	443	49929	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.657035112 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.657071114 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.657160044 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.657706976 CEST	49932	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.657731056 CEST	443	49932	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.658523083 CEST	49926	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.658540964 CEST	443	49926	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.658998966 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.659024000 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.659100056 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.659539938 CEST	49930	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.659547091 CEST	443	49930	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.660778999 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.660789967 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.666798115 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.666810036 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.668687105 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.668699026 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.712089062 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.712135077 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.712213993 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.762415886 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.762459993 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.762525082 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.786962986 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.786981106 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.791304111 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.791358948 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.791435957 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.791757107 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.791799068 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.791863918 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.791979074 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.792006969 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.792491913 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.792526960 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.792583942 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.793118000 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.793132067 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.793179035 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.793979883 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794003963 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.794049978 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794137955 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794157982 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.794203043 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794611931 CEST	49939	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794625998 CEST	443	49939	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.794943094 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.794981003 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.795074940 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.795578957 CEST	49942	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.795584917 CEST	443	49942	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.795914888 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.795921087 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.795988083 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.796716928 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.796736002 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.796871901 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.796883106 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.797163963 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.797184944 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.797852993 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.797867060 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.798305035 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.798319101 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.798643112 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.798654079 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.798871994 CEST	49940	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.798877954 CEST	443	49940	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.799253941 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.799276114 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.799329996 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.800153971 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.800168037 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.800645113 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.800652981 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.800968885 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:34.800977945 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:34.889969110 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.896271944 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.898550034 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.898570061 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.899024963 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.899029016 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.899487972 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.899518967 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:34.899882078 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:34.899888992 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.027379990 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.027499914 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.027573109 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.027865887 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.027865887 CEST	49944	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.027884960 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.027889013 CEST	443	49944	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.033490896 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.033732891 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.033866882 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.034287930 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.034316063 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.034363985 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.034753084 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.034780979 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.034790993 CEST	49943	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.034796953 CEST	443	49943	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.036721945 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.036736965 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.039160013 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.039201021 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.039268970 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.039416075 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.039428949 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.111258984 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.111778975 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.111797094 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.112243891 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.112250090 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.420912981 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.421011925 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.421070099 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.421361923 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.421380997 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.421392918 CEST	49945	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.421399117 CEST	443	49945	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.425127029 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.425163031 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.425230026 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.425411940 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.425427914 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.520776987 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.521169901 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.521181107 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.522277117 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.522677898 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.522819042 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.522825956 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.531122923 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.531387091 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.531400919 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.531763077 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.532912970 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.532977104 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.533164024 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.534492016 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.534708977 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.534723997 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.537951946 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.538022995 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.538569927 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.538634062 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.538769007 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.538780928 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.558813095 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.559418917 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.559448004 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.559915066 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.559920073 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.563234091 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.564155102 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.564162970 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.564929962 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.564945936 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.565421104 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.565432072 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.579330921 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.579436064 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.655988932 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.657314062 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.657325983 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.657731056 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.658767939 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.658869982 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.659151077 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.660553932 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.660846949 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.660880089 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.662055969 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.662149906 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.662892103 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.663050890 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.666862965 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.666904926 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667146921 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667383909 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667397976 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.667421103 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667507887 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667769909 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.667788029 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667792082 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667887926 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.667900085 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.667987108 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.667996883 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.668848991 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.668922901 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.668931961 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.668951988 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.668991089 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.669028997 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.669083118 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.669471025 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.669538021 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.670043945 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.670111895 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.670542002 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.670625925 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.671880007 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.671952009 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.672094107 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.672211885 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.672219992 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.672538042 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.672549009 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.672612906 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.672621965 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.672899008 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.672905922 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.673279047 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.673348904 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.673795938 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.674212933 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.674273968 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.674388885 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.674407959 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.674766064 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.674772024 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.675445080 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.675518036 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.676297903 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.676297903 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.676383972 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.677045107 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.677412033 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.677417994 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.678426027 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.678522110 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.679064035 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.679125071 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.679608107 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.679615021 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.690669060 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.690735102 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.690819979 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.691005945 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.691005945 CEST	49949	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.691026926 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.691044092 CEST	443	49949	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.695398092 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.695417881 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.695431948 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.695482016 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.695508003 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.695557117 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.695790052 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.695800066 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.696047068 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.696047068 CEST	49950	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.696072102 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.696080923 CEST	443	49950	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.699477911 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.699506998 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.699810028 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.699810028 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.699835062 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.703320980 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.717559099 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.717720032 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.717722893 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.717732906 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.719329119 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.720794916 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.720813036 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.720818043 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.720828056 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.720829964 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.768781900 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.768806934 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.773020029 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.773101091 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.773192883 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.774296999 CEST	49947	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.774319887 CEST	443	49947	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.774800062 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.774838924 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.774908066 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.775499105 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.775516033 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.789252043 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.789459944 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.789521933 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.790627003 CEST	49948	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.790644884 CEST	443	49948	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.790659904 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.790812969 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.790925026 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.791043043 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.791065931 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.791203976 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.793673038 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.793684006 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.795687914 CEST	49946	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.795713902 CEST	443	49946	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.796379089 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.796412945 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.797008038 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.799330950 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.799348116 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.814461946 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.814677000 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.818070889 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.818095922 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.818473101 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.818506956 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.819789886 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.819797039 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.819931030 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.819942951 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.910995960 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.911181927 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.911595106 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.912235022 CEST	49952	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.912250996 CEST	443	49952	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.916567087 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.916589022 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.916657925 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.916754007 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.916754007 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.920762062 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.920763969 CEST	49957	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.920787096 CEST	443	49957	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.920803070 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.921314955 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.921351910 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.921385050 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.921727896 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.921857119 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.921873093 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.921883106 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.921941042 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.922092915 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.922141075 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.922291040 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.922677994 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.922692060 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.922811031 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.923099041 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923139095 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923187971 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923221111 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.923234940 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923274994 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.923337936 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923527002 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.923661947 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923687935 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.923778057 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.923801899 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.926651955 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.926714897 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.926830053 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.930366039 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.930509090 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.930934906 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.934700966 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.934778929 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.934890032 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.950886965 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.950953960 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.951128006 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.951169014 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.951169014 CEST	49961	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.951186895 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.951196909 CEST	443	49961	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.951416016 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.951477051 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.951613903 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.955430984 CEST	49955	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.955446959 CEST	443	49955	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.956278086 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.956288099 CEST	49959	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.956298113 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.956325054 CEST	443	49959	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.956664085 CEST	49953	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.956670046 CEST	443	49953	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.956801891 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.956978083 CEST	49958	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.956991911 CEST	443	49958	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.957185030 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.957185030 CEST	49960	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.957206964 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.957220078 CEST	443	49960	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.957278967 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.957312107 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.957628965 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.957643986 CEST	49956	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.957649946 CEST	443	49956	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.957921982 CEST	49954	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.957936049 CEST	443	49954	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.958688021 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.958693981 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.958703995 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.958713055 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.961608887 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.961639881 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.961755991 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.963119984 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.963140011 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.964051962 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.964062929 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.965568066 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.965575933 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.965591908 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.965688944 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.965691090 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.965703964 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.966000080 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:35.966023922 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:35.975318909 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.994287014 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.994314909 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.994611979 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.994611979 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.994638920 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.998769999 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.998805046 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:35.999067068 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.999160051 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:35.999172926 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.042933941 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.042948961 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.043073893 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.050585985 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.050595999 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.051074028 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.052222967 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.052233934 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.052519083 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.168874025 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.168958902 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.169987917 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.170078993 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.175903082 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.176002979 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.176893950 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.176954031 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.178273916 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.178478003 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.179352045 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.179446936 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.181162119 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.181246996 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.286762953 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.286855936 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.295907974 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.296049118 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.296400070 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.296569109 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.302103996 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.302406073 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.302661896 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.302855968 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.303106070 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.303260088 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.304116964 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.304160118 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.304214954 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.304224968 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.304250956 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.304456949 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.305171967 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.305278063 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.306030989 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.306153059 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.306186914 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.306197882 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.306224108 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.306334972 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.307147026 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.307287931 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.307979107 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.308126926 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.395358086 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.395509958 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.404203892 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.404424906 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.412929058 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.413027048 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.413042068 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.414256096 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.414268017 CEST	443	49951	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.414295912 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.414361000 CEST	49951	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.415960073 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.416578054 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.416599035 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.417443991 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.417449951 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.432734966 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.433936119 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.433936119 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.433955908 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.433969021 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.535448074 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.535947084 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.535981894 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.536411047 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.536417961 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.556623936 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.556684017 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.556979895 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.556979895 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.557089090 CEST	49963	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.557105064 CEST	443	49963	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.559863091 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.559964895 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.560097933 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.560229063 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.560271025 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.566777945 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.566865921 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.567107916 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.567141056 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.567141056 CEST	49964	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.567158937 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.567172050 CEST	443	49964	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.569715023 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.569751978 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.569931030 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.570014954 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.570027113 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.649266005 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.649862051 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.649876118 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.650218010 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.650671005 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.650671005 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.650732994 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.656251907 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.656480074 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.656507969 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.656939983 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.657335043 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.657335043 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.657413006 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.670555115 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.670768023 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.670794010 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.671699047 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.671830893 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.672136068 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.672136068 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.672199011 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.691097975 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.691174984 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.691323996 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.691540003 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.691540003 CEST	49962	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.691565037 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.691575050 CEST	443	49962	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.692840099 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.693504095 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.693517923 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.693881035 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.693886995 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.694536924 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.694571972 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.694717884 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.694852114 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.694866896 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.699647903 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.699686050 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.706079960 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.706768036 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.706783056 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.706990004 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.706995964 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.715672016 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.715698957 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.763696909 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.775093079 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.776256084 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.776277065 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.777729034 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.777971983 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.778795958 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.778795958 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.781460047 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.782486916 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.788846016 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.788865089 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.789470911 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.790170908 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.790170908 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.790183067 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.790267944 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.824912071 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.826035976 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.827281952 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.827307940 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.830010891 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.830076933 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.830291986 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.831300974 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.832669973 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.832696915 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.832772970 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.832772970 CEST	49974	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.832798958 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.832808971 CEST	443	49974	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.833053112 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.834225893 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.834233999 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.834393024 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.834400892 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.835064888 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.835194111 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.835248947 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.835369110 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.835424900 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.835532904 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.836194038 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.836247921 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.836249113 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.836987019 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.836992025 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.838820934 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.838865995 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.838924885 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.839193106 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.839206934 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.839263916 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.839263916 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.839449883 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.841417074 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.841469049 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.841521025 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.841661930 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.841675997 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.841687918 CEST	49973	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.841692924 CEST	443	49973	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.842634916 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.848251104 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.848280907 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.848485947 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.848892927 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:36.848910093 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:36.851566076 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.852088928 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.852102995 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.853126049 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.853194952 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.853806019 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.853873014 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.854046106 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.854053974 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.854301929 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.854861021 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.854872942 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.855869055 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.856132984 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.856419086 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.856486082 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.859143972 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.859153986 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.874666929 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.874694109 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.874819994 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.890690088 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.891331911 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.891346931 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.906661034 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.906665087 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.908852100 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.908950090 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.909259081 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.911297083 CEST	49966	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.911319971 CEST	443	49966	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.912261963 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.912364960 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.912467957 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.913474083 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.913508892 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.918137074 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.918215990 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.918337107 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.919405937 CEST	49965	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.919430017 CEST	443	49965	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.920442104 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.920479059 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.920564890 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.927453995 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.927489042 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.929702044 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.929725885 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.929783106 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.929788113 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.929860115 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.931919098 CEST	49967	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.931947947 CEST	443	49967	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.932715893 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.932749987 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.932883024 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.934834957 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:36.934856892 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:36.938705921 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.029073954 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.029158115 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.029361010 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.032486916 CEST	49969	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.032506943 CEST	443	49969	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.032932043 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.032963991 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.033050060 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.034208059 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.034219027 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.040026903 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.040056944 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.040146112 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.040246964 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.040246964 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.044042110 CEST	49968	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.044061899 CEST	443	49968	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.087779999 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.087838888 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.087950945 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.087982893 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.088005066 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.088059902 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.088397980 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.088475943 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.088627100 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.091067076 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.091142893 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.091329098 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.107785940 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.107871056 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.107955933 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.111856937 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.111946106 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.112288952 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.310789108 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.351663113 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.391118050 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.423223972 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.445774078 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.476120949 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.553709030 CEST	49976	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.553740025 CEST	443	49976	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.554668903 CEST	49975	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.554692030 CEST	443	49975	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.555190086 CEST	49971	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.555218935 CEST	443	49971	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.555537939 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.555579901 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.555756092 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.555991888 CEST	49970	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.556014061 CEST	443	49970	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.556420088 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.556453943 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.556524038 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.556999922 CEST	49972	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.557025909 CEST	443	49972	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.557760000 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.557775021 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.558084011 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.558096886 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.571402073 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.572441101 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.607323885 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.607358932 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.607426882 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.607634068 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.607646942 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.608781099 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.608793974 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.609544992 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.609549046 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.610146046 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.610166073 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.610534906 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.610539913 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.612518072 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.612539053 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.612787008 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.612792969 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.612906933 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.612912893 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.613414049 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.613418102 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.613764048 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.613779068 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.614378929 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.614384890 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.735488892 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.735573053 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.735665083 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.735829115 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.735846043 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.735856056 CEST	49981	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.735862017 CEST	443	49981	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.738861084 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.738940001 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.739053965 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739147902 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739161968 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.739176035 CEST	49979	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739181995 CEST	443	49979	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.739296913 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739336967 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.739531040 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739762068 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.739773035 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.739846945 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.740005970 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.740828037 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.740897894 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.740926027 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.740932941 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.740945101 CEST	49977	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.740950108 CEST	443	49977	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.741077900 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.741166115 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.741467953 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.741476059 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.741489887 CEST	49978	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.741493940 CEST	443	49978	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.744329929 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.744350910 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.744445086 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.744626999 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.744683027 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.744982958 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.744992018 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.745022058 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.746515989 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.746527910 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.746660948 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.746674061 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.746697903 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.746884108 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.746897936 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.751039028 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.751065016 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.751168013 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.751836061 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.751849890 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.752588987 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.752641916 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.752774000 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.752896070 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:37.752913952 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:37.777437925 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.777890921 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.777911901 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.778321028 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.778717041 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.778783083 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.778934002 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.791657925 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.792068005 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.792079926 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.793083906 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.793152094 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.793697119 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.793752909 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.793857098 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.807960987 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.808300972 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.808311939 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.808669090 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.809024096 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.809092045 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.809544086 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.819325924 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.835330009 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.847764969 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.847788095 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.851341963 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.893321037 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.899719000 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.900079966 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.900099993 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.901161909 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.901232004 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.928514004 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.928672075 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:37.928709984 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.969278097 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:37.969309092 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.016149044 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.033215046 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.033298969 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.033359051 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.034703970 CEST	49982	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.034724951 CEST	443	49982	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.035095930 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.035131931 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.035202980 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.035690069 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.035700083 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.045876026 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.045901060 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.045977116 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.046030045 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.046030045 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.046855927 CEST	49984	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.046876907 CEST	443	49984	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.047374010 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.047415972 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.047482967 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.048012018 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.048031092 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.064551115 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.064637899 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.064685106 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.065450907 CEST	49983	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.065465927 CEST	443	49983	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.066085100 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.066132069 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.066255093 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.067218065 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.067239046 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.180269957 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.180360079 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.180421114 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.182596922 CEST	49985	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.182619095 CEST	443	49985	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.183270931 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.183320999 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.183397055 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.184153080 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.184164047 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.407613993 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.407871008 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.407912970 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.411495924 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.411581039 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.412060022 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.412282944 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.412297964 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.424493074 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.424776077 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.424793959 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.425937891 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.426011086 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.426395893 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.426467896 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.426542044 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.426548958 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.452413082 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.452434063 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.468029976 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.472222090 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.472485065 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.472507954 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.472851992 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.473388910 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.473454952 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.473661900 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.474459887 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.475677013 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.475699902 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.476816893 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.476830006 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.484241009 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.485187054 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.485209942 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.485690117 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.486449957 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.486455917 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.487270117 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.487284899 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.488327026 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.488332987 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.490998983 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.491455078 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.491473913 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.492048025 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.492053986 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.498133898 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.498528004 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.498545885 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.498893023 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.498898983 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.499264002 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.515356064 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.610829115 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.611269951 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.611346006 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.611402035 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.611402035 CEST	49993	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.611427069 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.611438990 CEST	443	49993	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.614618063 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.614662886 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.614792109 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.614929914 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.614943981 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.617283106 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.617361069 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.617418051 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.617501974 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.617516994 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.617527008 CEST	49989	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.617532015 CEST	443	49989	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.618129969 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.618925095 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.618982077 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.619031906 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.619039059 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.619049072 CEST	49991	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.619052887 CEST	443	49991	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.620997906 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.621028900 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.621098995 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.621295929 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.621305943 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.622229099 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.622257948 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.622363091 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.622524023 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.622543097 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.624262094 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.624481916 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.624540091 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.624710083 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.624723911 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.624736071 CEST	49992	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.624741077 CEST	443	49992	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.630182028 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.630187035 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.630207062 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.630275011 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.630335093 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.630383015 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.630429983 CEST	49990	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.630439043 CEST	443	49990	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.630871058 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.630884886 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.632638931 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.632678986 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.632801056 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.632914066 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:38.632932901 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:38.660799026 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.660876036 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.660942078 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.661756039 CEST	49987	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.661770105 CEST	443	49987	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.662337065 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.662372112 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.662439108 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.662996054 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.663008928 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.694022894 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.694153070 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.694205999 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.695051908 CEST	49986	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.695065022 CEST	443	49986	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.695467949 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.695502996 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.695576906 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.696126938 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.696139097 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.730238914 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.730312109 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.730362892 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.731715918 CEST	49988	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.731726885 CEST	443	49988	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.894808054 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.899920940 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.899936914 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.900392056 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.900830984 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.900892019 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.901087999 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.903142929 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.903347015 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.903357983 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.903713942 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.904114008 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.904114008 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.904216051 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.914885998 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.915097952 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.915116072 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.916182041 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.916302919 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.916613102 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.916676044 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.916801929 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.945169926 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.947323084 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.959336042 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:38.969418049 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:38.969438076 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:39.016846895 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.053143024 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053153038 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053159952 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053186893 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053211927 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053212881 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053225994 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053244114 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.053267002 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.053323984 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.053323030 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.054025888 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.054061890 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.055855036 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.055965900 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.057910919 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.057924986 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.059001923 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.059180021 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.061413050 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.061476946 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.068511963 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.068527937 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.068656921 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.068665028 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.068962097 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.069108963 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.076147079 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.076311111 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.109683037 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.109700918 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.109733105 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.127362013 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.131403923 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.131561041 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.131833076 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.131833076 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.132009029 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.140274048 CEST	49995	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.140305042 CEST	443	49995	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.143032074 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.143065929 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.143465996 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.149667978 CEST	49994	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.149684906 CEST	443	49994	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.168253899 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.168281078 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.168353081 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.169071913 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.169086933 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.172203064 CEST	49996	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.172221899 CEST	443	49996	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.172250032 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.172261000 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.172632933 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.172651052 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.172755003 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.173764944 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.173778057 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.175326109 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.175334930 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.179323912 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.193873882 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.194108963 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.194737911 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.194771051 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.195525885 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.195543051 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.195880890 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.196249008 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.196254015 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.196296930 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.196305990 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.196723938 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.196727991 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.197208881 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.197221994 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.197870970 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.197880030 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.198507071 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.198519945 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.199332952 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.199337006 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.199640036 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.199670076 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.200323105 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.200333118 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.326555014 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.326693058 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.326780081 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.326908112 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.326927900 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.326932907 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.326936960 CEST	49999	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.326942921 CEST	443	49999	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.327102900 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.327251911 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.328053951 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.328264952 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.328316927 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.328334093 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.328334093 CEST	50001	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.328350067 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.328360081 CEST	443	50001	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.328556061 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.328933954 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.329312086 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.335585117 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.335709095 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.335967064 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.341568947 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.341568947 CEST	50002	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.341586113 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.341598034 CEST	443	50002	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.342848063 CEST	49998	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.342876911 CEST	443	49998	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.343729019 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.343735933 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.343808889 CEST	50000	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.343815088 CEST	443	50000	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.346271038 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346275091 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346306086 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.346308947 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.346370935 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346380949 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346684933 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346693039 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.346762896 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.346779108 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.347788095 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.347796917 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.347856998 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.347961903 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.347970963 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.348294020 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348303080 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.348406076 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348429918 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348443031 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.348490953 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348592043 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348604918 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.348683119 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:40.348690987 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:40.380791903 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.380815029 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.380867958 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.380884886 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.380897045 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.381007910 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.381613016 CEST	50004	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.381625891 CEST	443	50004	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.382759094 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.383111954 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.383169889 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.383640051 CEST	50003	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.383657932 CEST	443	50003	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.385624886 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.385682106 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.385706902 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.385719061 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.385776997 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.385776997 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.385787010 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.437786102 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.439372063 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.439387083 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.439414978 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.439435959 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.439486980 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.513400078 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.513411045 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.513444901 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.513489008 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.513536930 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.514108896 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.514116049 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.514365911 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.566051006 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.566062927 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.566373110 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.566538095 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.566544056 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.566618919 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.637537003 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.637547016 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.637706041 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.639985085 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.639991045 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.640129089 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.641000986 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.641098976 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.641958952 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.642066956 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.643104076 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.643197060 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.643984079 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.644073009 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.691945076 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.692045927 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.692400932 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.692472935 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.727619886 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.727813959 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.764945984 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.765027046 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.765403986 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.765467882 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.766403913 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.766484976 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.767075062 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.767215967 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.767271996 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.767342091 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.768258095 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.768378019 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.769021988 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.769155025 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.770009041 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.770045996 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.770102024 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.770111084 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.770131111 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.770342112 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.771025896 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.771106005 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.771106005 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.771805048 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.772006035 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.818754911 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.818850994 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:40.818873882 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.818928003 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.819582939 CEST	49997	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:40.819598913 CEST	443	49997	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.080387115 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.080638885 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.080660105 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.081573009 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.081624985 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.081727028 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.081763029 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.081769943 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.081794977 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.081928968 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.081943035 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.082103968 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.082283020 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.082356930 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.082357883 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.082640886 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.082755089 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.083128929 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.083245993 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.083252907 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.083261013 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.083348036 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.083415985 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.126363993 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.131334066 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.131336927 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.208194017 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.208760977 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.208789110 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.209295034 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.209301949 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.211173058 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.211643934 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.211652994 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.212074041 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.212079048 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.212806940 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.213170052 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.213193893 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.213362932 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.213372946 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.213637114 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.213643074 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.213776112 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.213804960 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.214142084 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.214153051 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.214185953 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.214189053 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.214715004 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.214719057 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.333276987 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.333373070 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.333502054 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.334223032 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.334305048 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.334369898 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.335040092 CEST	50007	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.335061073 CEST	443	50007	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335577011 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335592985 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335653067 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.335663080 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335696936 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.335721016 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335773945 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.335814953 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.338562012 CEST	50006	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.338577986 CEST	443	50006	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.339890003 CEST	50005	443	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:41.339901924 CEST	443	50005	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:41.341106892 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.341217995 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.341523886 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.342468977 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.342485905 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.342505932 CEST	50011	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.342513084 CEST	443	50011	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.344127893 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.344436884 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.344506025 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.345535040 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345640898 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345685005 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.345788002 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345803022 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345875978 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.345901966 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345925093 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.345967054 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.348517895 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.348736048 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.348790884 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.361167908 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.361196041 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.361212969 CEST	50010	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.361221075 CEST	443	50010	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.364675999 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.364686966 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.364703894 CEST	50008	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.364710093 CEST	443	50008	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.365175009 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.365195990 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.365231037 CEST	50009	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.365238905 CEST	443	50009	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.365370989 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.365400076 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.365413904 CEST	50012	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.365422010 CEST	443	50012	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.367650986 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.367687941 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.367760897 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.368102074 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.368139982 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.368304014 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.368601084 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.368618965 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.368817091 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.368844032 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.369474888 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.369484901 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.369580984 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.369714975 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.369724035 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.369762897 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.369793892 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.369990110 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.370126009 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.370136976 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.370297909 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.370316982 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:41.370371103 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.370505095 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:41.370517969 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.092991114 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.093074083 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.095932961 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.095980883 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.096915007 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.096923113 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.098005056 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.098036051 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.098392010 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.098397970 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.109683990 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.112390995 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.112409115 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.112976074 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.112982035 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.119649887 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.120177984 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.120196104 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.120790005 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.120798111 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.147661924 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.148663998 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.148689032 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.149380922 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.149385929 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.221606970 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.221688032 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.221786022 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.222318888 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.222337008 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.222423077 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.222440004 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.222522974 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.222898960 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.222935915 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.223270893 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.233699083 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.233716965 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.233741045 CEST	50015	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.233747005 CEST	443	50015	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.238771915 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.238785028 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.238857031 CEST	50014	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.238862991 CEST	443	50014	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.240905046 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.240938902 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.241038084 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.241071939 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.241096020 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.241256952 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.241266966 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.241384983 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.241564989 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.241575956 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.251331091 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.251348972 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.251446009 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.251462936 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.251471996 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.251513004 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.253248930 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.253268957 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.253283024 CEST	50013	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.253288031 CEST	443	50013	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.254437923 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.254482031 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.254550934 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.254776001 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.254776955 CEST	50017	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.254785061 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.254792929 CEST	443	50017	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.256897926 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.256930113 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.256994963 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.257129908 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.257147074 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.257628918 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.257657051 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.257769108 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.258898020 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.258908987 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288480043 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288502932 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288575888 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.288589954 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288640976 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288697004 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.288764954 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.288779974 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.288785934 CEST	50016	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.288790941 CEST	443	50016	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.292599916 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.292618036 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.292700052 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.292896032 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.292903900 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.972599030 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.973537922 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.973546982 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.973565102 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.974121094 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.974139929 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.974267006 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.974272013 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.974782944 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.974796057 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.991210938 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.991744995 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.991777897 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.992595911 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.992602110 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.995490074 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.995956898 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.995976925 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:42.996660948 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:42.996666908 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.036191940 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.045320034 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.045336008 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.046391010 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.046396017 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.102821112 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.102895021 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.102941990 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.103024960 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.103178978 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.103231907 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.103404999 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.103425026 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.103436947 CEST	50018	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.103446007 CEST	443	50018	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.105377913 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.105396986 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.105407000 CEST	50019	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.105413914 CEST	443	50019	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.110152006 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.110194921 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.110259056 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.111118078 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.111166000 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.111219883 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.111773014 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.111787081 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.112035990 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.112051964 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.121433020 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.121495962 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.121567965 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.121686935 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.121705055 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.121716976 CEST	50021	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.121721983 CEST	443	50021	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.125628948 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.125672102 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.125726938 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.125916958 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.125933886 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.127074957 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.127266884 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.127326012 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.127512932 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.127531052 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.127541065 CEST	50020	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.127547026 CEST	443	50020	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.130481958 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.130511999 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.130580902 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.130893946 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.130904913 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.175384998 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.175456047 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.175504923 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.175720930 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.175734043 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.175743103 CEST	50022	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.175748110 CEST	443	50022	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.178875923 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.178935051 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.179013968 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.179151058 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.179169893 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.842221975 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.842426062 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.842870951 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.842885971 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.843122959 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.843156099 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.843564034 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.843569040 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.843803883 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.843810081 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.861298084 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.861836910 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.861855984 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.862437010 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.862441063 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.869299889 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.869733095 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.869754076 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.870263100 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.870268106 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.938760042 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.939553022 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.939577103 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.940232992 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.940238953 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.978636026 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.979285955 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.979348898 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.979389906 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.979403019 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.979415894 CEST	50024	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.979422092 CEST	443	50024	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.983738899 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.983778000 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.983841896 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.984019041 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.984030008 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.992505074 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.992537975 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.992588997 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.992608070 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.992660999 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.992894888 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.992902994 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.992923021 CEST	50026	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.992927074 CEST	443	50026	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.994518042 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.995909929 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.996001005 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996081114 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996097088 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.996108055 CEST	50023	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996114016 CEST	443	50023	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.996498108 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996540070 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.996613979 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996818066 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.996834040 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.998666048 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.998684883 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:43.998749018 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.998946905 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:43.998955965 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.008877039 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.008940935 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.008994102 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.009175062 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.009190083 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.009372950 CEST	50025	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.009377956 CEST	443	50025	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.011686087 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.011727095 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.011814117 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.011944056 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.011961937 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.231561899 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.231642962 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.231910944 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.232024908 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.232024908 CEST	50027	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.232045889 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.232059002 CEST	443	50027	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.236032963 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.236082077 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.236180067 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.236367941 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.236387968 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.738717079 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.739310026 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.739341974 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.740113020 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.740118027 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.759165049 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.760209084 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.764398098 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.764409065 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.765352964 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.765358925 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.766350985 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.766381979 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.766871929 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.766880035 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.871995926 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.872076035 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.872162104 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.872446060 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.872467041 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.872502089 CEST	50029	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.872508049 CEST	443	50029	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.876408100 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.876442909 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.877104044 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.877304077 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.877312899 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.894277096 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.894357920 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.894438982 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.894846916 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.894864082 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.894876003 CEST	50031	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.894881964 CEST	443	50031	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897372007 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897557974 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897610903 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897634983 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.897676945 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.897692919 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897705078 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.897705078 CEST	50028	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.897711992 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.897720098 CEST	443	50028	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.899348021 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.899379969 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.899585009 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.899808884 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.899820089 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.900688887 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.900717974 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.900785923 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.900929928 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.900943041 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.978632927 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.979218006 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.979233980 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:44.979831934 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:44.979835987 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.007849932 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.009083033 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.009113073 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.010364056 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.010370016 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.115305901 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.115659952 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.115722895 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.115731955 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.115797997 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.115919113 CEST	50032	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.115937948 CEST	443	50032	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.121053934 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.121093988 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.121165991 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.121639013 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.121650934 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.137623072 CEST	443	49830	23.1.237.91	192.168.2.5
Oct 25, 2024 00:45:45.137795925 CEST	49830	443	192.168.2.5	23.1.237.91
Oct 25, 2024 00:45:45.141748905 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.141812086 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.141916990 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.143862009 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.143862009 CEST	50030	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.143883944 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.143896103 CEST	443	50030	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.149338961 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.149380922 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.150095940 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.150095940 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.150130987 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.628061056 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.628484964 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.634854078 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.642864943 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.642874002 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.643405914 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.643409967 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.643994093 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.644026995 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.644735098 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.644746065 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.645489931 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.645497084 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.645950079 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.645952940 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.770572901 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.770648003 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.770872116 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.771168947 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.771186113 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.771215916 CEST	50034	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.771222115 CEST	443	50034	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.772958040 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.773026943 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.773119926 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.773416042 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.773432970 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.773442984 CEST	50035	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.773449898 CEST	443	50035	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.775870085 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.775926113 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.775974989 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.776400089 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.776443958 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.776514053 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.777693033 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.777723074 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.777817011 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.777825117 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.777837038 CEST	50033	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.777842045 CEST	443	50033	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.777887106 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.778239012 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.778263092 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.779603004 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.779618979 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.780842066 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.780874014 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.780963898 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.781205893 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.781219006 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.870310068 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.871117115 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.871124983 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.871777058 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.871781111 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.877523899 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.878592968 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.878628969 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:45.879904032 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:45.879925013 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.000369072 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.000407934 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.000449896 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.000478029 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.000535965 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.000909090 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.000921011 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.000933886 CEST	50036	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.000938892 CEST	443	50036	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.004467964 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.004502058 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.004873991 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.005471945 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.005484104 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.006588936 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.006643057 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.006696939 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.006958008 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.006968021 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.006980896 CEST	50037	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.006985903 CEST	443	50037	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.009378910 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.009412050 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.009692907 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.009845972 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.009859085 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.498442888 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.499111891 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.499126911 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.499629021 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.499634027 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.510802031 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.511311054 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.511349916 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.511888981 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.511897087 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.517369032 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.517815113 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.517836094 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.518415928 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.518421888 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.627933979 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.628478050 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.628552914 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.628601074 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.628619909 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.628632069 CEST	50039	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.628638983 CEST	443	50039	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.632369041 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.632412910 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.632687092 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.632687092 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.632725000 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.645431995 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.645847082 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.645888090 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.645953894 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.646006107 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.646020889 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.646037102 CEST	50038	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.646042109 CEST	443	50038	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.648435116 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.648602009 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.648672104 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.648744106 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.648756981 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.648761988 CEST	50040	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.648766994 CEST	443	50040	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.649209976 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.649239063 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.649302006 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.649519920 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.649533987 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.650929928 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.650957108 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.651103973 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.651207924 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.651216984 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.737833977 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.739061117 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.739061117 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.739070892 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.739084005 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.755610943 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.756150961 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.756165028 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.756645918 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.756649971 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.871850014 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.872236967 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.872381926 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.872381926 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.872426987 CEST	50041	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.872438908 CEST	443	50041	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.876036882 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.876061916 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.876154900 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.876445055 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.876456976 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.891828060 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.891855955 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.891901016 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.891928911 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.891979933 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.892307043 CEST	50042	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.892326117 CEST	443	50042	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.897887945 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.897912979 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:46.898318052 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.898571014 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:46.898581028 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.368993044 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.369538069 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.369554043 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.369997025 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.370003939 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.425240040 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.425745964 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.425759077 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.426208973 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.426213980 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.513830900 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.513904095 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.514110088 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.514163971 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.514184952 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.514194965 CEST	50043	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.514200926 CEST	443	50043	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.517956972 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.518001080 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.518081903 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.518248081 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.518268108 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.567353010 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.567424059 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.567493916 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.567723989 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.567740917 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.567753077 CEST	50045	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.567758083 CEST	443	50045	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.570672035 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.570710897 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.570911884 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.571090937 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.571103096 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.637300014 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.638081074 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.638098001 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.638890982 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.638895988 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.694586039 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.695725918 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.695739031 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.696662903 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.696666956 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.772902966 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.773056030 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.773121119 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.773636103 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.773653030 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.773669004 CEST	50047	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.773677111 CEST	443	50047	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.777177095 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.777211905 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.778281927 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.778613091 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.778628111 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.830447912 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.830480099 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.830528021 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.830549955 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.830590963 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.830909014 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.830919981 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.830928087 CEST	50046	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.830933094 CEST	443	50046	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.833523989 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.833554029 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:47.833647013 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.834007025 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:47.834017992 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.440150976 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.440638065 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.440649986 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.441163063 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.441167116 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.443569899 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.443922043 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.443945885 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.444350004 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.444364071 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.529557943 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.530170918 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.530186892 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.530791044 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.530796051 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.584417105 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.584495068 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.584599018 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.584716082 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.584733009 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.584745884 CEST	50048	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.584753036 CEST	443	50048	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.586518049 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587032080 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587053061 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.587069988 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587095022 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587244987 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.587508917 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.587522030 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587743998 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.587743998 CEST	50049	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.587759972 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.587774038 CEST	443	50049	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.588695049 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.588737965 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.588820934 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.588949919 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.588963032 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.589968920 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.590001106 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.590153933 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.590311050 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.590321064 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.664925098 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.664952040 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.665000916 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.664999962 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.665043116 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.665277004 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.665291071 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.665314913 CEST	50050	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.665318966 CEST	443	50050	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.668170929 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.668195963 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.668335915 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.668483973 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.668493986 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.722574949 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.722645998 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.722704887 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.722924948 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.722944021 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.723035097 CEST	50051	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.723045111 CEST	443	50051	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.725924015 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.725935936 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.725989103 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.726140976 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.726149082 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.963560104 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.964139938 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.964163065 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:48.964591026 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:48.964596033 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.100770950 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.100877047 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.101213932 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.101427078 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.101444006 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.101516962 CEST	50044	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.101524115 CEST	443	50044	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.104506016 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.104547024 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.104629993 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.104801893 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.104820967 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.322057009 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.323586941 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.354182959 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.354209900 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.354659081 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.354676008 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.355065107 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.355087042 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.355117083 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.355127096 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.414066076 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.414558887 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.414599895 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.415030003 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.415036917 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.474472046 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.482001066 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.482013941 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.482574940 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.482584000 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.484333038 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.484425068 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.484620094 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.484646082 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.484654903 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.484666109 CEST	50053	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.484671116 CEST	443	50053	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.486671925 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.486735106 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.486802101 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.488421917 CEST	50052	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.488445044 CEST	443	50052	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.490700960 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.490747929 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.490938902 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.491086960 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.491101027 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.491436005 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.491472960 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.491563082 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.491657972 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.491669893 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.565088987 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.565524101 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.565587997 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.565588951 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.565637112 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.567050934 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.567065954 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.567100048 CEST	50054	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.567106009 CEST	443	50054	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.570378065 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.570425034 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.570493937 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.570660114 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.570673943 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.612185955 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.612418890 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.612478971 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.616139889 CEST	50055	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.616161108 CEST	443	50055	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.619016886 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.619067907 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.619134903 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.619297028 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.619318962 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.865849972 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.866332054 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.866355896 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:49.866894960 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:49.866900921 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.003496885 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.003814936 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.003881931 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.003962994 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.010449886 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.010449886 CEST	50056	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.010473967 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.010483027 CEST	443	50056	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.013727903 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.013771057 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.014051914 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.014172077 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.014184952 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.219923019 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.221896887 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.221916914 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.222395897 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.222400904 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.229680061 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.230211973 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.230235100 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.230704069 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.230710030 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.318062067 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.318794012 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.318862915 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.319374084 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.319391966 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.351423979 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.351475954 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.351525068 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.351622105 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.351622105 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.354034901 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.354049921 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.355401993 CEST	50058	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.355408907 CEST	443	50058	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.357219934 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.357255936 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.357359886 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.357542992 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.357562065 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.361685038 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.361807108 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.361901045 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.363332033 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.365322113 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.365350008 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.365376949 CEST	50057	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.365384102 CEST	443	50057	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.365793943 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.365814924 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.366750002 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.366756916 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.370426893 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.370471001 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.370604992 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.371300936 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.371309996 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.456037045 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.456104040 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.456254959 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.497435093 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.497493982 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.497549057 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.497562885 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.497608900 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.557363033 CEST	50059	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.557399988 CEST	443	50059	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.714366913 CEST	50060	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.714395046 CEST	443	50060	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.750049114 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.806735039 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.813066006 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.813079119 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.814511061 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.814516068 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.825531960 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.825579882 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.825663090 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.825803995 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.825815916 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.827820063 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.827863932 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.828201056 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.830177069 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.830194950 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.969906092 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.969985008 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.970037937 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.970189095 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.970204115 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.970212936 CEST	50061	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.970217943 CEST	443	50061	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.973397017 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.973447084 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:50.973515987 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.973762035 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:50.973776102 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.105951071 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.106607914 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.106647968 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.107106924 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.107114077 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.122724056 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.123423100 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.123441935 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.124361992 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.124366999 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.239108086 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.239981890 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.240026951 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.240030050 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.240081072 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.240129948 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.240149975 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.240163088 CEST	50062	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.240169048 CEST	443	50062	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.243949890 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.243984938 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.244059086 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.244225979 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.244241953 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.267332077 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.267436028 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.267507076 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.267961025 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.267970085 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.267981052 CEST	50063	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.267986059 CEST	443	50063	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.272033930 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.272052050 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.272126913 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.272299051 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.272310019 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.575836897 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.576566935 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.576590061 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.577267885 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.577272892 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.596930027 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.597615004 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.597632885 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.598154068 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.598159075 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.707639933 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.707987070 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.708069086 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.708146095 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.708201885 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.708235979 CEST	50064	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.708250999 CEST	443	50064	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.712016106 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.712111950 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.712199926 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.712389946 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.712428093 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.735624075 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.735645056 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.735799074 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.735872030 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.736327887 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.736335993 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.736339092 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.736349106 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.736351013 CEST	50065	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.736356974 CEST	443	50065	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.737127066 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.737137079 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.740484953 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.740524054 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.740607023 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.740803003 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.740818024 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.870919943 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.871351957 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.871407032 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.871440887 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.871553898 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.871553898 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.871589899 CEST	50066	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.871609926 CEST	443	50066	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.874964952 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.875016928 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:51.875310898 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.875667095 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:51.875679970 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.008893967 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.010298967 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.010299921 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.010322094 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.010337114 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.019725084 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.020729065 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.020756006 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.021339893 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.021347046 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.145035982 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.145066023 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.145123959 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.145247936 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.145247936 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.145487070 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.145487070 CEST	50068	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.145498991 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.145507097 CEST	443	50068	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160188913 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160267115 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160295010 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160326004 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160358906 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160499096 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160731077 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160739899 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160944939 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160960913 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.160974026 CEST	50067	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.160979986 CEST	443	50067	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.164597988 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.164618969 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.164877892 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.164877892 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.164904118 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.446700096 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.447848082 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.447881937 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.447962999 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.447971106 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.473701954 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.475339890 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.475364923 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.478384018 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.478395939 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.579339027 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.579423904 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.579771042 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.579771042 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.582082987 CEST	50069	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.582112074 CEST	443	50069	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.583475113 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.583498001 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.583617926 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.583827972 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.583837032 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.606165886 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.606239080 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.606447935 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.606601954 CEST	50070	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.606616020 CEST	443	50070	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.610150099 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.610188007 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.610354900 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.610780954 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.610791922 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.618856907 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.624063969 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.624094963 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.627348900 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.627370119 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.750699043 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.750788927 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.751167059 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.751168013 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.751216888 CEST	50071	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.751236916 CEST	443	50071	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.754605055 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.754641056 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.754928112 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.754928112 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.754955053 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.902352095 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.903053999 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.903074980 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.903589964 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.903594017 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.905996084 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.906507969 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.906526089 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:52.906898975 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:52.906903982 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.037105083 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.037164927 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.038280010 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.038280010 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.040296078 CEST	50073	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.040311098 CEST	443	50073	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.041336060 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.041412115 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.041462898 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.041472912 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.041515112 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.042491913 CEST	50072	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.042515039 CEST	443	50072	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.050784111 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.050836086 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.050903082 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.052409887 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.052421093 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.055180073 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.055221081 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.055279970 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.055836916 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.055847883 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.304611921 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.344888926 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.345947981 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.390727997 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.492993116 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.546802044 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.601793051 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.601807117 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.605715990 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.605721951 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.606089115 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.606112003 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.614725113 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.614737034 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.636607885 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.636616945 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.637260914 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.637264013 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.734716892 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.734920025 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.734965086 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.734981060 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.734998941 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.735059977 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.735203028 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.735217094 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.735229015 CEST	50074	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.735234022 CEST	443	50074	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.738970995 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.739017010 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.739093065 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.739306927 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.739324093 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.742659092 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.743141890 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.743277073 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.743277073 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.744302034 CEST	50075	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.744317055 CEST	443	50075	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.746505976 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.746547937 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.746618986 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.746799946 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.746809959 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.765188932 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.765464067 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.765578032 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.765846014 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.765861034 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.765873909 CEST	50076	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.765880108 CEST	443	50076	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.769021988 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.769061089 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.769125938 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.769299984 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.769310951 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.799506903 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.800137043 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.800156116 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.800690889 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.800695896 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.937392950 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.937477112 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.937555075 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.937956095 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.937968969 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.938002110 CEST	50077	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.938008070 CEST	443	50077	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.942192078 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.942245007 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:53.942322969 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.942516088 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:53.942527056 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.044501066 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.045198917 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.045212984 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.045712948 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.045717955 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.181900978 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.182061911 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.182126999 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.182377100 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.182396889 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.182425022 CEST	50078	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.182432890 CEST	443	50078	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.186049938 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.186093092 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.186192989 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.186376095 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.186392069 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.492393017 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.493063927 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.493091106 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.493676901 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.493684053 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.496615887 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.497030973 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.497072935 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.497483969 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.497497082 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.536578894 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.537333012 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.537360907 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.537750959 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.537755966 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.631239891 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.631326914 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.631614923 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.631659031 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.631659031 CEST	50079	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.631678104 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.631690979 CEST	443	50079	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.635344028 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.635377884 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.635449886 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.635637999 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.635648966 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.640571117 CEST	49710	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:45:54.640587091 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.640784979 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.640846014 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.640927076 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.640948057 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.640960932 CEST	50080	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.640965939 CEST	443	50080	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.644287109 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.644334078 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.644409895 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.644603968 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.644619942 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.648015022 CEST	80	49710	156.67.232.199	192.168.2.5
Oct 25, 2024 00:45:54.679832935 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.679904938 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.680005074 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.680242062 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.680255890 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.680505037 CEST	50081	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.680510998 CEST	443	50081	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.683898926 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.683938026 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.684010983 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.684207916 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.684220076 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.728924990 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.729614019 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.729641914 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.730153084 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.730159998 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.867479086 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.867548943 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.867640972 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.867655039 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.867708921 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.867971897 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.867991924 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.868010044 CEST	50082	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.868015051 CEST	443	50082	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.871640921 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.871735096 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.871833086 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.872050047 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.872083902 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.934706926 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.935324907 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.935353041 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:54.935879946 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:54.935885906 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.066917896 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.067001104 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.067161083 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.067384958 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.067409039 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.067416906 CEST	50083	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.067423105 CEST	443	50083	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.071095943 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.071144104 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.071348906 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.073169947 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.073184013 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.376044989 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.376614094 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.376631975 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.377075911 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.377079964 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.379087925 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.379888058 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.379888058 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.379951954 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.380023956 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.424825907 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.425347090 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.425374031 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.425812006 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.425817966 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.509576082 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.509651899 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.509722948 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.509916067 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.509953976 CEST	50085	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.509973049 CEST	443	50085	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.510001898 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.510047913 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.510181904 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.510195017 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.510205030 CEST	50084	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.510210991 CEST	443	50084	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.513473034 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.513506889 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.513678074 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.513712883 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.513752937 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.513886929 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.513901949 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.513916016 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.514103889 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.514117956 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.561355114 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.561381102 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.561444998 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.561460018 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.561503887 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.561642885 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.561662912 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.561674118 CEST	50086	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.561680079 CEST	443	50086	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.567280054 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.567327023 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.567394972 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.567651987 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.567662954 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.603219032 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.603764057 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.603832960 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.604362011 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.604378939 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.736974001 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.737010956 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.737066031 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.737171888 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.737339020 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.737384081 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.737425089 CEST	50087	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.737442970 CEST	443	50087	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.740333080 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.740367889 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:55.740444899 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.740578890 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:55.740590096 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.242067099 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.242269039 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.242651939 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.242675066 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.242707968 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.242724895 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.243172884 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.243177891 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.243396044 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.243408918 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.302845001 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.303488016 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.303499937 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.303858995 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.303864956 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.371325016 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.371357918 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.371412992 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.371469021 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.371606112 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.371625900 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.371640921 CEST	50090	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.371646881 CEST	443	50090	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.372400999 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.372620106 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.372750044 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.372750044 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.372790098 CEST	50089	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.372806072 CEST	443	50089	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.375123978 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375170946 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.375380039 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375411034 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375416994 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.375554085 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375602007 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375613928 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.375689983 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.375701904 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.432641983 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.432722092 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.432822943 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.433022022 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.433022022 CEST	50091	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.433036089 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.433043957 CEST	443	50091	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.436136961 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.436166048 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.436229944 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.436384916 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.436395884 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.465033054 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.465636969 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.465646029 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.466118097 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.466120958 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.536024094 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.536556959 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.536571980 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.537026882 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.537034035 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.597913027 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.597954988 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.598012924 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.598012924 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.598063946 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.598284006 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.598294973 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.598309040 CEST	50092	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.598314047 CEST	443	50092	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.601126909 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.601157904 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.601506948 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.601506948 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.601531029 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.667184114 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.667287111 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.667363882 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.667380095 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.667437077 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.667624950 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.667643070 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.667678118 CEST	50088	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.667685986 CEST	443	50088	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.670576096 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.670598984 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:56.670666933 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.670829058 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:56.670840025 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.168311119 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.168771982 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.168802977 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.169003010 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.169361115 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.169377089 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.169399023 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.169405937 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.169796944 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.169802904 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.170408964 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.170725107 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.170742989 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.171169043 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.171174049 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.300559998 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.300632000 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.300748110 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.301783085 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.302016020 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.302072048 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.302082062 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.302119017 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.303325891 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.303325891 CEST	50095	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.303353071 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.303366899 CEST	443	50095	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.303497076 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.303697109 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.303755045 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.303792000 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.303814888 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.305392027 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.305409908 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.305423975 CEST	50094	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.305429935 CEST	443	50094	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.307857037 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.307869911 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.307885885 CEST	50093	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.307893038 CEST	443	50093	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.311949968 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.311980009 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.312123060 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.328794003 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.351984978 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.352019072 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.352121115 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.352874041 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.352888107 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.353600025 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.353611946 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.354574919 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.354581118 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.354712009 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.354727030 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.355519056 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.355560064 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.355746031 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.355848074 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.355858088 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.420711994 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.421237946 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.421253920 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.421727896 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.421734095 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.535228968 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.535325050 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.535402060 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.535758018 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.535773993 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.535789013 CEST	50096	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.535797119 CEST	443	50096	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.538940907 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.538981915 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:57.539149046 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.539325953 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:57.539335966 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.085319996 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.092087984 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.092116117 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.092343092 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.092953920 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.092962027 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.102024078 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.102056980 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.102731943 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.102735996 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.223140001 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.223334074 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.223674059 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.230218887 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.230252981 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.230335951 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.230366945 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.230402946 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.292756081 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.352155924 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.371068954 CEST	50098	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.371099949 CEST	443	50098	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.372692108 CEST	50100	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.372720957 CEST	443	50100	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.379441023 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.379452944 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.379995108 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.380000114 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.422713995 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.422765017 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.422986984 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.423234940 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.423269033 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.423372984 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.423501968 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.423516989 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.423672915 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.423682928 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.437407970 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.437486887 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.437551975 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.437947035 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.437964916 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.437975883 CEST	50097	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.437980890 CEST	443	50097	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.442481995 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.442511082 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.442678928 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.442811966 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.442823887 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.508740902 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.508824110 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.508922100 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.509109974 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.509131908 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.509143114 CEST	50101	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.509150982 CEST	443	50101	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.511975050 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.512015104 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.512136936 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.512331963 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.512341976 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.579142094 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.579683065 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.579699039 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.580209970 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.580216885 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.724370956 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.728643894 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.728689909 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.728708029 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.728760004 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.728821993 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.728837013 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.728847980 CEST	50099	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.728852987 CEST	443	50099	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.731735945 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.731774092 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:58.731880903 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.732053041 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:58.732065916 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.160686016 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.161216974 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.161300898 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.161678076 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.161711931 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.170136929 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.170584917 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.170603991 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.171066046 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.171071053 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.208180904 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.208744049 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.208780050 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.209211111 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.209222078 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.267719030 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.268381119 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.268415928 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.268908978 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.268914938 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.296585083 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.296763897 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.296964884 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.297071934 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.297120094 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.297152996 CEST	50102	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.297171116 CEST	443	50102	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.300657988 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.300753117 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.300951958 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.301172972 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.301192045 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.306782007 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.306811094 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.306868076 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.306869030 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.306921005 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.307185888 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.307202101 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.307214022 CEST	50103	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.307219028 CEST	443	50103	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.310337067 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.310446024 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.310607910 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.310843945 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.310872078 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.345380068 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.345540047 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.345604897 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.345835924 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.345835924 CEST	50104	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.345854044 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.345865011 CEST	443	50104	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.349904060 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.349929094 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.350182056 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.350424051 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.350439072 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.402131081 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.402211905 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.402420044 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.402543068 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.402565002 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.402576923 CEST	50105	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.402582884 CEST	443	50105	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.406320095 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.406383038 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.406542063 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.406747103 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.406764984 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.463754892 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.464613914 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.464641094 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.464932919 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.464941025 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.596908092 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.596977949 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.597095013 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.597357988 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.597374916 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.597417116 CEST	50106	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.597423077 CEST	443	50106	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.600893974 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.600924969 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:45:59.600996017 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.601203918 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:45:59.601217031 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.042782068 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.045669079 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.045692921 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.046966076 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.046981096 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.047732115 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.048242092 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.048269033 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.048758030 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.048763037 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.099423885 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.100282907 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.100292921 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.101102114 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.101106882 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.146342993 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.146975994 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.147011042 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.147628069 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.147635937 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.174966097 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.175188065 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.175266027 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.175360918 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.175383091 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.175398111 CEST	50107	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.175404072 CEST	443	50107	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.178364992 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.178396940 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.178603888 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.178719044 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.178724051 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.181205034 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.181235075 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.181283951 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.181293011 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.181332111 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.181485891 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.181504965 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.181523085 CEST	50108	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.181529045 CEST	443	50108	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.184202909 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.184227943 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.184295893 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.184422016 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.184431076 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.234918118 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.234994888 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.235088110 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.235347986 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.235363007 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.235419989 CEST	50109	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.235425949 CEST	443	50109	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.238934994 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.238944054 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.239089966 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.239252090 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.239263058 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.280342102 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.280416012 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.280474901 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.280498981 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.280529976 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.280605078 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.281188965 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.281207085 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.281218052 CEST	50110	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.281224012 CEST	443	50110	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.284739017 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.284764051 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.284830093 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.284996986 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.285007954 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.341204882 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.341820955 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.341835976 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.342736006 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.342744112 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.474289894 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.474394083 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.474553108 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.474841118 CEST	50111	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.474858999 CEST	443	50111	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.479830980 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.479876995 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.479974031 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.480205059 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.480218887 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.937158108 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.940140963 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.979167938 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:00.983530045 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.985260963 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.989095926 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:00.989109039 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.002346992 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.002362967 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.030441046 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.030590057 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.077420950 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.092792988 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.092818975 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.095710039 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.095716953 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.097101927 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.097115993 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.097755909 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.097759962 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.098181963 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.098191023 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.098683119 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.098687887 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.129961967 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.130167961 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.130213976 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.130219936 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.130278111 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.130446911 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.130459070 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.130470037 CEST	50112	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.130475044 CEST	443	50112	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.134051085 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.134088993 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.134351969 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.134351969 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.134381056 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.208743095 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.209415913 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.209441900 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.209935904 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.209944010 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.223161936 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.223234892 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.223298073 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.223455906 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.223484039 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.223611116 CEST	50113	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.223622084 CEST	443	50113	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227030993 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.227067947 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227144957 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.227324963 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.227334023 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227794886 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227814913 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227861881 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.227869034 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.227912903 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.228087902 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.228102922 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.228116989 CEST	50114	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.228122950 CEST	443	50114	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.229142904 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.229198933 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.229276896 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.229402065 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.229415894 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.229428053 CEST	50115	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.229434967 CEST	443	50115	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.230899096 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.230931044 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.231111050 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.231240034 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.231251955 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.232090950 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.232114077 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.232177973 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.232578993 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.232589006 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338254929 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338275909 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338356018 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.338382006 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338398933 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338474035 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.338768005 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.338784933 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.338795900 CEST	50116	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.338802099 CEST	443	50116	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.342351913 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.342391014 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.342459917 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.342622042 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.342631102 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.859116077 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.859781027 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.859802961 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.860402107 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.860408068 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.948889017 CEST	80	49710	156.67.232.199	192.168.2.5
Oct 25, 2024 00:46:01.948965073 CEST	49710	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:46:01.953830004 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.954462051 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.954495907 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.955073118 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.955079079 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.959270000 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.959650040 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.959660053 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.960211039 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.960216999 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.973081112 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.973481894 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.973505020 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.974045038 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.974050999 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997242928 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997271061 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997329950 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.997349977 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997581005 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997620106 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.997642994 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997661114 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.997661114 CEST	50117	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:01.997670889 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:01.997677088 CEST	443	50117	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.001177073 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.001197100 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.001276016 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.001476049 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.001483917 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.079596996 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.080235004 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.080262899 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.080954075 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.080961943 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.086327076 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.086425066 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.086474895 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.086479902 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.086529016 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.086747885 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.086766005 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.086781025 CEST	50118	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.086786985 CEST	443	50118	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.090179920 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.090221882 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.090293884 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.090437889 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.090449095 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.091244936 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.091270924 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.091320992 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.091326952 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.091366053 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.091569901 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.091578960 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.091589928 CEST	50120	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.091593981 CEST	443	50120	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.095774889 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.095808029 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.095870018 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.096122026 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.096132040 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.108426094 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.108545065 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.108601093 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.109033108 CEST	50119	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.109051943 CEST	443	50119	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.118390083 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.118438959 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.121409893 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.125824928 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.125847101 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.215111971 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.215282917 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.215339899 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.215508938 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.215524912 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.215540886 CEST	50121	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.215548038 CEST	443	50121	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.219835043 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.219871998 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.219949007 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.220328093 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.220340014 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.749248981 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.750627995 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.750638008 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.751605988 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.751611948 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.837222099 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.837846041 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.837862968 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.838541985 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.838546991 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.854204893 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.854732037 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.854748964 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.855283022 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.855290890 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.865194082 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.866334915 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.866334915 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.866364956 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.866379023 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.885087013 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.885152102 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.885270119 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.885449886 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.885449886 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.885488987 CEST	50122	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.885504961 CEST	443	50122	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.888853073 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.888881922 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.889133930 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.889301062 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.889317036 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.969562054 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.970225096 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.970364094 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.970364094 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.972364902 CEST	50123	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.972381115 CEST	443	50123	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.973628998 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.973655939 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.973826885 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.973891973 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.973900080 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.986972094 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.987514973 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.987555027 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.988095045 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.988114119 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.989645004 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.989712000 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.989761114 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.989938021 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.989938021 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.992645025 CEST	50124	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.992671967 CEST	443	50124	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.992702007 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.992727041 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:02.992935896 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.993166924 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:02.993176937 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.002521992 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.002582073 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.002803087 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.002803087 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.005121946 CEST	50125	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.005142927 CEST	443	50125	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.005390882 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.005409002 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.005539894 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.005600929 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.005608082 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.125976086 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.126010895 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.126061916 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.126173019 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.126173019 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.126441002 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.126477003 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.126521111 CEST	50126	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.126529932 CEST	443	50126	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.130250931 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.130290985 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.130650043 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.130650043 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.130676985 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.718336105 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.719345093 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.719345093 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.719377995 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.719398975 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.722824097 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.723289013 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.723304987 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.723927021 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.723934889 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.746943951 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.747765064 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.747765064 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.747802019 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.747822046 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.774960995 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.775876999 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.775876999 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.775891066 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.775907993 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.813913107 CEST	49710	80	192.168.2.5	156.67.232.199
Oct 25, 2024 00:46:03.820638895 CEST	80	49710	156.67.232.199	192.168.2.5
Oct 25, 2024 00:46:03.849740982 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.849806070 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.850107908 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.850107908 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.852349997 CEST	50128	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.852369070 CEST	443	50128	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.853411913 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.853455067 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.853728056 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.853728056 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.853768110 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.859750986 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.859981060 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.860316992 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.860316992 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.860316992 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.862680912 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.862710953 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.862915039 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.863162994 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.863173008 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.865113020 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.865565062 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.865580082 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.866099119 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.866105080 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.880851984 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.881027937 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.881095886 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.881155968 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.881169081 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.881180048 CEST	50130	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.881186008 CEST	443	50130	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.884339094 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.884382963 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.884469032 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.884676933 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.884694099 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.914673090 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.914781094 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.914827108 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.914891958 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.914891958 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.915066004 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.915086031 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.915127993 CEST	50129	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.915133953 CEST	443	50129	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.917783976 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.917818069 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.917886019 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.918015957 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:03.918025017 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.999600887 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:03.999885082 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.000087023 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.000127077 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.000148058 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.000158072 CEST	50131	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.000164032 CEST	443	50131	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.002803087 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.002855062 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.003019094 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.003176928 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.003190994 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.092931986 CEST	50127	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.092958927 CEST	443	50127	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.595531940 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.598381042 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.598381042 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.598403931 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.598414898 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.614547014 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.614917040 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.614932060 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.615329027 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.615333080 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.629642963 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.630021095 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.630028963 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.630547047 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.630552053 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.652437925 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.652879953 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.652894974 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.653373003 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.653378010 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.726959944 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.727447033 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.727464914 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.728008986 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.728013992 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.728961945 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.729047060 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.729116917 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.729363918 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.729363918 CEST	50134	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.729377031 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.729387045 CEST	443	50134	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.732629061 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.732662916 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.732726097 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.732928038 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.732939959 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.751161098 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.751354933 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.751400948 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.751401901 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.751442909 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.751579046 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.751599073 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.751611948 CEST	50133	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.751619101 CEST	443	50133	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.754933119 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.754959106 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.755017042 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.755168915 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.755181074 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.763501883 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.763541937 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.763583899 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.763607025 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.763643980 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.763851881 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.763853073 CEST	50135	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.763875008 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.763885975 CEST	443	50135	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.766590118 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.766612053 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.766668081 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.766813040 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.766822100 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.786354065 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.786528111 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.786580086 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.786608934 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.786618948 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.786628962 CEST	50136	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.786633968 CEST	443	50136	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.789067030 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.789115906 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.789180040 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.789298058 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.789310932 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.856987000 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.857096910 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.857183933 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.857395887 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.857414007 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.857428074 CEST	50137	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.857434034 CEST	443	50137	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.860258102 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.860284090 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:04.860527039 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.860527039 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:04.860553980 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.495637894 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.502172947 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.526865959 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.545588970 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.545593023 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.580172062 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.603642941 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.657078981 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.765244007 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.765275002 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.768384933 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.768398046 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.799670935 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.799670935 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.799705029 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.799712896 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.801882029 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.801882029 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.801920891 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.801934004 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.806751966 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.806751966 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.806763887 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.806777954 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.895508051 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.895586014 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.895647049 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.897197008 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.897214890 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.897290945 CEST	50140	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.897300005 CEST	443	50140	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.900356054 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.900408983 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.900476933 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.900641918 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.900657892 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.919712067 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.920167923 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.920195103 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.920697927 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.920702934 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.929758072 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.929845095 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.929900885 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.930125952 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.930125952 CEST	50139	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.930147886 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.930159092 CEST	443	50139	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931189060 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931288958 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931340933 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.931365013 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931468010 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931509972 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.931585073 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.931598902 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.931603909 CEST	50141	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.931610107 CEST	443	50141	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.933532000 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.933577061 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.933641911 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.933773994 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.933814049 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.933903933 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.933918953 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.933988094 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.935340881 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.935358047 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.936359882 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.936491966 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.936563015 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.939158916 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.939174891 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.939441919 CEST	50142	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.939449072 CEST	443	50142	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.945568085 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.945616961 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:05.945676088 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.945816994 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:05.945832014 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052010059 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052105904 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052172899 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.052205086 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052259922 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052314043 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.052833080 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.052854061 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.052866936 CEST	50138	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.052871943 CEST	443	50138	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.056021929 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.056060076 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.056137085 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.056289911 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.056302071 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.635044098 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.635713100 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.635755062 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.636178017 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.636193991 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.664457083 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.665023088 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.665040016 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.665735006 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.665744066 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.669236898 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.669615984 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.669651031 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.670106888 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.670119047 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.701942921 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.713871002 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.713906050 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.714801073 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.714816093 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.771203041 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.771262884 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.771311045 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.771327019 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.771373034 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.771635056 CEST	50143	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.771653891 CEST	443	50143	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.775446892 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.775484085 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.775559902 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.775823116 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.775832891 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.797231913 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.797297955 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.797344923 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.797594070 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.797610998 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.797625065 CEST	50145	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.797631025 CEST	443	50145	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.800739050 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.800791025 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.800867081 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.801003933 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.801024914 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.801711082 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.801832914 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.801887989 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.801948071 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.801969051 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.801983118 CEST	50144	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.801990032 CEST	443	50144	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.803860903 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.804207087 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.804219007 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.804699898 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.804703951 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.804709911 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.804728031 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.804785013 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.804909945 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.804919958 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.843983889 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.844062090 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.844116926 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.844324112 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.844324112 CEST	50146	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.844345093 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.844356060 CEST	443	50146	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.847379923 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.847439051 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.847518921 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.847816944 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.847836018 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.942821026 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.942862034 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.942926884 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.942934990 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.943032026 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.943238020 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.943238020 CEST	50147	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.943253994 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.943264008 CEST	443	50147	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.946109056 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.946158886 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:06.946398020 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.946398020 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:06.946432114 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.511464119 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.512085915 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.512115002 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.512739897 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.512754917 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.521728992 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.522599936 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.522599936 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.522614956 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.522624016 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.552663088 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.553785086 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.553785086 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.553808928 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.553822994 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.595136881 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.596321106 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.596321106 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.596329927 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.596343994 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.645781040 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.645973921 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.646177053 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.646316051 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.646316051 CEST	50148	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.646337986 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.646349907 CEST	443	50148	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.649955988 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.650001049 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.650621891 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.650621891 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.650660992 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.654218912 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.654350042 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.654396057 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.654493093 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.654599905 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.654599905 CEST	50149	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.654619932 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.654629946 CEST	443	50149	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.657684088 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.657731056 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.657921076 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.658967018 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.658998013 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.671994925 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.672637939 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.672667027 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.674882889 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.674892902 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.692152977 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.692595959 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.695337057 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.704745054 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.704777956 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.704848051 CEST	50150	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.704857111 CEST	443	50150	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.708847046 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.708884001 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.709139109 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.709139109 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.709178925 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.730195999 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.730336905 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.730390072 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.730565071 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.730751038 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.730751038 CEST	50151	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.730766058 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.730775118 CEST	443	50151	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.734673023 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.734715939 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.735233068 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.735233068 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.735264063 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.803546906 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.803927898 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.804255962 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.804255962 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.804372072 CEST	50152	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.804393053 CEST	443	50152	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.807650089 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.807683945 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:07.807847977 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.808036089 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:07.808048964 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.376874924 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.391839027 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.395087004 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.395121098 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.423964024 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.423995018 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.441265106 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.442404032 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.442411900 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.442893028 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.442898035 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.445061922 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.454054117 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.454066038 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.454561949 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.454566002 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.473460913 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.477541924 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.477574110 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.480498075 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.480504990 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.534516096 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.539098978 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.539112091 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.539977074 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.539982080 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.552761078 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.552829981 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.552887917 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.553088903 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.553107977 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.553122997 CEST	50154	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.553128958 CEST	443	50154	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.561804056 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.561837912 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.561953068 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.562756062 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.562764883 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.570373058 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.570702076 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.570780993 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.570883989 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.570883989 CEST	50155	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.570894957 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.570899010 CEST	443	50155	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.574166059 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.574183941 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.574259043 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.574426889 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.574436903 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.582926035 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.583064079 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.583116055 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.583122015 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.583133936 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.583188057 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.583322048 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.583322048 CEST	50156	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.583329916 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.583338022 CEST	443	50156	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.586072922 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.586091042 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.586150885 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.586371899 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.586378098 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.614392042 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.614461899 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.614594936 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.615068913 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.615080118 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.615092993 CEST	50157	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.615098953 CEST	443	50157	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.618443966 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.618458986 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.618737936 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.618875027 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.618880033 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.667066097 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.667305946 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.667659044 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.667659044 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.667896986 CEST	50158	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.667907000 CEST	443	50158	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.670238972 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.670263052 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:08.670397997 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.670535088 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:08.670542002 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.307813883 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.308348894 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.308381081 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.308805943 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.308825016 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.311538935 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.312021017 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.312064886 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.312565088 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.312572956 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.346144915 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.346673012 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.346698999 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.347264051 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.347270966 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.376027107 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.376581907 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.376591921 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.377078056 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.377082109 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.424345016 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.425317049 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.425348997 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.426070929 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.426076889 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.443491936 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.443567991 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.443629026 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.446592093 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.446748972 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.446816921 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.450048923 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.450074911 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.450088024 CEST	50159	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.450093985 CEST	443	50159	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.450447083 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.450447083 CEST	50161	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.450465918 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.450473070 CEST	443	50161	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.454456091 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.454485893 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.454551935 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.454770088 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.454780102 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.455188036 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.455214977 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.455328941 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.455454111 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.455462933 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.486938953 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.487005949 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.487070084 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.487349033 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.487361908 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.487370014 CEST	50160	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.487375975 CEST	443	50160	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.490098953 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.490119934 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.490190029 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.490358114 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.490365982 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.512203932 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.512264013 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.512314081 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.512554884 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.512583971 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.512603045 CEST	50162	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.512609005 CEST	443	50162	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.515908003 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.515937090 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.516007900 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.516180038 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.516191006 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.566689968 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.566751003 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.566809893 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.567013979 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.567038059 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.567050934 CEST	50163	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.567056894 CEST	443	50163	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.569967031 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.569999933 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:09.570066929 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.570193052 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:09.570203066 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.209021091 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.209028006 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.209470987 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.209496975 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.209636927 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.209651947 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.209937096 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.209942102 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.210207939 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.210211992 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.235903025 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.236453056 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.236483097 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.236916065 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.236921072 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.342515945 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.343050957 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.343064070 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.343683004 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.343688011 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.347991943 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.348109007 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.348218918 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.348272085 CEST	50165	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.348288059 CEST	443	50165	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.349064112 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.349097013 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.349147081 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.349150896 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.349221945 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.349360943 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.349380970 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.349395990 CEST	50164	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.349401951 CEST	443	50164	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.351876020 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.351924896 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.351927042 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.351958990 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.352027893 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.352030039 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.352160931 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.352169991 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.352354050 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.352376938 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.370549917 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.370682001 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.370734930 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.370743990 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.370790958 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.370894909 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.370908976 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.370939970 CEST	50166	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.370944977 CEST	443	50166	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.373969078 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.374013901 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.374092102 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.374290943 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.374309063 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.481846094 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.481959105 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.482011080 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.482028008 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.482079983 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.482230902 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.482249975 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.482256889 CEST	50168	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.482264996 CEST	443	50168	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.485241890 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.485287905 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:10.485361099 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.485488892 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:10.485500097 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.098014116 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.098510027 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.098540068 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.098990917 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.098995924 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.101429939 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.101787090 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.101808071 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.102220058 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.102225065 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.125813961 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.126688004 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.126714945 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.127353907 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.127365112 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.138195992 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.138696909 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.138714075 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.139267921 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.139272928 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.234782934 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.234989882 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.235075951 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.235207081 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.235228062 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.235239029 CEST	50169	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.235244989 CEST	443	50169	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.237219095 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.237771988 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.237814903 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.238215923 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.238221884 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.238394022 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.238431931 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.238507032 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.238681078 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.238692999 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.239670992 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.240151882 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.240230083 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.240335941 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.240355015 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.240374088 CEST	50170	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.240380049 CEST	443	50170	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.242969990 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.243014097 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.243257999 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.243441105 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.243453026 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.267496109 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.267571926 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.267766953 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.267901897 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.267923117 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.267939091 CEST	50171	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.267946005 CEST	443	50171	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.271147966 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.271184921 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.271260023 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.271446943 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.271460056 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.275974035 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.276089907 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.276248932 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.276299953 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.276299953 CEST	50167	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.276309967 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.276318073 CEST	443	50167	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.278857946 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.278896093 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.279123068 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.279309034 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.279325962 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.373959064 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.374016047 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.374066114 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.374074936 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.374149084 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.374835014 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.374857903 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.374865055 CEST	50172	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.374871969 CEST	443	50172	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.378066063 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.378108025 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.378236055 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.378427029 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.378439903 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.988576889 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.989129066 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.989152908 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.989598989 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.989603996 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.996298075 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.996767998 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.996779919 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:11.997225046 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:11.997229099 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.021953106 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.022474051 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.022499084 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.023003101 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.023011923 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.023953915 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.024347067 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.024367094 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.024780989 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.024785995 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.047749043 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:12.047796011 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:12.047910929 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:12.048187971 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:12.048199892 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:12.116832018 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.117335081 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.117363930 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.117803097 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.117809057 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.127944946 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.128096104 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.128268003 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.128326893 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.128340006 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.128348112 CEST	50173	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.128355026 CEST	443	50173	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.131243944 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.131277084 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.131571054 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.131679058 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.131694078 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.131839037 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.131866932 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.131921053 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.131928921 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.132009983 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.132066011 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.132225037 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.132225037 CEST	50175	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.132230997 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.132234097 CEST	443	50175	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.134474993 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.134517908 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.134624004 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.134773016 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.134783983 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.158646107 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.158718109 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.158787966 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.159044027 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.159059048 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.159070015 CEST	50176	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.159075975 CEST	443	50176	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.162919998 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.162952900 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.163208008 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.163341999 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.163352966 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.170140982 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.170279026 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.170500994 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.170711040 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.170734882 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.170747995 CEST	50174	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.170754910 CEST	443	50174	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.182245970 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.182313919 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.182568073 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.182689905 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.182703972 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251116991 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251142979 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251202106 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.251221895 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251437902 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251487970 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.251605034 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.251616001 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.251636982 CEST	50177	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.251641989 CEST	443	50177	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.255198956 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.255222082 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.255384922 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.255490065 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.255500078 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.866522074 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.879693031 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.879726887 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.880179882 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.880183935 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.881531954 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.898037910 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.904277086 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.904288054 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.904758930 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.904763937 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.906213045 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.906238079 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.914083958 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:12.945255041 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:12.945262909 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.946897030 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:12.969044924 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:12.978281021 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.000509024 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.007572889 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.007596970 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.007663965 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.007683039 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.007731915 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.035371065 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.035535097 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.035556078 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.035613060 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.035638094 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.035681963 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.072221041 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.072243929 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.072370052 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.072380066 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.072432995 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.072598934 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.192594051 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:13.192625046 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:13.193300009 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:13.193475008 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.193511009 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.193950891 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.193957090 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.194324017 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.194343090 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.194356918 CEST	50181	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.194356918 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.194365025 CEST	443	50181	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.194380045 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.194674969 CEST	50179	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.194705009 CEST	443	50179	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.194905043 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.194911003 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.195457935 CEST	50180	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.195475101 CEST	443	50180	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.197457075 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:13.197576046 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:13.199126005 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.199168921 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.200046062 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.200071096 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.200109005 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.200170994 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.201267958 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.201277971 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.201457024 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.201693058 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.201704025 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.201854944 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.201869011 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.202187061 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.202193975 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.246928930 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:13.319644928 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.319727898 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.319818974 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.325462103 CEST	50183	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.325475931 CEST	443	50183	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.325495958 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.325579882 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.325666904 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.328164101 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.328197956 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.328218937 CEST	50182	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.328227043 CEST	443	50182	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.333468914 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.333511114 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.333569050 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.333635092 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.333662033 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.333724022 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.333782911 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.333797932 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.334018946 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.334031105 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.935656071 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.949492931 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.949511051 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.949939013 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.949943066 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.974529028 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.975037098 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.975052118 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.975640059 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:13.975644112 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:13.999806881 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.004630089 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.004650116 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.005099058 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.005104065 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.073556900 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.073967934 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.073983908 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.074501038 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.074505091 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.075983047 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.076014042 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.076069117 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.076073885 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.076123953 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.084050894 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.086720943 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.086733103 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.086745977 CEST	50186	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.086750984 CEST	443	50186	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.087476015 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.087496996 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.087987900 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.087991953 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.104857922 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.104886055 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.105156898 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.105551004 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.105565071 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.114485025 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.114553928 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.114662886 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.117038965 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.117046118 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.117059946 CEST	50185	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.117063999 CEST	443	50185	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.122881889 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.122922897 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.122986078 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.123138905 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.123152971 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.134916067 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.135305882 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.135358095 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.135437012 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.135452986 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.135466099 CEST	50184	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.135469913 CEST	443	50184	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.139497042 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.139542103 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.139806032 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.140022039 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.140036106 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.236521959 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.236557007 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.236618996 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.236630917 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.236707926 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.293437004 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.293471098 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.293490887 CEST	50187	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.293498993 CEST	443	50187	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.300503969 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.300530910 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.300595045 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.302844048 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.302855968 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.329655886 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.329684019 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.329699039 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.329761028 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.329776049 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.329826117 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.341221094 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.341289997 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.341298103 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.341346025 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.341371059 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.341386080 CEST	50188	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.341394901 CEST	443	50188	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.349107027 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.349148989 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.349216938 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.349359989 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.349370003 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.838028908 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.838618994 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.838648081 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.839097023 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.839103937 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.857491970 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.858088970 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.858110905 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.858760118 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.858766079 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.878468037 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.879160881 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.879180908 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.879620075 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.879630089 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.971538067 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.971564054 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.971616983 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.971646070 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.972012043 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.972012043 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.972012043 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.975347042 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.975383043 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:14.975621939 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.975699902 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:14.975713015 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.015438080 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.015471935 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.015546083 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.015729904 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.015729904 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.016159058 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.016159058 CEST	50191	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.016189098 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.016201019 CEST	443	50191	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.019685984 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.019726992 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.020051003 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.020051956 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.020081043 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.034456015 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.035392046 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.035404921 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.035949945 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.035953999 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.099788904 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.099819899 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.099834919 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.100378990 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.100405931 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.100707054 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.106781006 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.106820107 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.106875896 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.106936932 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.107037067 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.107037067 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.107254982 CEST	50190	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.107269049 CEST	443	50190	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.110574007 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.110620022 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.110805035 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.110902071 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.110912085 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.164309978 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.164366007 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.164510012 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.164763927 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.164763927 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.164834023 CEST	50192	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.164877892 CEST	443	50192	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.168255091 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.168308973 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.168673992 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.168673992 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.168710947 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.284872055 CEST	50189	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.284909010 CEST	443	50189	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.396290064 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.397175074 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.397201061 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.397861004 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.397866011 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.531095028 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.531230927 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.531357050 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.531732082 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.531754971 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.531987906 CEST	50193	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.531994104 CEST	443	50193	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.535340071 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.535397053 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.535726070 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.536413908 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.536436081 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.723712921 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.732407093 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.732424021 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.740417004 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.740427971 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.741303921 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.744517088 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.744540930 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.752616882 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.752623081 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.842014074 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.850970030 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.850970030 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.850992918 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.851008892 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.870316982 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.870410919 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.871121883 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.873016119 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.873016119 CEST	50194	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.873043060 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.873054981 CEST	443	50194	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.877720118 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.877753973 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.877790928 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.877897024 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.877993107 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.878403902 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.878405094 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.878427982 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.878432989 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.878432989 CEST	50195	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.878448009 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.878458023 CEST	443	50195	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.884377003 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.884424925 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.884510040 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.886888981 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.886910915 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.904511929 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.905540943 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.905550957 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.908375025 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.908380032 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.978877068 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.979125023 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.979191065 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.988728046 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.988728046 CEST	50196	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.988754034 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.988759041 CEST	443	50196	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.992531061 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.992572069 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:15.992630959 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.992809057 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:15.992818117 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.039413929 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.039783001 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.039825916 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.039833069 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.039884090 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.039927959 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.039943933 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.039958000 CEST	50197	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.039963961 CEST	443	50197	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.307471037 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.315853119 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.315869093 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.316874027 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.316880941 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.473406076 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.473503113 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.473563910 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.473810911 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.473833084 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.473844051 CEST	50198	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.473850012 CEST	443	50198	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.614634991 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.615320921 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.615353107 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.615890026 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.615899086 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.676444054 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.677083015 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.677103043 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.677741051 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.677746058 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.727941036 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.728588104 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.728601933 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.729186058 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.729191065 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.746081114 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.746176004 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.746239901 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.746493101 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.746512890 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.746531010 CEST	50200	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.746536970 CEST	443	50200	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.810921907 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.811021090 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.811081886 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.811531067 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.811553001 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.811564922 CEST	50199	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.811572075 CEST	443	50199	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.862010002 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.862080097 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.862137079 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.863542080 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.863558054 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:16.863569975 CEST	50201	443	192.168.2.5	13.107.246.60
Oct 25, 2024 00:46:16.863575935 CEST	443	50201	13.107.246.60	192.168.2.5
Oct 25, 2024 00:46:22.940815926 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:22.940884113 CEST	443	50178	216.58.206.68	192.168.2.5
Oct 25, 2024 00:46:22.941039085 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:23.815187931 CEST	50178	443	192.168.2.5	216.58.206.68
Oct 25, 2024 00:46:23.815218925 CEST	443	50178	216.58.206.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:45:07.648175001 CEST	53	54458	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:07.660718918 CEST	53	55135	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:08.965747118 CEST	53	56457	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:09.601841927 CEST	64743	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:09.602101088 CEST	55864	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:09.627398968 CEST	53	64743	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:09.632767916 CEST	53	55864	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:10.512053013 CEST	63280	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:10.512238026 CEST	56967	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:10.537988901 CEST	53	63280	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:10.541841030 CEST	53	56967	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:11.984842062 CEST	60592	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:11.986156940 CEST	57390	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:11.995228052 CEST	53	60592	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:11.995240927 CEST	53	57390	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:14.298949957 CEST	50882	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:14.299213886 CEST	54296	53	192.168.2.5	1.1.1.1
Oct 25, 2024 00:45:14.309056997 CEST	53	54296	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:14.326313019 CEST	53	50882	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:17.091340065 CEST	53	49418	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:25.977195978 CEST	53	59246	1.1.1.1	192.168.2.5
Oct 25, 2024 00:45:45.305226088 CEST	53	55780	1.1.1.1	192.168.2.5
Oct 25, 2024 00:46:07.215327024 CEST	53	51683	1.1.1.1	192.168.2.5
Oct 25, 2024 00:46:07.995810986 CEST	53	55846	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 00:45:09.601841927 CEST	192.168.2.5	1.1.1.1	0x58a4	Standard query (0)	www.ritana.de	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:09.602101088 CEST	192.168.2.5	1.1.1.1	0x1071	Standard query (0)	www.ritana.de	65	IN (0x0001)	false
Oct 25, 2024 00:45:10.512053013 CEST	192.168.2.5	1.1.1.1	0x1d1d	Standard query (0)	www.ritana.de	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:10.512238026 CEST	192.168.2.5	1.1.1.1	0xca5d	Standard query (0)	www.ritana.de	65	IN (0x0001)	false
Oct 25, 2024 00:45:11.984842062 CEST	192.168.2.5	1.1.1.1	0xd275	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:11.986156940 CEST	192.168.2.5	1.1.1.1	0x7a44	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:45:14.298949957 CEST	192.168.2.5	1.1.1.1	0x7273	Standard query (0)	www.ritana.de	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:14.299213886 CEST	192.168.2.5	1.1.1.1	0xa35f	Standard query (0)	www.ritana.de	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 00:45:09.627398968 CEST	1.1.1.1	192.168.2.5	0x58a4	No error (0)	www.ritana.de		156.67.232.199	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:10.537988901 CEST	1.1.1.1	192.168.2.5	0x1d1d	No error (0)	www.ritana.de		156.67.232.199	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:11.995228052 CEST	1.1.1.1	192.168.2.5	0xd275	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:11.995240927 CEST	1.1.1.1	192.168.2.5	0x7a44	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:45:14.326313019 CEST	1.1.1.1	192.168.2.5	0x7273	No error (0)	www.ritana.de		156.67.232.199	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:22.721410036 CEST	1.1.1.1	192.168.2.5	0x72b9	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:22.721410036 CEST	1.1.1.1	192.168.2.5	0x72b9	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:22.748419046 CEST	1.1.1.1	192.168.2.5	0xdbdc	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:45:22.748419046 CEST	1.1.1.1	192.168.2.5	0xdbdc	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:24.425903082 CEST	1.1.1.1	192.168.2.5	0xed18	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:45:24.425903082 CEST	1.1.1.1	192.168.2.5	0xed18	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:45:40.056862116 CEST	1.1.1.1	192.168.2.5	0xc941	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:45:40.056862116 CEST	1.1.1.1	192.168.2.5	0xc941	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:46:00.355936050 CEST	1.1.1.1	192.168.2.5	0xc4dc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:46:00.355936050 CEST	1.1.1.1	192.168.2.5	0xc4dc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:46:20.666816950 CEST	1.1.1.1	192.168.2.5	0xbfaa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:46:20.666816950 CEST	1.1.1.1	192.168.2.5	0xbfaa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:46:25.832189083 CEST	1.1.1.1	192.168.2.5	0xdb94	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:46:25.832189083 CEST	1.1.1.1	192.168.2.5	0xdb94	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.ritana.de

https:

fs.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	156.67.232.199	80	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 00:45:09.639271021 CEST	428	OUT	GET / HTTP/1.1 Host: www.ritana.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 00:45:10.508514881 CEST	473	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 22:45:10 GMT Server: Apache Location: https://www.ritana.de/ Content-Length: 230 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.ritana.de/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	156.67.232.199	80	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 00:45:54.640571117 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:11 UTC	656	OUT	GET / HTTP/1.1 Host: www.ritana.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:45:11 UTC	466	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:11 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5; path=/ Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
2024-10-24 22:45:11 UTC	7726	IN	Data Raw: 31 66 30 62 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 Data Ascii: 1f0b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><link rel="icon" href="/images/icons/favicon.png" type="image/png"
2024-10-24 22:45:11 UTC	227	IN	Data Raw: 69 74 65 6d 2d 6c 65 76 65 6c 2d 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 2f 77 69 72 65 6c 65 73 73 2d 69 62 65 61 63 6f 6e 22 3e 57 69 72 65 6c 65 73 73 20 69 62 65 61 63 6f 6e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 09 09 09 20 20 20 0d 0a 09 09 09 09 09 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 6c 65 76 65 6c 2d 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e Data Ascii: item-level-2"><a href="https://www.ritana.de/wireless-ibeacon">Wireless ibeacon</a> </li><li class="item-level-2"><a href="https://www.
2024-10-24 22:45:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 22:45:11 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 72 69 74 61 6e 61 2e 64 65 2f 65 70 61 70 65 72 2d 70 72 61 78 69 73 22 3e 65 50 61 70 65 72 20 69 6e 20 64 65 72 20 50 72 61 78 69 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 09 09 09 09 09 09 20 20 20 0d 0a 09 09 09 09 09 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 6c 65 76 65 6c 2d 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 2f 6c 61 6e 63 6f 6d 2d 73 69 63 68 65 72 68 65 69 74 22 3e 48 6f 63 68 73 69 63 68 65 72 65 20 4e 65 74 7a 65 3c 2f 61 3e 0d 0a 20 20 20 20 Data Ascii: 1ff8ritana.de/epaper-praxis">ePaper in der Praxis</a> </li><li class="item-level-2"><a href="https://www.ritana.de/lancom-sicherheit">Hochsichere Netze</a>
2024-10-24 22:45:11 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-10-24 22:45:11 UTC	8184	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 6c 65 6e 64 61 72 20 62 6c 61 63 6b 22 3e 3c 68 31 3e 32 32 3c 2f 68 31 3e 3c 73 70 61 6e 3e 41 75 67 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 73 74 6c 79 65 3d 22 22 3e 32 32 2e 30 38 2e 32 30 32 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 Data Ascii: <li> <div class="calendar black"><h1>22</h1><span>Aug</span></div> <span stlye="">22.08.2023</span> <br
2024-10-24 22:45:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 22:45:11 UTC	4454	IN	Data Raw: 31 31 35 39 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6e 65 74 77 6f 72 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 73 74 79 6c 65 3d 22 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 52 69 74 61 Data Ascii: 1159 <div class="content"> <ul class="social-network"> <li style="float:left; margin-right:20px; margin-top:0px;"> ...<a href="https://www.facebook.com/Rita

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49716	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	584	OUT	GET /css/reset.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:12 UTC	293	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 2072 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:12 UTC	2072	IN	Data Raw: 2f 2a 52 65 73 65 74 2a 2f 0d 0a 2a 20 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0d 0a 7d 0d 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 20 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 20 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 66 6f 6e 74 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 20 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 75 62 2c 20 73 75 70 2c 20 Data Ascii: /Reset/* { padding:0; margin:0;}html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, font, img, ins, kbd, q, s, samp, small, strike, sub, sup,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	583	OUT	GET /css/base.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:12 UTC	294	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 25 May 2018 12:38:14 GMT Accept-Ranges: bytes Content-Length: 21762 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:12 UTC	7898	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 0d 0a 0d 0a 2f 2a 20 43 55 53 54 4f 4d 20 2a 2f 0d 0a 2e 70 61 67 65 77 72 61 70 09 09 09 09 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 35 70 78 20 23 33 32 33 32 33 32 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 38 70 78 20 23 33 32 33 32 33 32 3b 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 38 70 78 20 23 33 32 33 32 33 32 3b 20 77 69 64 74 68 3a 39 38 30 70 78 3b 20 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 20 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 5f 77 72 61 70 09 09 09 7b 20 70 61 64 64 69 6e Data Ascii: @charset "utf-8";/* CSS Document // CUSTOM */.pagewrap{ background:#fff; -moz-box-shadow: 0 0 5px #323232; -webkit-box-shadow: 0px 0px 8px #323232; box-shadow: 0px 0px 8px #323232; width:980px; margin:auto; }.content_wrap{ paddin
2024-10-24 22:45:13 UTC	8000	IN	Data Raw: 6d 65 6e 75 20 6c 69 2e 69 74 65 6d 2d 6c 65 76 65 6c 2d 30 2e 63 75 72 72 65 6e 74 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 2d 6d 65 6e 75 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 20 6c 65 66 74 20 62 6f 74 74 6f 6d 20 23 66 66 66 3b 0d 0a 7d 0d 0a 75 6c 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 3a 68 6f 76 65 72 20 3e 20 61 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 46 46 46 0d 0a 7d 0d 0a 75 6c 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 2e 63 75 72 72 65 6e 74 20 61 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 37 38 37 38 37 38 0d 0a 7d 0d 0a 0d 0a 75 6c 2e 73 69 6d 70 6c 65 Data Ascii: menu li.item-level-0.current{background:url(../images/sprite-menu.png) repeat-x left bottom #fff;}ul.simple-drop-down-menu li:hover > a{text-decoration:none;color:#FFF}ul.simple-drop-down-menu li.current a{color:#787878}ul.simple
2024-10-24 22:45:13 UTC	5864	IN	Data Raw: 66 61 66 61 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 2d 68 69 67 68 6c 69 67 68 74 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 20 74 6f 70 3b 0d 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 45 35 45 35 45 35 3b 0d 0a 09 0d 0a 7d 0d 0a 2e 76 69 64 65 6f 2d 70 72 65 76 69 65 77 2c 2e 69 6d 61 67 65 2d 70 72 65 76 69 65 77 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 0d 0a 7d 0d 0a 2e 76 69 64 65 6f 2d 70 72 65 76 69 65 77 20 20 2e 6f 76 65 72 6c 61 79 2c 2e 69 6d 61 67 65 2d 70 72 65 76 69 65 77 20 2e 6f 76 65 72 6c 61 79 7b 0d 0a 09 77 69 64 74 68 3a 32 38 36 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 31 35 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 09 62 61 63 6b 67 Data Ascii: fafa url(../images/button-highlight.png) repeat-x top;border-color:#E5E5E5;}.video-preview,.image-preview {position:relative}.video-preview .overlay,.image-preview .overlay{width:286px;height:150px;background-color:#FFF;backg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	585	OUT	GET /css/tipTip.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:12 UTC	293	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 2554 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:12 UTC	2554	IN	Data Raw: 2f 2a 20 54 69 70 54 69 70 20 43 53 53 20 2d 20 56 65 72 73 69 6f 6e 20 31 2e 32 20 2a 2f 0d 0a 0d 0a 23 74 69 70 74 69 70 5f 68 6f 6c 64 65 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 3b 0d 0a 7d 0d 0a 0d 0a 23 74 69 70 74 69 70 5f 68 6f 6c 64 65 72 2e 74 69 70 5f 74 6f 70 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 74 69 70 74 69 70 5f 68 6f 6c 64 65 72 2e 74 69 70 5f 62 6f 74 74 6f 6d 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 74 69 70 74 69 70 5f 68 6f 6c 64 Data Ascii: /* TipTip CSS - Version 1.2 */#tiptip_holder {display: none;position: absolute;top: 0;left: 0;z-index: 99999;}#tiptip_holder.tip_top {padding-bottom: 5px;}#tiptip_holder.tip_bottom {padding-top: 5px;}#tiptip_hold

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	589	OUT	GET /css/short-code.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:12 UTC	294	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 12681 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:12 UTC	7898	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 2f 2a 53 68 6f 72 74 20 43 6f 64 65 2a 2f 0d 0a 62 6c 6f 63 6b 71 75 6f 74 65 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 20 31 30 70 78 20 32 30 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 23 43 34 31 44 32 33 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 36 65 36 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 46 46 46 3b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 46 46 46 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 0d 0a 09 62 61 63 6b 67 72 Data Ascii: @charset "utf-8";/* CSS Document //Short Code*/blockquote{padding:10px 10px 10px 20px;border-left:5px solid #C41D23;border-bottom:1px solid #e6e6e6;border-right:1px solid #FFF;border-top:1px solid #FFF;font-style:italic;backgr
2024-10-24 22:45:13 UTC	4783	IN	Data Raw: 31 70 78 20 73 6f 6c 69 64 20 23 45 35 45 35 45 35 3b 0d 0a 7d 09 0d 0a 74 61 62 6c 65 2e 6d 2d 74 61 62 6c 65 7b 09 0d 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 35 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 35 29 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 35 29 3b 0d 0a 0d 0a 7d 0d 0a 74 61 62 6c 65 2e 6d 2d 74 61 62 6c 65 20 74 68 65 61 64 20 74 68 2c 74 61 62 6c 65 2e 6d 2d 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 20 74 68 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 35 36 35 36 35 36 3b 20 Data Ascii: 1px solid #E5E5E5;}table.m-table{-moz-box-shadow:0 2px 0 rgba(0,0,0,0.05); box-shadow:0 2px 0 rgba(0,0,0,0.05); -webkit-box-shadow:0 2px 0 rgba(0,0,0,0.05);}table.m-table thead th,table.m-table tbody tr th{background: #565656;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	590	OUT	GET /css/prettyPhoto.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:12 UTC	294	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:03 GMT Accept-Ranges: bytes Content-Length: 20057 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:12 UTC	7898	IN	Data Raw: 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 74 6f 70 20 2e 70 70 5f 72 69 67 68 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6c 65 66 74 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 6d 69 64 64 6c 65 2c 64 69 76 2e 70 70 5f 64 65 66 61 75 6c 74 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 72 69 67 68 74 Data Ascii: div.pp_default .pp_top,div.pp_default .pp_top .pp_middle,div.pp_default .pp_top .pp_left,div.pp_default .pp_top .pp_right,div.pp_default .pp_bottom,div.pp_default .pp_bottom .pp_left,div.pp_default .pp_bottom .pp_middle,div.pp_default .pp_bottom .pp_right
2024-10-24 22:45:13 UTC	8000	IN	Data Raw: 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 64 61 72 6b 5f 72 6f 75 6e 64 65 64 2f 73 70 72 69 74 65 2e 70 6e 67 29 20 2d 38 38 70 78 20 2d 38 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 7d 0d 0a 64 69 76 2e 64 61 72 6b 5f 72 6f 75 6e 64 65 64 20 2e 70 70 5f 62 6f 74 74 6f 6d 20 2e 70 70 5f 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 64 61 72 6b 5f 72 6f 75 6e 64 65 64 2f 73 70 72 69 74 65 2e 70 6e 67 29 20 2d 31 31 30 70 78 20 2d 38 30 70 78 20 6e 6f 2d 72 65 70 65 61 74 7d 0d 0a 64 69 76 2e 64 61 72 6b 5f 72 6f 75 6e 64 65 64 20 2e 70 70 5f 6c 6f 61 64 65 72 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 Data Ascii: ges/prettyPhoto/dark_rounded/sprite.png) -88px -80px no-repeat}div.dark_rounded .pp_bottom .pp_right{background:url(../images/prettyPhoto/dark_rounded/sprite.png) -110px -80px no-repeat}div.dark_rounded .pp_loaderIcon{background:url(../images/prettyPh
2024-10-24 22:45:13 UTC	4159	IN	Data Raw: 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0d 0a 2e 70 70 5f 67 61 6c 6c 65 72 79 20 6c 69 2e 64 65 66 61 75 6c 74 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 70 72 65 74 74 79 50 68 6f 74 6f 2f 66 61 63 65 62 6f 6f 6b 2f 64 65 66 61 75 6c 74 5f 74 68 75 6d 62 6e 61 69 6c 2e 67 69 66 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 33 33 70 78 3b 77 69 64 74 68 3a 35 30 70 78 7d 0d 0a 2e 70 70 5f 67 61 6c 6c 65 72 79 20 2e 70 70 5f 61 72 72 6f 77 5f 70 72 65 76 69 6f 75 73 2c 2e 70 70 5f 67 61 6c 6c 65 72 79 20 2e 70 70 5f 61 72 72 6f 77 5f 6e 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 61 2e 70 70 5f 6e 65 Data Ascii: 0 0;padding:0}.pp_gallery li.default a{background:url(../images/prettyPhoto/facebook/default_thumbnail.gif) 0 0 no-repeat;display:block;height:33px;width:50px}.pp_gallery .pp_arrow_previous,.pp_gallery .pp_arrow_next{margin-top:7px!important}a.pp_ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:12 UTC	583	OUT	GET /css/css3.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:13 UTC	293	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:12 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:03 GMT Accept-Ranges: bytes Content-Length: 4330 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:13 UTC	4330	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 3a 3a 73 65 6c 65 63 74 69 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 61 62 61 39 3b 20 2f 2a 20 53 61 66 61 72 69 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 3b 09 0d 0a 7d 0d 0a 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 66 61 62 61 39 3b 20 2f 2a 20 4d 6f 7a 69 6c 6c 61 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 Data Ascii: @charset "utf-8";/* CSS Document /::selection {background: #3faba9; / Safari /color:#FFF;text-shadow:1px 1px 0px rgba(0,0,0,0.3);}::-moz-selection {background: #3faba9; / Mozilla */color:#FFF;text-shadow:1px 1px 0px rgba(0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:45:13 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237629 Date: Thu, 24 Oct 2024 22:45:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	585	OUT	GET /css/slider.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	293	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:13 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 3490 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:14 UTC	3490	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 76 32 2e 36 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 47 69 6c 62 65 72 74 20 50 65 6c 6c 65 67 72 6f 6d 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 61 6e 64 20 61 62 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0d 0a 20 2a 20 0d 0a 20 2a 20 4d 61 72 63 68 20 32 30 31 30 0d 0a 20 2a 2f 0d 0a 20 0d 0a 20 0d 0a 2f 2a 20 54 68 65 20 4e 69 76 6f 20 53 6c Data Ascii: /* * jQuery Nivo Slider v2.6 * http://nivo.dev7studios.com * * Copyright 2011, Gilbert Pellegrom * Free to use and abuse under the MIT license. * http://www.opensource.org/licenses/mit-license.php * * March 2010 / / The Nivo Sl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	603	OUT	GET /js/autocomplete/autocomplete.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	292	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:13 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:22 GMT Accept-Ranges: bytes Content-Length: 635 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:14 UTC	635	IN	Data Raw: 23 53 65 61 72 63 68 52 65 73 75 6c 74 09 09 7b 20 77 69 64 74 68 3a 39 38 30 70 78 3b 20 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0d 0a 23 61 63 52 65 73 75 6c 74 57 72 61 70 70 65 72 20 09 7b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 77 69 64 74 68 3a 33 30 30 70 78 3b 20 72 69 67 68 74 3a 35 70 78 3b 20 74 6f 70 3a 34 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 66 65 66 65 66 3b 20 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 20 7d 0d 0a 23 61 63 52 65 73 75 6c 74 09 09 09 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 20 7d 0d 0a 23 61 63 52 65 73 75 6c 74 20 75 6c 09 09 7b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a Data Ascii: #SearchResult{ width:980px; margin:auto; position:relative; }#acResultWrapper { position:absolute; width:300px; right:5px; top:40px; background:#efefef; z-index:9999; }#acResult{ display:none; }#acResult ul{ margin:0; padding:0; list-style:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	581	OUT	GET /custom.css HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	293	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:14 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 25 May 2018 12:39:41 GMT Accept-Ranges: bytes Content-Length: 3412 Cache-Control: max-age=604800, public Content-Type: text/css
2024-10-24 22:45:14 UTC	3412	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 44 43 44 43 44 43 3b 0d 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 22 29 3b 0d 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0d 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 32 2c 20 32 35 32 2c 20 32 35 32 29 3b 20 0d 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 3a 66 69 78 65 64 3b 20 0d 0a 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 78 Data Ascii: @charset "utf-8";/* CSS Document */body{ background-color:#DCDCDC; background-image: url("images/background.png"); background-repeat: repeat-x; background-color: rgb(252, 252, 252); background-attachment:fixed; }.max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	579	OUT	GET /js/jquery-1.6.4.min.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:14 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 91671 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:14 UTC	7883	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 36 2e 34 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 20 7c 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 61 29 7b 69 66 28 21 63 67 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b Data Ascii: /! jQuery v1.6.4 http://jquery.com/ \| http://jquery.org/license /(function(a,b){function cu(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cr(a){if(!cg[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 2c 47 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 48 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 2c 49 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2c 4a 3d 7b 7d 3b 65 2e 66 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 65 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 66 29 7b 76 61 72 20 67 2c 68 2c 6a 2c 6b 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 5b 30 5d 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 61 3d 3d 3d 22 62 6f 64 79 22 Data Ascii: .prototype.push,G=Array.prototype.slice,H=String.prototype.trim,I=Array.prototype.indexOf,J={};e.fn=e.prototype={constructor:e,init:function(a,d,f){var g,h,j,k;if(!a)return this;if(a.nodeType){this.context=this[0]=a,this.length=1;return this}if(a==="body"
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 7d 2c 69 73 52 65 73 6f 6c 76 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 63 7c 7c 21 21 62 7d 2c 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 3d 31 2c 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 44 65 66 65 72 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 63 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 64 3b 66 2e 65 78 74 65 6e 64 28 62 2c 7b 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 64 6f 6e 65 28 61 29 2e 66 61 69 6c 28 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 6c 77 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 64 6f 6e 65 2e 61 Data Ascii: eturn this},isResolved:function(){return!!c\|\|!!b},cancel:function(){d=1,a=[];return this}};return e},Deferred:function(a){var b=f._Deferred(),c=f._Deferred(),d;f.extend(b,{then:function(a,c){b.done(a).fail(c);return this},always:function(){return b.done.a
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 7c 6f 62 6a 65 63 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 29 24 2f 69 2c 73 3d 2f 5e 61 28 3f 3a 72 65 61 29 3f 24 2f 69 2c 74 3d 2f 5e 28 3f 3a 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 61 73 79 6e 63 7c 63 68 65 63 6b 65 64 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 7c 73 65 6c 65 63 74 65 64 29 24 2f 69 2c 75 2c 76 3b 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 2e 61 63 63 65 73 73 28 74 68 69 73 2c 61 2c 62 2c 21 30 2c 66 2e 61 74 74 72 29 7d 2c 72 65 6d 6f 76 65 41 74 74 Data Ascii: \|object\|select\|textarea)$/i,s=/^a(?:rea)?$/i,t=/^(?:autofocus\|autoplay\|async\|checked\|controls\|defer\|disabled\|hidden\|loop\|multiple\|open\|readonly\|required\|scoped\|selected)$/i,u,v;f.fn.extend({attr:function(a,b){return f.access(this,a,b,!0,f.attr)},removeAtt
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 7b 72 3d 68 2c 71 3d 6e 75 6c 6c 2c 6c 3d 68 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3c 30 2c 6d 3d 5b 5d 2c 6c 7c 7c 28 6d 3d 68 2e 73 70 6c 69 74 28 22 2e 22 29 2c 68 3d 6d 2e 73 68 69 66 74 28 29 2c 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 66 2e 6d 61 70 28 6d 2e 73 6c 69 63 65 28 30 29 2e 73 6f 72 74 28 29 2c 42 29 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 29 3f 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 29 2c 70 3d 74 5b 68 5d 3b 69 66 28 21 70 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 21 64 29 7b 66 6f 72 28 6a 3d 30 3b 6a 3c 70 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 7b 71 3d 70 5b 6a 5d 3b 69 66 28 6c 7c 7c 6e 2e 74 65 73 74 28 71 2e 6e 61 6d 65 73 70 61 63 65 29 29 66 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 61 2c 72 Data Ascii: {r=h,q=null,l=h.indexOf(".")<0,m=[],l\|\|(m=h.split("."),h=m.shift(),n=new RegExp("(^\|\\.)"+f.map(m.slice(0).sort(),B).join("\\.(?:.*\\.)?")+"(\\.\|$)")),p=t[h];if(!p)continue;if(!d){for(j=0;j<p.length;j++){q=p[j];if(l\|\|n.test(q.namespace))f.event.remove(a,r
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 69 73 29 2e 75 6e 62 69 6e 64 28 61 2c 67 29 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 67 2e 67 75 69 64 3d 65 2e 67 75 69 64 7c 7c 66 2e 67 75 69 64 2b 2b 29 3a 67 3d 65 3b 69 66 28 61 3d 3d 3d 22 75 6e 6c 6f 61 64 22 26 26 63 21 3d 3d 22 6f 6e 65 22 29 74 68 69 73 2e 6f 6e 65 28 61 2c 64 2c 65 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 69 3d 30 2c 6a 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 3c 6a 3b 69 2b 2b 29 66 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 5b 69 5d 2c 61 2c 67 2c 64 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 2c 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6f 62 6a 65 63 74 Data Ascii: is).unbind(a,g);return e.apply(this,arguments)},g.guid=e.guid\|\|f.guid++):g=e;if(a==="unload"&&c!=="one")this.one(a,d,e);else for(var i=0,j=this.length;i<j;i++)f.event.add(this[i],a,g,d);return this}}),f.fn.extend({unbind:function(a,b){if(typeof a=="object
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 3d 62 5b 31 5d 2b 28 62 5b 32 5d 7c 7c 31 29 2d 30 2c 61 5b 33 5d 3d 62 5b 33 5d 2d 30 7d 65 6c 73 65 20 61 5b 32 5d 26 26 6b 2e 65 72 72 6f 72 28 61 5b 30 5d 29 3b 61 5b 30 5d 3d 64 2b 2b 3b 72 65 74 75 72 6e 20 61 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 61 5b 31 5d 3d 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 3b 21 66 26 26 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 26 26 28 61 5b 31 5d 3d 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 29 2c 61 5b 34 5d 3d 28 61 5b 34 5d 7c 7c 61 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2c 61 5b 32 5d 3d 3d 3d 22 7e 3d 22 26 26 28 61 5b 34 5d 3d 22 20 22 2b 61 5b 34 5d 2b 22 20 22 29 3b 72 65 74 75 72 6e 20 61 7d 2c 50 53 45 55 44 4f 3a Data Ascii: =b[1]+(b[2]\|\|1)-0,a[3]=b[3]-0}else a[2]&&k.error(a[0]);a[0]=d++;return a},ATTR:function(a,b,c,d,e,f){var g=a[1]=a[1].replace(i,"");!f&&l.attrMap[g]&&(a[1]=l.attrMap[g]),a[4]=(a[4]\|\|a[5]\|\|"").replace(i,""),a[2]==="~="&&(a[4]=" "+a[4]+" ");return a},PSEUDO:
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 30 29 7b 61 2e 6c 61 73 74 43 68 69 6c 64 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 65 22 3b 69 66 28 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 65 22 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 72 65 74 75 72 6e 3b 6c 2e 6f 72 64 65 72 2e 73 70 6c 69 63 65 28 31 2c 30 2c 22 43 4c 41 53 53 22 29 2c 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 63 29 72 65 74 75 72 6e 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 5b 31 5d 29 7d 2c 61 3d 6e 75 6c 6c 7d 7d 28 29 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: 0){a.lastChild.className="e";if(a.getElementsByClassName("e").length===1)return;l.order.splice(1,0,"CLASS"),l.find.CLASS=function(a,b,c){if(typeof b.getElementsByClassName!="undefined"&&!c)return b.getElementsByClassName(a[1])},a=null}}(),c.documentElemen
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 64 3d 63 2e 68 74 6d 6c 28 29 3b 63 2e 72 65 70 6c 61 63 65 57 69 74 68 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 64 29 29 7d 29 3b 74 79 70 65 6f 66 20 61 21 3d 22 73 74 72 69 6e 67 22 26 26 28 61 3d 66 28 61 29 2e 64 65 74 61 63 68 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 63 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 66 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 28 29 2c 62 3f 66 28 62 29 2e 62 65 66 6f 72 65 28 61 29 3a 66 28 63 29 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 28 66 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3f Data Ascii: d=c.html();c.replaceWith(a.call(this,b,d))});typeof a!="string"&&(a=f(a).detach());return this.each(function(){var b=this.nextSibling,c=this.parentNode;f(this).remove(),b?f(b).before(a):f(c).append(a)})}return this.length?this.pushStack(f(f.isFunction(a)?
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 65 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3b 61 3d 61 2e 73 6c 69 63 65 28 30 2c 65 29 7d 76 61 72 20 68 3d 22 47 45 54 22 3b 63 26 26 28 66 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 3f 28 64 3d 63 2c 63 3d 62 29 3a 74 79 70 65 6f 66 20 63 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 63 3d 66 2e 70 61 72 61 6d 28 63 2c 66 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 2c 68 3d 22 50 4f 53 54 22 29 29 3b 76 61 72 20 69 3d 74 68 69 73 3b 66 2e 61 6a 61 78 28 7b 75 72 6c 3a 61 2c 74 79 70 65 3a 68 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 63 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 61 2e 69 73 52 65 73 6f 6c 76 65 64 28 29 26 Data Ascii: e(e,a.length);a=a.slice(0,e)}var h="GET";c&&(f.isFunction(c)?(d=c,c=b):typeof c=="object"&&(c=f.param(c,f.ajaxSettings.traditional),h="POST"));var i=this;f.ajax({url:a,type:h,dataType:"html",data:c,complete:function(a,b,c){c=a.responseText,a.isResolved()&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49726	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	581	OUT	GET /js/jquery.nivo.slider.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:14 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 25511 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:14 UTC	7883	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 76 32 2e 36 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 47 69 6c 62 65 72 74 20 50 65 6c 6c 65 67 72 6f 6d 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 61 6e 64 20 61 62 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0d 0a 20 2a 20 0d 0a 20 2a 20 4d 61 72 63 68 20 32 30 31 30 0d 0a 20 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a Data Ascii: /* * jQuery Nivo Slider v2.6 * http://nivo.dev7studios.com * * Copyright 2011, Gilbert Pellegrom * Free to use and abuse under the MIT license. * http://www.opensource.org/licenses/mit-license.php * * March 2010 */(function($) {
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 20 27 6e 65 78 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 46 6f 72 20 70 61 75 73 65 4f 6e 48 6f 76 65 72 20 73 65 74 74 69 6e 67 0d 0a 20 20 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 70 61 75 73 65 4f 6e 48 6f 76 65 72 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 73 2e 70 61 75 73 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 69 6d 65 72 29 3b 0d 0a 20 Data Ascii: 'next'); } }); } //For pauseOnHover setting if(settings.pauseOnHover){ slider.hover(function(){ vars.paused = true; clearInterval(timer);
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 28 7b 20 68 65 69 67 68 74 3a 27 31 30 30 25 27 2c 20 6f 70 61 63 69 74 79 3a 27 31 2e 30 27 20 7d 2c 20 73 65 74 74 69 6e 67 73 2e 61 6e 69 6d 53 70 65 65 64 2c 20 27 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 73 6c 69 64 65 72 2e 74 72 69 67 67 65 72 28 27 6e 69 76 6f 3a 61 6e 69 6d 46 69 6e 69 73 68 65 64 27 29 3b 20 7d 29 3b 0d 0a 09 09 09 09 09 09 7d 2c 20 28 31 30 30 20 2b 20 74 69 6d 65 42 75 66 66 29 29 3b 0d 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 09 09 09 09 09 73 6c 69 63 65 2e 61 6e 69 6d 61 74 65 28 7b 20 68 65 69 67 68 74 3a 27 31 30 30 25 27 2c 20 6f 70 61 63 69 74 79 3a 27 31 2e 30 27 20 7d 2c 20 73 65 74 74 69 6e 67 73 2e 61 6e 69 6d Data Ascii: ({ height:'100%', opacity:'1.0' }, settings.animSpeed, '', function(){ slider.trigger('nivo:animFinished'); });}, (100 + timeBuff));} else {setTimeout(function(){slice.animate({ height:'100%', opacity:'1.0' }, settings.anim
2024-10-24 22:45:14 UTC	1628	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 27 6e 69 76 6f 3a 76 61 72 73 27 29 2e 73 74 6f 70 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 27 6e 69 76 6f 3a 76 61 72 73 27 29 2e 73 74 6f 70 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 63 65 28 27 53 74 61 72 74 20 53 6c 69 64 65 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 54 72 69 67 67 65 72 20 74 68 65 20 Data Ascii: this.start = function(){ if($(element).data('nivo:vars').stop){ $(element).data('nivo:vars').stop = false; trace('Start Slider'); } } //Trigger the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49727	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:13 UTC	572	OUT	GET /js/cufon-yui.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:14 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:14 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 18264 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:14 UTC	7883	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 53 69 6d 6f 20 4b 69 6e 6e 75 6e 65 6e 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 30 39 69 0d 0a 20 2a 2f 0d 0a 76 61 72 20 43 75 66 6f 6e 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 72 65 70 6c 61 63 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 78 3d 6d 2e 44 4f 4d 3d 7b 72 65 61 64 79 3a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 3d 66 61 6c 73 65 2c 45 3d 7b 6c 6f 61 64 65 64 3a 31 2c 63 6f 6d 70 6c 65 74 65 3a 31 7d 3b 76 61 72 Data Ascii: /* * Copyright (c) 2009 Simo Kinnunen. * Licensed under the MIT license. * * @version 1.09i */var Cufon=(function(){var m=function(){return m.replace.apply(null,arguments)};var x=m.DOM={ready:(function(){var C=false,E={loaded:1,complete:1};var
2024-10-24 22:45:14 UTC	8000	IN	Data Raw: 66 6f 72 28 76 61 72 20 45 3d 30 2c 44 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 42 3d 61 72 67 75 6d 65 6e 74 73 5b 45 5d 2c 45 3c 44 3b 2b 2b 45 29 7b 66 6f 72 28 46 20 69 6e 20 42 29 7b 69 66 28 6b 28 42 2c 46 29 29 7b 43 5b 46 5d 3d 42 5b 46 5d 7d 7d 7d 72 65 74 75 72 6e 20 43 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 45 2c 4d 2c 43 2c 4e 2c 46 2c 44 29 7b 76 61 72 20 4b 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 48 3b 69 66 28 4d 3d 3d 3d 22 22 29 7b 72 65 74 75 72 6e 20 4b 7d 76 61 72 20 4c 3d 4e 2e 73 65 70 61 72 61 74 65 3b 76 61 72 20 49 3d 4d 2e 73 70 6c 69 74 28 70 5b 4c 5d 29 2c 42 3d 28 4c 3d 3d 22 77 6f 72 64 73 22 29 3b 69 66 28 42 26 26 74 29 7b 69 66 28 2f 5e 5c 73 2f 2e Data Ascii: for(var E=0,D=arguments.length;B=arguments[E],E<D;++E){for(F in B){if(k(B,F)){C[F]=B[F]}}}return C}function o(E,M,C,N,F,D){var K=document.createDocumentFragment(),H;if(M===""){return K}var L=N.separate;var I=M.split(p[L]),B=(L=="words");if(B&&t){if(/^\s/.
2024-10-24 22:45:14 UTC	2381	IN	Data Raw: 5d 2c 6e 2b 3d 7e 7e 6c 5b 34 5d 2c 6d 2b 3d 7e 7e 6c 5b 35 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 6c 69 6e 65 54 6f 22 2c 61 3a 5b 6e 2b 3d 7e 7e 6c 5b 30 5d 2c 6d 2b 3d 7e 7e 6c 5b 31 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 6d 6f 76 65 54 6f 22 2c 61 3a 5b 6e 3d 7e 7e 6c 5b 30 5d 2c 6d 3d 7e 7e 6c 5b 31 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 63 6c 6f 73 65 50 61 74 68 22 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 22 3a 62 72 65 61 6b 20 67 65 6e 65 72 61 74 65 7d 68 5b 67 5b 6a 5d 2e 6d 5d 2e 61 70 70 6c 79 28 68 2c 67 5b 6a 5d 2e 61 29 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6d 2c 6b 29 7b 66 6f 72 28 76 61 Data Ascii: ],n+=~~l[4],m+=~~l[5]]};break;case"r":g[j]={m:"lineTo",a:[n+=~~l[0],m+=~~l[1]]};break;case"m":g[j]={m:"moveTo",a:[n=~~l[0],m=~~l[1]]};break;case"x":g[j]={m:"closePath"};break;case"e":break generate}h[g[j].m].apply(h,g[j].a)}return g}function c(m,k){for(va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:45:15 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237628 Date: Thu, 24 Oct 2024 22:45:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 22:45:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:14 UTC	581	OUT	GET /js/TitilliumText.font.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 167674 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7882	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6d 6f 76 65 64 20 75 6e 64 65 72 20 61 6e 79 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 3a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 31 30 20 62 79 20 41 63 63 61 64 65 6d 69 61 20 64 69 20 42 65 6c 6c 65 20 41 72 74 69 20 64 69 20 55 72 62 69 6e 6f 20 61 6e 64 20 6f 74 68 65 72 73 2e 20 41 6c 6c 0d 0a 20 2a 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 46 75 6c 6c 20 6e 61 6d 65 3a 0d 0a 20 2a 20 54 69 74 69 6c 6c 69 75 6d 54 65 78 74 32 35 4c 2d 32 35 30 77 74 0d 0a 20 2a Data Ascii: /! The following copyright notice may not be removed under any circumstances. * * Copyright: * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All * rights reserved. * * Full name: * TitilliumText25L-250wt *
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 31 33 35 2c 31 37 2c 32 30 36 2c 31 37 76 31 30 34 2c 30 2c 31 35 37 2c 2d 34 31 2c 31 35 37 2c 2d 31 34 38 76 30 2c 2d 38 37 2c 2d 34 35 2c 2d 31 30 38 2c 2d 31 36 31 2c 2d 31 33 30 76 2d 31 34 31 2c 2d 32 36 2c 2d 32 31 36 2c 2d 35 37 2c 2d 32 31 36 2c 2d 31 39 37 76 30 2c 2d 31 33 30 2c 38 36 2c 2d 31 38 33 2c 32 32 34 2c 2d 31 38 33 76 37 37 2c 30 2c 32 30 31 2c 31 39 2c 32 30 31 2c 31 39 22 2c 22 77 22 3a 35 33 34 7d 2c 22 54 22 3a 7b 22 64 22 3a 22 2d 33 2c 2d 36 33 39 72 30 2c 2d 35 38 72 35 30 30 2c 30 72 30 2c 35 38 72 2d 32 31 38 2c 30 72 30 2c 36 33 39 72 2d 36 31 2c 30 72 30 2c 2d 36 33 39 72 2d 32 32 31 2c 30 22 2c 22 77 22 3a 34 39 35 7d 2c 22 56 22 3a 7b 22 64 22 3a 22 34 39 33 2c 2d 36 39 37 72 36 33 2c 30 72 2d 31 38 35 2c 36 39 37 72 2d Data Ascii: 135,17,206,17v104,0,157,-41,157,-148v0,-87,-45,-108,-161,-130v-141,-26,-216,-57,-216,-197v0,-130,86,-183,224,-183v77,0,201,19,201,19","w":534},"T":{"d":"-3,-639r0,-58r500,0r0,58r-218,0r0,639r-61,0r0,-639r-221,0","w":495},"V":{"d":"493,-697r63,0r-185,697r-
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 33 76 30 2c 30 2c 31 31 37 2c 2d 31 39 2c 31 39 35 2c 2d 31 39 76 31 30 34 2c 30 2c 31 35 34 2c 35 30 2c 31 35 34 2c 31 36 30 78 6d 33 36 33 2c 2d 32 35 34 72 2d 31 36 32 2c 31 35 76 2d 36 38 2c 36 2c 2d 39 33 2c 34 32 2c 2d 39 33 2c 39 37 76 30 2c 36 34 2c 32 39 2c 39 39 2c 37 38 2c 39 39 76 38 35 2c 30 2c 31 37 37 2c 2d 33 34 2c 31 37 37 2c 2d 33 34 72 30 2c 2d 31 37 37 78 6d 31 32 35 2c 2d 36 33 30 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 78 6d 33 32 31 2c 2d 36 33 30 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 22 2c 22 77 22 3a 35 32 32 7d 2c 22 5c 75 30 30 65 33 22 3a 7b 22 64 22 3a 22 34 32 33 2c 2d 33 34 39 72 30 2c 32 36 31 76 32 2c 33 31 2c 33 31 2c 34 31 2c 36 34 2c 34 35 72 2d 33 2c 35 32 76 2d 35 Data Ascii: 3v0,0,117,-19,195,-19v104,0,154,50,154,160xm363,-254r-162,15v-68,6,-93,42,-93,97v0,64,29,99,78,99v85,0,177,-34,177,-34r0,-177xm125,-630r0,-79r58,0r0,79r-58,0xm321,-630r0,-79r58,0r0,79r-58,0","w":522},"\u00e3":{"d":"423,-349r0,261v2,31,31,41,64,45r-3,52v-5
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 2c 30 78 6d 31 39 33 2c 2d 38 32 37 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 63 65 22 3a 7b 22 64 22 3a 22 38 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 39 37 72 2d 36 31 2c 30 78 6d 2d 34 30 2c 2d 38 30 33 72 31 33 34 2c 2d 31 33 31 72 35 33 2c 30 72 31 33 33 2c 31 33 31 72 2d 37 31 2c 30 72 2d 38 38 2c 2d 38 33 72 2d 38 38 2c 38 33 72 2d 37 33 2c 30 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 63 64 22 3a 7b 22 64 22 3a 22 38 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 39 37 72 2d 36 31 2c 30 78 6d 31 34 2c 2d 38 33 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 64 32 22 3a 7b 22 64 Data Ascii: ,0xm193,-827r0,-79r58,0r0,79r-58,0","w":239},"\u00ce":{"d":"89,0r0,-697r61,0r0,697r-61,0xm-40,-803r134,-131r53,0r133,131r-71,0r-88,-83r-88,83r-73,0","w":239},"\u00cd":{"d":"89,0r0,-697r61,0r0,697r-61,0xm14,-838r208,-95r23,55r-210,89","w":239},"\u00d2":{"d
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 72 2d 31 39 32 2c 30 72 30 2c 32 36 39 76 31 36 32 2c 2d 37 2c 33 35 30 2c 34 35 2c 33 35 30 2c 2d 31 34 31 76 30 2c 2d 31 32 31 2c 2d 31 30 36 2c 2d 31 32 38 2c 2d 31 35 38 2c 2d 31 32 38 78 6d 33 33 39 2c 2d 36 34 30 72 2d 31 38 33 2c 30 72 30 2c 32 35 38 72 31 39 32 2c 30 76 39 35 2c 30 2c 31 33 34 2c 2d 34 38 2c 31 33 34 2c 2d 31 33 38 76 30 2c 2d 38 36 2c 2d 34 36 2c 2d 31 32 30 2c 2d 31 34 33 2c 2d 31 32 30 22 2c 22 77 22 3a 36 32 31 7d 2c 22 44 22 3a 7b 22 64 22 3a 22 33 34 36 2c 30 72 2d 32 35 31 2c 30 72 30 2c 2d 36 39 37 72 32 35 31 2c 30 76 31 39 32 2c 30 2c 32 34 38 2c 31 34 39 2c 32 34 38 2c 33 33 38 76 30 2c 31 39 30 2c 2d 35 35 2c 33 35 39 2c 2d 32 34 38 2c 33 35 39 78 6d 35 33 30 2c 2d 33 35 39 76 30 2c 2d 31 34 38 2c 2d 33 38 2c 2d 32 38 Data Ascii: r-192,0r0,269v162,-7,350,45,350,-141v0,-121,-106,-128,-158,-128xm339,-640r-183,0r0,258r192,0v95,0,134,-48,134,-138v0,-86,-46,-120,-143,-120","w":621},"D":{"d":"346,0r-251,0r0,-697r251,0v192,0,248,149,248,338v0,190,-55,359,-248,359xm530,-359v0,-148,-38,-28
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 33 72 2d 31 37 35 2c 30 72 30 2c 33 30 36 72 31 36 32 2c 30 72 37 38 2c 2d 31 36 72 31 31 2c 35 32 72 2d 38 32 2c 31 38 72 2d 33 31 36 2c 30 72 30 2c 2d 35 34 72 38 38 2c 30 72 30 2c 2d 33 30 36 72 2d 36 38 2c 30 72 30 2c 2d 35 33 72 36 38 2c 30 72 30 2c 2d 36 34 76 30 2c 2d 31 36 36 2c 34 39 2c 2d 32 30 33 2c 31 34 38 2c 2d 32 30 33 76 34 33 2c 30 2c 31 32 33 2c 31 33 2c 31 32 33 2c 31 33 22 7d 2c 22 5c 75 30 30 62 36 22 3a 7b 22 64 22 3a 22 33 38 36 2c 30 72 30 2c 2d 36 34 39 72 2d 31 33 30 2c 30 72 30 2c 36 34 39 72 2d 35 35 2c 30 72 30 2c 2d 33 33 39 76 2d 31 31 32 2c 33 2c 2d 31 39 33 2c 2d 37 30 2c 2d 31 39 33 2c 2d 31 37 39 76 30 2c 2d 31 30 38 2c 38 31 2c 2d 31 38 32 2c 31 38 36 2c 2d 31 38 32 72 33 32 39 2c 30 72 30 2c 35 31 72 2d 38 32 2c 30 72 Data Ascii: 3r-175,0r0,306r162,0r78,-16r11,52r-82,18r-316,0r0,-54r88,0r0,-306r-68,0r0,-53r68,0r0,-64v0,-166,49,-203,148,-203v43,0,123,13,123,13"},"\u00b6":{"d":"386,0r0,-649r-130,0r0,649r-55,0r0,-339v-112,3,-193,-70,-193,-179v0,-108,81,-182,186,-182r329,0r0,51r-82,0r
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 32 2c 2d 31 37 30 72 2d 31 35 34 2c 33 37 37 76 31 37 2c 34 2c 33 37 2c 36 2c 36 30 2c 36 78 6d 31 34 38 2c 2d 36 34 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 35 32 37 7d 2c 22 5c 75 30 30 61 31 22 3a 7b 22 64 22 3a 22 33 30 34 2c 2d 34 39 39 72 30 2c 31 30 31 72 2d 36 36 2c 30 72 30 2c 2d 31 30 31 72 36 36 2c 30 78 6d 33 30 31 2c 2d 32 37 34 72 32 2c 34 37 34 72 2d 36 34 2c 30 72 32 2c 2d 34 37 34 72 36 30 2c 30 22 7d 2c 22 5c 75 32 30 31 61 22 3a 7b 22 64 22 3a 22 31 33 38 2c 2d 31 31 35 72 2d 34 32 2c 32 31 31 72 2d 36 33 2c 30 72 35 31 2c 2d 32 31 31 72 35 34 2c 30 22 2c 22 77 22 3a 31 38 33 7d 2c 22 5c 75 30 33 30 30 22 3a 7b 22 64 22 3a 22 33 38 2c 2d 37 34 33 72 32 30 38 2c 39 35 72 2d 32 30 2c 34 37 72 Data Ascii: 2,-170r-154,377v17,4,37,6,60,6xm148,-648r208,-95r23,55r-210,89","w":527},"\u00a1":{"d":"304,-499r0,101r-66,0r0,-101r66,0xm301,-274r2,474r-64,0r2,-474r60,0"},"\u201a":{"d":"138,-115r-42,211r-63,0r51,-211r54,0","w":183},"\u0300":{"d":"38,-743r208,95r-20,47r
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 30 72 2d 35 31 2c 30 22 2c 22 77 22 3a 35 39 36 7d 2c 22 5c 75 30 31 33 39 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 33 38 72 33 31 38 2c 30 72 30 2c 35 39 78 6d 31 34 35 2c 2d 38 33 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 35 31 39 7d 2c 22 5c 75 30 31 33 64 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 33 38 72 33 31 38 2c 30 72 30 2c 35 39 78 6d 34 34 31 2c 2d 36 39 37 72 30 2c 32 32 37 72 2d 35 38 2c 30 72 30 2c 2d 32 32 37 72 35 38 2c 30 22 2c 22 77 22 3a 35 31 39 7d 2c 22 5c 75 30 31 33 62 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 Data Ascii: 0r-51,0","w":596},"\u0139":{"d":"474,0r-379,0r0,-697r61,0r0,638r318,0r0,59xm145,-838r208,-95r23,55r-210,89","w":519},"\u013d":{"d":"474,0r-379,0r0,-697r61,0r0,638r318,0r0,59xm441,-697r0,227r-58,0r0,-227r58,0","w":519},"\u013b":{"d":"474,0r-379,0r0,-697r61
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 2d 31 34 38 2c 2d 39 36 2c 2d 31 34 38 76 2d 37 33 2c 30 2c 2d 31 39 30 2c 31 35 2c 2d 31 39 30 2c 31 35 72 2d 34 2c 2d 35 33 76 30 2c 30 2c 31 31 38 2c 2d 31 39 2c 31 39 36 2c 2d 31 39 76 31 30 34 2c 30 2c 31 35 33 2c 35 30 2c 31 35 33 2c 31 36 30 78 6d 33 36 38 2c 2d 32 35 34 72 2d 31 36 33 2c 31 35 76 2d 36 37 2c 36 2c 2d 39 32 2c 34 32 2c 2d 39 32 2c 39 37 76 30 2c 36 34 2c 32 39 2c 39 39 2c 37 38 2c 39 39 76 38 35 2c 30 2c 31 37 37 2c 2d 33 34 2c 31 37 37 2c 2d 33 34 72 30 2c 2d 31 37 37 78 6d 31 31 36 2c 2d 36 33 37 72 30 2c 2d 35 33 72 32 38 32 2c 30 72 30 2c 35 33 72 2d 32 38 32 2c 30 22 2c 22 77 22 3a 35 32 30 7d 2c 22 5c 75 30 31 30 33 22 3a 7b 22 64 22 3a 22 34 32 37 2c 2d 33 34 39 72 30 2c 32 36 31 76 33 2c 33 31 2c 33 32 2c 34 31 2c 36 35 2c Data Ascii: -148,-96,-148v-73,0,-190,15,-190,15r-4,-53v0,0,118,-19,196,-19v104,0,153,50,153,160xm368,-254r-163,15v-67,6,-92,42,-92,97v0,64,29,99,78,99v85,0,177,-34,177,-34r0,-177xm116,-637r0,-53r282,0r0,53r-282,0","w":520},"\u0103":{"d":"427,-349r0,261v3,31,32,41,65,
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 39 35 76 2d 37 35 2c 30 2c 2d 31 35 35 2c 33 33 2c 2d 31 35 35 2c 33 33 72 30 2c 34 32 31 78 6d 31 33 34 2c 2d 37 38 30 72 31 32 34 2c 2d 31 34 32 72 34 38 2c 30 72 31 32 34 2c 31 34 32 72 2d 36 38 2c 30 72 2d 37 39 2c 2d 39 30 72 2d 38 31 2c 39 30 72 2d 36 38 2c 30 22 2c 22 77 22 3a 35 36 35 7d 2c 22 5c 75 30 31 32 37 22 3a 7b 22 64 22 3a 22 32 37 2c 2d 35 39 32 72 30 2c 2d 35 33 72 36 35 2c 30 72 30 2c 2d 37 37 72 36 30 2c 30 72 30 2c 37 37 72 31 35 37 2c 30 72 30 2c 35 33 72 2d 31 35 37 2c 30 72 30 2c 31 31 38 76 30 2c 30 2c 38 35 2c 2d 33 35 2c 31 36 32 2c 2d 33 35 76 31 33 37 2c 30 2c 31 36 37 2c 36 33 2c 31 36 37 2c 32 34 39 72 30 2c 32 36 30 72 2d 36 30 2c 30 72 30 2c 2d 32 35 39 76 30 2c 2d 31 34 36 2c 2d 31 36 2c 2d 31 39 35 2c 2d 31 31 34 2c 2d Data Ascii: 95v-75,0,-155,33,-155,33r0,421xm134,-780r124,-142r48,0r124,142r-68,0r-79,-90r-81,90r-68,0","w":565},"\u0127":{"d":"27,-592r0,-53r65,0r0,-77r60,0r0,77r157,0r0,53r-157,0r0,118v0,0,85,-35,162,-35v137,0,167,63,167,249r0,260r-60,0r0,-259v0,-146,-16,-195,-114,-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:14 UTC	573	OUT	GET /js/Kaffeesatz.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 65916 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7883	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6d 6f 76 65 64 20 75 6e 64 65 72 20 61 6e 79 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 3a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2c 20 59 61 6e 6f 6e 65 20 28 68 74 74 70 3a 2f 2f 79 61 6e 6f 6e 65 2e 64 65 2f 74 79 70 65 64 65 73 69 67 6e 2f 29 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 54 68 69 73 20 46 6f 6e 74 20 53 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 49 4c 20 4f 70 65 6e 20 46 6f 6e 74 20 4c 69 63 65 6e 73 65 2c 20 Data Ascii: /! The following copyright notice may not be removed under any circumstances. * * Copyright: * Copyright (c) 2010, Yanone (http://yanone.de/typedesign/). All rights reserved. * This Font Software is licensed under the SIL Open Font License,
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 38 2c 2d 33 35 2c 34 38 2c 2d 35 35 76 30 2c 2d 33 33 2c 2d 35 37 2c 2d 32 34 2c 2d 37 35 2c 2d 31 30 76 2d 31 34 2c 2d 33 36 2c 36 2c 2d 34 31 2c 35 38 2c 2d 34 31 76 37 39 2c 30 2c 35 30 2c 38 38 2c 31 31 2c 31 30 38 22 2c 22 6b 22 3a 7b 22 5c 22 22 3a 31 30 2c 22 5f 22 3a 31 30 2c 22 5c 2f 22 3a 2d 32 2c 22 27 22 3a 31 30 7d 7d 2c 22 34 22 3a 7b 22 64 22 3a 22 31 30 2c 2d 37 33 76 35 2c 2d 32 30 2c 34 36 2c 2d 31 33 33 2c 38 38 2c 2d 31 34 35 76 37 2c 30 2c 31 33 2c 32 2c 31 37 2c 34 72 2d 31 2c 31 34 30 76 32 33 2c 33 2c 32 37 2c 2d 31 31 2c 32 38 2c 39 76 31 2c 31 38 2c 2d 31 31 2c 32 30 2c 2d 32 38 2c 31 38 76 2d 37 2c 32 37 2c 32 31 2c 35 34 2c 2d 32 39 2c 34 37 72 30 2c 2d 34 37 72 2d 36 36 2c 30 76 2d 38 2c 2d 37 2c 2d 39 2c 2d 31 38 2c 2d 39 2c Data Ascii: 8,-35,48,-55v0,-33,-57,-24,-75,-10v-14,-36,6,-41,58,-41v79,0,50,88,11,108","k":{"\"":10,"_":10,"\/":-2,"'":10}},"4":{"d":"10,-73v5,-20,46,-133,88,-145v7,0,13,2,17,4r-1,140v23,3,27,-11,28,9v1,18,-11,20,-28,18v-7,27,21,54,-29,47r0,-47r-66,0v-8,-7,-9,-18,-9,
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 2c 22 5c 22 22 3a 34 2c 22 5c 75 30 30 64 63 22 3a 33 2c 22 5c 75 30 30 64 36 22 3a 33 2c 22 5c 75 30 30 63 34 22 3a 33 2c 22 5f 22 3a 2d 39 2c 22 2c 22 3a 31 31 2c 22 27 22 3a 34 7d 7d 2c 22 52 22 3a 7b 22 64 22 3a 22 31 35 2c 30 72 30 2c 2d 32 34 36 76 33 2c 2d 31 30 2c 32 39 2c 2d 35 2c 34 32 2c 2d 36 76 34 35 2c 30 2c 36 36 2c 32 31 2c 36 36 2c 37 31 76 30 2c 33 39 2c 2d 31 32 2c 36 31 2c 2d 33 31 2c 37 31 76 31 31 2c 31 35 2c 33 30 2c 34 37 2c 33 34 2c 31 30 34 76 32 2c 31 30 2c 2d 32 31 2c 36 2c 2d 33 32 2c 36 76 2d 34 2c 2d 36 31 2c 2d 32 31 2c 2d 39 31 2c 2d 33 30 2c 2d 31 30 33 72 2d 31 39 2c 31 72 30 2c 39 36 76 30 2c 36 2c 2d 31 2c 36 2c 2d 33 30 2c 36 78 6d 39 31 2c 2d 31 38 32 76 31 2c 2d 33 35 2c 2d 31 32 2c 2d 34 38 2c 2d 34 36 2c 2d 34 34 Data Ascii: ,"\"":4,"\u00dc":3,"\u00d6":3,"\u00c4":3,"_":-9,",":11,"'":4}},"R":{"d":"15,0r0,-246v3,-10,29,-5,42,-6v45,0,66,21,66,71v0,39,-12,61,-31,71v11,15,30,47,34,104v2,10,-21,6,-32,6v-4,-61,-21,-91,-30,-103r-19,1r0,96v0,6,-1,6,-30,6xm91,-182v1,-35,-12,-48,-46,-44
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 36 2c 2d 32 39 2c 36 72 30 2c 2d 32 35 31 76 30 2c 2d 31 33 2c 36 2c 2d 31 34 2c 32 39 2c 2d 31 34 22 2c 22 77 22 3a 36 32 7d 2c 22 6d 22 3a 7b 22 64 22 3a 22 38 38 2c 30 72 30 2c 2d 31 34 30 76 33 2c 2d 32 34 2c 2d 32 37 2c 2d 32 30 2c 2d 34 32 2c 2d 31 32 72 30 2c 31 34 36 76 30 2c 36 2c 2d 31 2c 36 2c 2d 32 39 2c 36 72 30 2c 2d 31 37 32 76 32 34 2c 2d 31 31 2c 36 38 2c 2d 32 30 2c 38 36 2c 30 76 33 34 2c 2d 32 31 2c 39 37 2c 2d 31 37 2c 38 35 2c 33 39 72 30 2c 31 32 37 76 30 2c 36 2c 2d 31 2c 36 2c 2d 32 39 2c 36 72 30 2c 2d 31 33 33 76 33 2c 2d 33 30 2c 2d 32 34 2c 2d 32 39 2c 2d 34 32 2c 2d 31 38 72 30 2c 31 34 35 76 30 2c 36 2c 31 2c 36 2c 2d 32 39 2c 36 22 2c 22 77 22 3a 32 30 32 2c 22 6b 22 3a 7b 22 79 22 3a 32 2c 22 78 22 3a 31 2c 22 77 22 3a 31 Data Ascii: 6,-29,6r0,-251v0,-13,6,-14,29,-14","w":62},"m":{"d":"88,0r0,-140v3,-24,-27,-20,-42,-12r0,146v0,6,-1,6,-29,6r0,-172v24,-11,68,-20,86,0v34,-21,97,-17,85,39r0,127v0,6,-1,6,-29,6r0,-133v3,-30,-24,-29,-42,-18r0,145v0,6,1,6,-29,6","w":202,"k":{"y":2,"x":1,"w":1
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 75 30 30 66 36 22 3a 32 2c 22 5c 75 30 30 65 34 22 3a 32 2c 22 6b 22 3a 35 2c 22 5f 22 3a 31 36 2c 22 5c 2f 22 3a 2d 36 2c 22 2c 22 3a 37 2c 22 2a 22 3a 34 2c 22 27 22 3a 33 30 7d 7d 2c 22 5c 75 30 30 66 63 22 3a 7b 22 64 22 3a 22 31 32 33 2c 2d 31 38 30 72 30 2c 31 37 31 76 2d 31 34 2c 38 2c 2d 33 34 2c 31 33 2c 2d 35 33 2c 31 33 76 2d 38 35 2c 34 2c 2d 34 35 2c 2d 31 30 38 2c 2d 35 34 2c 2d 31 37 38 76 30 2c 2d 36 2c 30 2c 2d 36 2c 33 30 2c 2d 36 72 30 2c 31 32 36 76 2d 33 2c 33 35 2c 32 34 2c 33 38 2c 34 38 2c 32 36 72 30 2c 2d 31 34 36 76 30 2c 2d 36 2c 30 2c 2d 36 2c 32 39 2c 2d 36 78 6d 32 38 2c 2d 32 33 30 76 30 2c 2d 31 30 2c 37 2c 2d 31 38 2c 31 38 2c 2d 31 38 76 31 33 2c 30 2c 31 38 2c 37 2c 31 38 2c 31 38 76 30 2c 31 30 2c 2d 37 2c 31 38 2c 2d Data Ascii: u00f6":2,"\u00e4":2,"k":5,"_":16,"\/":-6,",":7,"*":4,"'":30}},"\u00fc":{"d":"123,-180r0,171v-14,8,-34,13,-53,13v-85,4,-45,-108,-54,-178v0,-6,0,-6,30,-6r0,126v-3,35,24,38,48,26r0,-146v0,-6,0,-6,29,-6xm28,-230v0,-10,7,-18,18,-18v13,0,18,7,18,18v0,10,-7,18,-
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 37 2c 22 57 22 3a 31 31 2c 22 59 22 3a 32 35 2c 22 64 22 3a 37 2c 22 66 22 3a 31 34 2c 22 74 22 3a 31 37 2c 22 75 22 3a 37 2c 22 76 22 3a 31 36 2c 22 77 22 3a 39 2c 22 79 22 3a 31 34 2c 22 65 22 3a 37 2c 22 6f 22 3a 37 2c 22 4f 22 3a 36 2c 22 55 22 3a 34 7d 7d 2c 22 5c 2f 22 3a 7b 22 64 22 3a 22 31 32 39 2c 2d 32 37 35 72 2d 38 31 2c 32 37 33 76 2d 33 2c 39 2c 2d 33 2c 39 2c 2d 34 34 2c 39 72 38 30 2c 2d 32 37 32 76 33 2c 2d 39 2c 34 2c 2d 31 30 2c 34 35 2c 2d 31 30 22 2c 22 77 22 3a 31 33 32 2c 22 6b 22 3a 7b 22 5c 75 30 30 64 66 22 3a 36 2c 22 5c 75 30 30 62 62 22 3a 31 34 2c 22 5c 75 30 30 61 62 22 3a 32 32 2c 22 7a 22 3a 31 31 2c 22 79 22 3a 39 2c 22 78 22 3a 31 37 2c 22 77 22 3a 38 2c 22 76 22 3a 38 2c 22 75 22 3a 31 34 2c 22 74 22 3a 36 2c 22 73 22 Data Ascii: 7,"W":11,"Y":25,"d":7,"f":14,"t":17,"u":7,"v":16,"w":9,"y":14,"e":7,"o":7,"O":6,"U":4}},"\/":{"d":"129,-275r-81,273v-3,9,-3,9,-44,9r80,-272v3,-9,4,-10,45,-10","w":132,"k":{"\u00df":6,"\u00bb":14,"\u00ab":22,"z":11,"y":9,"x":17,"w":8,"v":8,"u":14,"t":6,"s"
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 31 30 32 2c 2d 34 2c 2d 31 36 31 76 30 2c 2d 37 2c 30 2c 2d 37 2c 34 30 2c 2d 37 72 30 2c 32 34 35 76 2d 31 2c 31 33 2c 2d 32 36 2c 35 2c 2d 33 39 2c 37 22 2c 22 77 22 3a 31 35 34 7d 2c 22 4f 22 3a 7b 22 64 22 3a 22 37 2c 2d 31 32 37 76 30 2c 2d 39 38 2c 32 33 2c 2d 31 32 38 2c 36 39 2c 2d 31 32 38 76 34 37 2c 30 2c 36 34 2c 32 37 2c 36 34 2c 31 32 36 76 30 2c 31 30 31 2c 2d 32 31 2c 31 33 32 2c 2d 36 38 2c 31 33 32 76 2d 34 37 2c 30 2c 2d 36 35 2c 2d 32 33 2c 2d 36 35 2c 2d 31 33 30 78 6d 35 33 2c 2d 31 31 38 76 30 2c 35 36 2c 33 2c 37 39 2c 32 31 2c 37 39 76 31 38 2c 30 2c 32 32 2c 2d 32 34 2c 32 32 2c 2d 38 38 76 30 2c 2d 36 33 2c 2d 32 2c 2d 38 37 2c 2d 32 31 2c 2d 38 37 76 2d 31 37 2c 30 2c 2d 32 32 2c 32 35 2c 2d 32 32 2c 39 36 22 2c 22 77 22 3a 31 Data Ascii: 102,-4,-161v0,-7,0,-7,40,-7r0,245v-1,13,-26,5,-39,7","w":154},"O":{"d":"7,-127v0,-98,23,-128,69,-128v47,0,64,27,64,126v0,101,-21,132,-68,132v-47,0,-65,-23,-65,-130xm53,-118v0,56,3,79,21,79v18,0,22,-24,22,-88v0,-63,-2,-87,-21,-87v-17,0,-22,25,-22,96","w":1
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 72 30 2c 31 33 35 76 30 2c 37 2c 30 2c 37 2c 2d 34 30 2c 37 22 2c 22 77 22 3a 31 32 39 2c 22 6b 22 3a 7b 22 79 22 3a 34 2c 22 5c 22 22 3a 33 31 2c 22 5c 2f 22 3a 2d 38 2c 22 27 22 3a 33 31 2c 22 29 22 3a 37 2c 22 5d 22 3a 37 7d 7d 2c 22 69 22 3a 7b 22 64 22 3a 22 35 33 2c 2d 31 38 30 72 30 2c 31 37 33 76 30 2c 37 2c 30 2c 37 2c 2d 34 31 2c 37 72 30 2c 2d 31 36 32 76 30 2c 2d 31 38 2c 38 2c 2d 31 38 2c 34 31 2c 2d 31 38 78 6d 31 34 2c 2d 32 33 33 76 30 2c 2d 31 37 2c 37 2c 2d 32 38 2c 32 32 2c 2d 32 38 76 31 35 2c 30 2c 31 39 2c 38 2c 31 39 2c 32 37 76 30 2c 31 39 2c 2d 38 2c 33 31 2c 2d 32 32 2c 33 31 76 2d 31 32 2c 30 2c 2d 31 39 2c 2d 37 2c 2d 31 39 2c 2d 33 30 22 2c 22 77 22 3a 36 34 2c 22 6b 22 3a 7b 22 5c 2f 22 3a 2d 38 7d 7d 2c 22 6a 22 3a 7b 22 64 Data Ascii: r0,135v0,7,0,7,-40,7","w":129,"k":{"y":4,"\"":31,"\/":-8,"'":31,")":7,"]":7}},"i":{"d":"53,-180r0,173v0,7,0,7,-41,7r0,-162v0,-18,8,-18,41,-18xm14,-233v0,-17,7,-28,22,-28v15,0,19,8,19,27v0,19,-8,31,-22,31v-12,0,-19,-7,-19,-30","w":64,"k":{"\/":-8}},"j":{"d
2024-10-24 22:45:15 UTC	2033	IN	Data Raw: 2c 39 36 2c 2d 35 39 2c 39 36 76 2d 33 39 2c 30 2c 2d 35 37 2c 2d 31 33 2c 2d 35 37 2c 2d 39 34 78 6d 35 30 2c 2d 39 31 76 30 2c 35 36 2c 34 2c 36 31 2c 31 33 2c 36 31 76 37 2c 30 2c 31 34 2c 2d 36 2c 31 34 2c 2d 36 31 76 30 2c 2d 35 32 2c 2d 33 2c 2d 35 38 2c 2d 31 33 2c 2d 35 38 76 2d 38 2c 30 2c 2d 31 34 2c 37 2c 2d 31 34 2c 35 38 78 6d 31 37 2c 2d 32 32 36 76 30 2c 2d 31 32 2c 38 2c 2d 32 32 2c 32 32 2c 2d 32 32 76 31 37 2c 30 2c 32 32 2c 39 2c 32 32 2c 32 32 76 30 2c 31 32 2c 2d 38 2c 32 32 2c 2d 32 32 2c 32 32 76 2d 31 37 2c 30 2c 2d 32 32 2c 2d 38 2c 2d 32 32 2c 2d 32 32 78 6d 36 39 2c 2d 32 32 36 76 30 2c 2d 31 32 2c 38 2c 2d 32 32 2c 32 32 2c 2d 32 32 76 31 37 2c 30 2c 32 32 2c 39 2c 32 32 2c 32 32 76 30 2c 31 32 2c 2d 38 2c 32 32 2c 2d 32 32 2c Data Ascii: ,96,-59,96v-39,0,-57,-13,-57,-94xm50,-91v0,56,4,61,13,61v7,0,14,-6,14,-61v0,-52,-3,-58,-13,-58v-8,0,-14,7,-14,58xm17,-226v0,-12,8,-22,22,-22v17,0,22,9,22,22v0,12,-8,22,-22,22v-17,0,-22,-8,-22,-22xm69,-226v0,-12,8,-22,22,-22v17,0,22,9,22,22v0,12,-8,22,-22,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49731	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	576	OUT	GET /js/cufon-replace.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 841 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	841	IN	Data Raw: 2f 2f 43 75 66 6f 6e 20 52 65 70 6c 61 63 65 6d 65 6e 74 0d 0a 0d 0a 2f 2f 20 76 61 72 20 66 6f 6e 74 4e 61 6d 65 20 3d 20 27 54 69 74 69 6c 6c 69 75 6d 54 65 78 74 32 35 4c 27 3b 0d 0a 76 61 72 20 66 6f 6e 74 4e 61 6d 65 20 3d 20 27 59 61 6e 6f 6e 65 20 4b 61 66 66 65 65 73 61 74 7a 27 3b 0d 0a 0d 0a 43 75 66 6f 6e 28 27 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 31 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 33 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 34 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 35 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 36 2c 2e 63 6f 6d 6d 65 6e 74 2d 68 65 61 64 69 6e 67 20 61 27 2c 20 7b 0d 0a 66 6f 6e 74 46 61 6d 69 6c 79 3a 20 66 6f 6e 74 4e 61 6d 65 2c Data Ascii: //Cufon Replacement// var fontName = 'TitilliumText25L';var fontName = 'Yanone Kaffeesatz';Cufon('#body-content h1,#body-content h2,#body-content h3,#body-content h4,#body-content h5,#body-content h6,.comment-heading a', {fontFamily: fontName,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49732	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	570	OUT	GET /js/scripts.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 103058 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7882	IN	Data Raw: 2f 2a 2a 0d 0a 2a 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 72 36 20 2f 2f 20 32 30 31 31 2e 30 32 2e 32 36 20 2f 2f 20 6a 51 75 65 72 79 20 31 2e 35 2e 31 2b 0d 0a 2a 20 3c 68 74 74 70 3a 2f 2f 63 68 65 72 6e 65 2e 6e 65 74 2f 62 72 69 61 6e 2f 72 65 73 6f 75 72 63 65 73 2f 6a 71 75 65 72 79 2e 68 6f 76 65 72 49 6e 74 65 6e 74 2e 68 74 6d 6c 3e 0d 0a 2a 20 0d 0a 2a 20 40 70 61 72 61 6d 20 20 66 20 20 6f 6e 4d 6f 75 73 65 4f 76 65 72 20 66 75 6e 63 74 69 6f 6e 20 7c 7c 20 41 6e 20 6f 62 6a 65 63 74 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 0d 0a 2a 20 40 70 61 72 61 6d 20 20 67 20 20 6f 6e 4d 6f 75 73 65 4f 75 74 20 66 75 6e 63 74 69 6f 6e 20 20 7c 7c 20 4e 6f 74 68 69 6e 67 20 28 75 73 65 20 63 6f 6e 66 69 67 75 72 61 Data Ascii: /*** hoverIntent r6 // 2011.02.26 // jQuery 1.5.1+* <http://cherne.net/brian/resources/jquery.hoverIntent.html>* * @param f onMouseOver function \|\| An object with configuration options* @param g onMouseOut function \|\| Nothing (use configura
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 62 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 63 2a 28 37 2e 35 36 32 35 2a 28 74 2d 3d 28 32 2e 36 32 35 2f 32 2e 37 35 29 29 2a 74 20 2b 20 2e 39 38 34 33 37 35 29 20 2b 20 62 3b 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 09 65 61 73 65 49 6e 4f 75 74 42 6f 75 6e 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 78 2c 20 74 2c 20 62 2c 20 63 2c 20 64 29 20 7b 0d 0a 09 09 69 66 20 28 74 20 3c 20 64 2f 32 29 20 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 65 61 73 65 49 6e 42 6f 75 6e 63 65 20 28 78 2c 20 74 2a 32 2c 20 30 2c 20 63 2c 20 64 29 20 2a 20 2e 35 20 2b 20 62 3b 0d 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 65 61 73 65 4f 75 74 42 6f 75 6e 63 65 20 28 78 2c 20 74 2a 32 2d 64 2c 20 Data Ascii: b;} else {return c(7.5625(t-=(2.625/2.75))t + .984375) + b;}},easeInOutBounce: function (x, t, b, c, d) {if (t < d/2) return jQuery.easing.easeInBounce (x, t2, 0, c, d) * .5 + b;return jQuery.easing.easeOutBounce (x, t*2-d,
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 27 74 69 74 6c 65 27 29 29 3b 69 66 28 70 70 5f 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3e 33 30 29 73 65 74 74 69 6e 67 73 2e 6f 76 65 72 6c 61 79 5f 67 61 6c 6c 65 72 79 3d 66 61 6c 73 65 3b 73 65 74 5f 70 6f 73 69 74 69 6f 6e 3d 6a 51 75 65 72 79 2e 69 6e 41 72 72 61 79 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 68 72 65 66 27 29 2c 70 70 5f 69 6d 61 67 65 73 29 3b 72 65 6c 5f 69 6e 64 65 78 3d 28 69 73 53 65 74 29 3f 73 65 74 5f 70 6f 73 69 74 69 6f 6e 3a 24 28 22 61 5b 72 65 6c 5e 3d 27 22 2b 74 68 65 52 65 6c 2b 22 27 5d 22 29 2e 69 6e 64 65 78 28 24 28 74 68 69 73 29 29 3b 5f 62 75 69 6c 64 5f 6f 76 65 72 6c 61 79 28 74 68 69 73 29 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 61 6c 6c 6f 77 5f 72 65 73 69 7a 65 29 0d 0a 24 28 77 69 6e 64 6f 77 29 2e 62 Data Ascii: 'title'));if(pp_images.length>30)settings.overlay_gallery=false;set_position=jQuery.inArray($(this).attr('href'),pp_images);rel_index=(isSet)?set_position:$("a[rel^='"+theRel+"']").index($(this));_build_overlay(this);if(settings.allow_resize)$(window).b
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 65 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 70 70 5f 70 69 63 5f 68 6f 6c 64 65 72 2e 66 69 6e 64 28 27 2e 70 70 5f 70 61 75 73 65 27 29 2e 75 6e 62 69 6e 64 28 27 63 6c 69 63 6b 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 70 70 5f 70 61 75 73 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 70 70 5f 70 6c 61 79 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 73 74 61 72 74 53 6c 69 64 65 73 68 6f 77 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 29 3b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 70 70 5f 73 6c 69 64 65 73 68 6f 77 29 3b 70 70 5f 73 6c 69 64 65 73 68 6f 77 3d 75 6e 64 65 66 69 6e 65 64 3b 7d 0d 0a 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f Data Ascii: eshow=function(){$pp_pic_holder.find('.pp_pause').unbind('click').removeClass('pp_pause').addClass('pp_play').click(function(){$.prettyPhoto.startSlideshow();return false;});clearInterval(pp_slideshow);pp_slideshow=undefined;}$.prettyPhoto.close=functio
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 73 27 29 2e 61 66 74 65 72 28 74 6f 49 6e 6a 65 63 74 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 3d 24 28 27 2e 70 70 5f 70 69 63 5f 68 6f 6c 64 65 72 20 2e 70 70 5f 67 61 6c 6c 65 72 79 27 29 2c 24 70 70 5f 67 61 6c 6c 65 72 79 5f 6c 69 3d 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e 64 28 27 6c 69 27 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e 64 28 27 2e 70 70 5f 61 72 72 6f 77 5f 6e 65 78 74 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 63 68 61 6e 67 65 47 61 6c 6c 65 72 79 50 61 67 65 28 27 6e 65 78 74 27 29 3b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 73 74 6f 70 53 6c 69 64 65 73 68 6f 77 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e Data Ascii: s').after(toInject);$pp_gallery=$('.pp_pic_holder .pp_gallery'),$pp_gallery_li=$pp_gallery.find('li');$pp_gallery.find('.pp_arrow_next').click(function(){$.prettyPhoto.changeGalleryPage('next');$.prettyPhoto.stopSlideshow();return false;});$pp_gallery.fin
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 27 29 29 20 7c 7c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 4f 66 66 73 65 74 2e 74 6f 70 20 2d 3d 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 74 6f 70 27 29 29 20 7c 7c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 4f 66 66 73 65 74 2e 6c 65 66 74 20 2d 3d 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 29 29 20 7c 7c Data Ascii: (parseFloat($correctionParent.css('border-left-width')) \|\| 0); correctionOffset.top -= (parseFloat($correctionParent.css('margin-top')) \|\| 0); correctionOffset.left -= (parseFloat($correctionParent.css('margin-left')) \|\|
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 28 27 5b 27 20 2b 20 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 20 2b 20 27 3d 27 20 2b 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 29 20 2b 20 27 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 45 6c 65 6d 65 6e 74 20 3d 20 24 63 6f 6c 6c 65 63 74 69 6f 6e 2e 66 69 6c 74 65 72 28 27 5b 27 20 2b 20 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 20 2b 20 27 3d 27 20 2b 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 29 20 2b 20 27 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 Data Ascii: ('[' + options.attribute + '=' + $(this).attr(options.attribute) + ']'); destElement = $collection.filter('[' + options.attribute + '=' + $(this).attr(options.attribute) + ']'); } va
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 09 09 09 09 0d 0a 09 09 09 09 09 69 6d 70 6f 72 74 65 64 53 72 63 2e 70 75 73 68 28 69 53 72 63 29 3b 0d 0a 09 09 09 09 09 69 6d 70 6f 72 74 65 64 2e 70 75 73 68 28 73 68 65 65 74 73 5b 73 68 65 65 74 49 6e 64 65 78 5d 2e 69 6d 70 6f 72 74 73 5b 69 49 6d 70 6f 72 74 5d 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 0d 0a 09 09 09 09 0d 0a 09 09 09 7d 0d 0a 09 09 7d 2f 2f 6c 6f 6f 70 0d 0a 09 09 69 66 28 69 6d 70 6f 72 74 65 64 2e 6c 65 6e 67 74 68 29 7b 0d 0a 09 09 09 70 61 72 73 65 43 53 53 28 69 6d 70 6f 72 74 65 64 2c 20 69 6d 70 6f 72 74 65 64 53 72 63 29 3b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 64 6f 77 6e 6c 6f 61 64 73 20 3d 20 73 65 74 74 69 6e 67 73 2e 73 69 6d 75 6c 74 61 6e 65 6f 75 73 43 61 Data Ascii: importedSrc.push(iSrc);imported.push(sheets[sheetIndex].imports[iImport]);}}}//loopif(imported.length){parseCSS(imported, importedSrc);return false;}var downloads = settings.simultaneousCa
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 63 74 65 72 73 2e 22 29 2c 0d 0a 09 09 72 61 6e 67 65 6c 65 6e 67 74 68 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 62 65 74 77 65 65 6e 20 7b 30 7d 20 61 6e 64 20 7b 31 7d 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2e 22 29 2c 0d 0a 09 09 72 61 6e 67 65 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 62 65 74 77 65 65 6e 20 7b 30 7d 20 61 6e 64 20 7b 31 7d 2e 22 29 2c 0d 0a 09 09 6d 61 78 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 6c 65 73 73 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 7b 30 7d 2e 22 29 2c 0d 0a 09 09 6d 69 6e 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 Data Ascii: cters."),rangelength: $.format("Please enter a value between {0} and {1} characters long."),range: $.format("Please enter a value between {0} and {1}."),max: $.format("Please enter a value less than or equal to {0}."),min: $.format("Please
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 0a 09 09 2f 2f 20 72 65 74 75 72 6e 20 74 68 65 20 63 75 73 74 6f 6d 20 6d 65 73 73 61 67 65 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 65 6c 65 6d 65 6e 74 20 6e 61 6d 65 20 61 6e 64 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 65 74 68 6f 64 0d 0a 09 09 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6e 61 6d 65 2c 20 6d 65 74 68 6f 64 20 29 20 7b 0d 0a 09 09 09 76 61 72 20 6d 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 65 73 73 61 67 65 73 5b 6e 61 6d 65 5d 3b 0d 0a 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 28 6d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 20 53 74 72 69 6e 67 0d 0a 09 09 09 09 3f 20 6d 0d 0a 09 09 09 09 3a 20 6d 5b 6d 65 74 68 6f 64 5d 29 3b 0d 0a 09 09 7d 2c 0d 0a 09 09 0d 0a 09 09 2f 2f 20 72 65 Data Ascii: // return the custom message for the given element name and validation methodcustomMessage: function( name, method ) {var m = this.settings.messages[name];return m && (m.constructor == String? m: m[method]);},// re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	569	OUT	GET /js/custom.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 9585 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7884	IN	Data Raw: 2f 2a 4d 75 6c 74 69 6c 65 76 65 6c 20 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 0d 0a 2f 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 24 28 22 75 6c 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 24 28 74 68 69 73 29 2e 68 6f 76 65 72 49 6e 74 65 6e 74 28 7b 0d 0a 09 09 09 74 69 6d 65 6f 75 74 3a 20 33 30 30 2c 0d 0a 09 09 09 6f 76 65 72 Data Ascii: /Multilevel dropdown menu/ ====================================================================================/$(document).ready(function(){$("ul.simple-drop-down-menu li").each(function () {$(this).hoverIntent({timeout: 300,over
2024-10-24 22:45:15 UTC	1701	IN	Data Raw: 53 74 61 72 74 20 6f 6e 20 61 20 72 61 6e 64 6f 6d 20 73 6c 69 64 65 0d 0a 20 20 20 20 20 20 20 20 62 65 66 6f 72 65 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 62 65 66 6f 72 65 20 61 20 73 6c 69 64 65 20 74 72 61 6e 73 69 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 61 66 74 65 72 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 61 66 74 65 72 20 61 20 73 6c 69 64 65 20 74 72 61 6e 73 69 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 68 6f 77 45 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 61 66 74 65 72 20 61 6c 6c 20 73 6c 69 64 65 73 20 68 61 76 65 20 62 65 65 6e 20 73 68 6f 77 6e 0d 0a Data Ascii: Start on a random slide beforeChange: function(){}, // Triggers before a slide transition afterChange: function(){}, // Triggers after a slide transition slideshowEnd: function(){}, // Triggers after all slides have been shown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49735	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	407	OUT	GET /js/jquery.nivo.slider.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 25511 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7883	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4e 69 76 6f 20 53 6c 69 64 65 72 20 76 32 2e 36 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 6e 69 76 6f 2e 64 65 76 37 73 74 75 64 69 6f 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 47 69 6c 62 65 72 74 20 50 65 6c 6c 65 67 72 6f 6d 0d 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 61 6e 64 20 61 62 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0d 0a 20 2a 20 0d 0a 20 2a 20 4d 61 72 63 68 20 32 30 31 30 0d 0a 20 2a 2f 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a Data Ascii: /* * jQuery Nivo Slider v2.6 * http://nivo.dev7studios.com * * Copyright 2011, Gilbert Pellegrom * Free to use and abuse under the MIT license. * http://www.opensource.org/licenses/mit-license.php * * March 2010 */(function($) {
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 20 27 6e 65 78 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 46 6f 72 20 70 61 75 73 65 4f 6e 48 6f 76 65 72 20 73 65 74 74 69 6e 67 0d 0a 20 20 20 20 20 20 20 20 69 66 28 73 65 74 74 69 6e 67 73 2e 70 61 75 73 65 4f 6e 48 6f 76 65 72 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 72 2e 68 6f 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 73 2e 70 61 75 73 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 69 6d 65 72 29 3b 0d 0a 20 Data Ascii: 'next'); } }); } //For pauseOnHover setting if(settings.pauseOnHover){ slider.hover(function(){ vars.paused = true; clearInterval(timer);
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 28 7b 20 68 65 69 67 68 74 3a 27 31 30 30 25 27 2c 20 6f 70 61 63 69 74 79 3a 27 31 2e 30 27 20 7d 2c 20 73 65 74 74 69 6e 67 73 2e 61 6e 69 6d 53 70 65 65 64 2c 20 27 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 73 6c 69 64 65 72 2e 74 72 69 67 67 65 72 28 27 6e 69 76 6f 3a 61 6e 69 6d 46 69 6e 69 73 68 65 64 27 29 3b 20 7d 29 3b 0d 0a 09 09 09 09 09 09 7d 2c 20 28 31 30 30 20 2b 20 74 69 6d 65 42 75 66 66 29 29 3b 0d 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 09 09 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 09 09 09 09 09 73 6c 69 63 65 2e 61 6e 69 6d 61 74 65 28 7b 20 68 65 69 67 68 74 3a 27 31 30 30 25 27 2c 20 6f 70 61 63 69 74 79 3a 27 31 2e 30 27 20 7d 2c 20 73 65 74 74 69 6e 67 73 2e 61 6e 69 6d Data Ascii: ({ height:'100%', opacity:'1.0' }, settings.animSpeed, '', function(){ slider.trigger('nivo:animFinished'); });}, (100 + timeBuff));} else {setTimeout(function(){slice.animate({ height:'100%', opacity:'1.0' }, settings.anim
2024-10-24 22:45:15 UTC	1628	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 27 6e 69 76 6f 3a 76 61 72 73 27 29 2e 73 74 6f 70 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 27 6e 69 76 6f 3a 76 61 72 73 27 29 2e 73 74 6f 70 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 63 65 28 27 53 74 61 72 74 20 53 6c 69 64 65 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 54 72 69 67 67 65 72 20 74 68 65 20 Data Ascii: this.start = function(){ if($(element).data('nivo:vars').stop){ $(element).data('nivo:vars').stop = false; trace('Start Slider'); } } //Trigger the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49734	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	398	OUT	GET /js/cufon-yui.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 18264 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7883	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 53 69 6d 6f 20 4b 69 6e 6e 75 6e 65 6e 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 31 2e 30 39 69 0d 0a 20 2a 2f 0d 0a 76 61 72 20 43 75 66 6f 6e 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 72 65 70 6c 61 63 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 78 3d 6d 2e 44 4f 4d 3d 7b 72 65 61 64 79 3a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 3d 66 61 6c 73 65 2c 45 3d 7b 6c 6f 61 64 65 64 3a 31 2c 63 6f 6d 70 6c 65 74 65 3a 31 7d 3b 76 61 72 Data Ascii: /* * Copyright (c) 2009 Simo Kinnunen. * Licensed under the MIT license. * * @version 1.09i */var Cufon=(function(){var m=function(){return m.replace.apply(null,arguments)};var x=m.DOM={ready:(function(){var C=false,E={loaded:1,complete:1};var
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 66 6f 72 28 76 61 72 20 45 3d 30 2c 44 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 42 3d 61 72 67 75 6d 65 6e 74 73 5b 45 5d 2c 45 3c 44 3b 2b 2b 45 29 7b 66 6f 72 28 46 20 69 6e 20 42 29 7b 69 66 28 6b 28 42 2c 46 29 29 7b 43 5b 46 5d 3d 42 5b 46 5d 7d 7d 7d 72 65 74 75 72 6e 20 43 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 45 2c 4d 2c 43 2c 4e 2c 46 2c 44 29 7b 76 61 72 20 4b 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 48 3b 69 66 28 4d 3d 3d 3d 22 22 29 7b 72 65 74 75 72 6e 20 4b 7d 76 61 72 20 4c 3d 4e 2e 73 65 70 61 72 61 74 65 3b 76 61 72 20 49 3d 4d 2e 73 70 6c 69 74 28 70 5b 4c 5d 29 2c 42 3d 28 4c 3d 3d 22 77 6f 72 64 73 22 29 3b 69 66 28 42 26 26 74 29 7b 69 66 28 2f 5e 5c 73 2f 2e Data Ascii: for(var E=0,D=arguments.length;B=arguments[E],E<D;++E){for(F in B){if(k(B,F)){C[F]=B[F]}}}return C}function o(E,M,C,N,F,D){var K=document.createDocumentFragment(),H;if(M===""){return K}var L=N.separate;var I=M.split(p[L]),B=(L=="words");if(B&&t){if(/^\s/.
2024-10-24 22:45:15 UTC	2381	IN	Data Raw: 5d 2c 6e 2b 3d 7e 7e 6c 5b 34 5d 2c 6d 2b 3d 7e 7e 6c 5b 35 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 6c 69 6e 65 54 6f 22 2c 61 3a 5b 6e 2b 3d 7e 7e 6c 5b 30 5d 2c 6d 2b 3d 7e 7e 6c 5b 31 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 6d 6f 76 65 54 6f 22 2c 61 3a 5b 6e 3d 7e 7e 6c 5b 30 5d 2c 6d 3d 7e 7e 6c 5b 31 5d 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 22 3a 67 5b 6a 5d 3d 7b 6d 3a 22 63 6c 6f 73 65 50 61 74 68 22 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 65 22 3a 62 72 65 61 6b 20 67 65 6e 65 72 61 74 65 7d 68 5b 67 5b 6a 5d 2e 6d 5d 2e 61 70 70 6c 79 28 68 2c 67 5b 6a 5d 2e 61 29 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6d 2c 6b 29 7b 66 6f 72 28 76 61 Data Ascii: ],n+=~~l[4],m+=~~l[5]]};break;case"r":g[j]={m:"lineTo",a:[n+=~~l[0],m+=~~l[1]]};break;case"m":g[j]={m:"moveTo",a:[n=~~l[0],m=~~l[1]]};break;case"x":g[j]={m:"closePath"};break;case"e":break generate}h[g[j].m].apply(h,g[j].a)}return g}function c(m,k){for(va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49736	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	572	OUT	GET /js/shortcode.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 8621 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7884	IN	Data Raw: 2f 2a 4d 61 78 78 20 53 69 6d 70 6c 65 20 41 63 63 6f 72 64 69 6f 6e 3b 0d 0a 2f 2f 41 75 74 68 6f 72 20 4d 61 6e 68 0d 0a 2f 2f 45 6d 61 69 6c 3a 73 69 6e 63 65 2e 75 2e 6c 65 66 74 40 67 6d 61 69 6c 2e 63 6f 6d 0d 0a 2f 2f 44 61 74 65 20 43 72 65 61 74 65 64 3a 20 30 39 2f 31 31 2f 32 30 31 31 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0d 0a 7b 0d 0a 20 20 20 20 24 2e 66 6e 2e 6d 53 69 6d 70 6c 65 54 6f 67 67 6c 65 41 63 63 6f 72 64 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0d 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 46 69 72 73 74 3a 74 72 75 65 2c 20 2f 2a 73 68 6f 77 20 66 69 72 73 74 20 74 6f 67 67 6c 65 20 63 6f Data Ascii: /Maxx Simple Accordion;//Author Manh//Email:since.u.left@gmail.com//Date Created: 09/11/2011/(function($){ $.fn.mSimpleToggleAccordion = function(options){var defaults = { showFirst:true, /*show first toggle co
2024-10-24 22:45:15 UTC	737	IN	Data Raw: 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 7d 29 3b 0d 0a 09 0d 0a 09 24 28 22 2e 6d 61 78 78 2d 62 75 74 74 6f 6e 22 29 2e 6d 53 69 6d 70 6c 65 48 6f 76 65 72 46 61 64 65 28 29 3b 0d 0a 09 0d 0a 09 24 28 22 2e 69 63 6f 6e 2d 62 6f 78 65 73 2d 77 72 61 70 70 65 72 22 29 2e 6d 49 63 6f 6e 42 6f 78 57 72 61 70 28 29 3b 0d 0a 09 0d 0a 09 24 28 22 23 74 77 69 74 74 65 72 22 29 2e 6d 54 77 69 74 74 65 72 49 6e 74 65 72 67 72 61 74 6f 72 28 7b 0d 0a 09 09 75 73 65 72 4e 61 6d 65 3a 20 22 4d 61 78 78 78 44 69 6e 68 22 2c 0d 0a 09 09 6e 6f 4f 66 54 77 65 65 74 73 3a 20 33 2c 0d 0a 09 09 6c 6f 61 64 65 72 54 65 78 74 3a 20 22 4c 6f 61 64 69 6e 67 20 74 77 65 65 74 73 2e 2e 2e 22 0d 0a 09 7d 29 3b 0d 0a 0d 0a 7d 29 3b 0d 0a 0d 0a 0d 0a 24 28 64 6f 63 Data Ascii: return false;});$(".maxx-button").mSimpleHoverFade();$(".icon-boxes-wrapper").mIconBoxWrap();$("#twitter").mTwitterIntergrator({userName: "MaxxxDinh",noOfTweets: 3,loaderText: "Loading tweets..."});});$(doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49737	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:15 UTC	405	OUT	GET /js/jquery-1.6.4.min.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:15 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:15 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 91671 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:15 UTC	7883	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 36 2e 34 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 20 7c 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 61 29 7b 69 66 28 21 63 67 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b Data Ascii: /! jQuery v1.6.4 http://jquery.com/ \| http://jquery.org/license /(function(a,b){function cu(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cr(a){if(!cg[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 2c 47 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 48 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 2c 49 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2c 4a 3d 7b 7d 3b 65 2e 66 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 65 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 2c 66 29 7b 76 61 72 20 67 2c 68 2c 6a 2c 6b 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 2e 6e 6f 64 65 54 79 70 65 29 7b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 5b 30 5d 3d 61 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 69 66 28 61 3d 3d 3d 22 62 6f 64 79 22 Data Ascii: .prototype.push,G=Array.prototype.slice,H=String.prototype.trim,I=Array.prototype.indexOf,J={};e.fn=e.prototype={constructor:e,init:function(a,d,f){var g,h,j,k;if(!a)return this;if(a.nodeType){this.context=this[0]=a,this.length=1;return this}if(a==="body"
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 7d 2c 69 73 52 65 73 6f 6c 76 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 63 7c 7c 21 21 62 7d 2c 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 3d 31 2c 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 44 65 66 65 72 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 63 3d 66 2e 5f 44 65 66 65 72 72 65 64 28 29 2c 64 3b 66 2e 65 78 74 65 6e 64 28 62 2c 7b 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 64 6f 6e 65 28 61 29 2e 66 61 69 6c 28 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 6c 77 61 79 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 64 6f 6e 65 2e 61 Data Ascii: eturn this},isResolved:function(){return!!c\|\|!!b},cancel:function(){d=1,a=[];return this}};return e},Deferred:function(a){var b=f._Deferred(),c=f._Deferred(),d;f.extend(b,{then:function(a,c){b.done(a).fail(c);return this},always:function(){return b.done.a
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 7c 6f 62 6a 65 63 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 29 24 2f 69 2c 73 3d 2f 5e 61 28 3f 3a 72 65 61 29 3f 24 2f 69 2c 74 3d 2f 5e 28 3f 3a 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 61 73 79 6e 63 7c 63 68 65 63 6b 65 64 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 7c 73 65 6c 65 63 74 65 64 29 24 2f 69 2c 75 2c 76 3b 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 2e 61 63 63 65 73 73 28 74 68 69 73 2c 61 2c 62 2c 21 30 2c 66 2e 61 74 74 72 29 7d 2c 72 65 6d 6f 76 65 41 74 74 Data Ascii: \|object\|select\|textarea)$/i,s=/^a(?:rea)?$/i,t=/^(?:autofocus\|autoplay\|async\|checked\|controls\|defer\|disabled\|hidden\|loop\|multiple\|open\|readonly\|required\|scoped\|selected)$/i,u,v;f.fn.extend({attr:function(a,b){return f.access(this,a,b,!0,f.attr)},removeAtt
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 7b 72 3d 68 2c 71 3d 6e 75 6c 6c 2c 6c 3d 68 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3c 30 2c 6d 3d 5b 5d 2c 6c 7c 7c 28 6d 3d 68 2e 73 70 6c 69 74 28 22 2e 22 29 2c 68 3d 6d 2e 73 68 69 66 74 28 29 2c 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 66 2e 6d 61 70 28 6d 2e 73 6c 69 63 65 28 30 29 2e 73 6f 72 74 28 29 2c 42 29 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 29 3f 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 29 2c 70 3d 74 5b 68 5d 3b 69 66 28 21 70 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 21 64 29 7b 66 6f 72 28 6a 3d 30 3b 6a 3c 70 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 7b 71 3d 70 5b 6a 5d 3b 69 66 28 6c 7c 7c 6e 2e 74 65 73 74 28 71 2e 6e 61 6d 65 73 70 61 63 65 29 29 66 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 61 2c 72 Data Ascii: {r=h,q=null,l=h.indexOf(".")<0,m=[],l\|\|(m=h.split("."),h=m.shift(),n=new RegExp("(^\|\\.)"+f.map(m.slice(0).sort(),B).join("\\.(?:.*\\.)?")+"(\\.\|$)")),p=t[h];if(!p)continue;if(!d){for(j=0;j<p.length;j++){q=p[j];if(l\|\|n.test(q.namespace))f.event.remove(a,r
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 69 73 29 2e 75 6e 62 69 6e 64 28 61 2c 67 29 3b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 67 2e 67 75 69 64 3d 65 2e 67 75 69 64 7c 7c 66 2e 67 75 69 64 2b 2b 29 3a 67 3d 65 3b 69 66 28 61 3d 3d 3d 22 75 6e 6c 6f 61 64 22 26 26 63 21 3d 3d 22 6f 6e 65 22 29 74 68 69 73 2e 6f 6e 65 28 61 2c 64 2c 65 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 69 3d 30 2c 6a 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 3c 6a 3b 69 2b 2b 29 66 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 5b 69 5d 2c 61 2c 67 2c 64 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 2c 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 75 6e 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6f 62 6a 65 63 74 Data Ascii: is).unbind(a,g);return e.apply(this,arguments)},g.guid=e.guid\|\|f.guid++):g=e;if(a==="unload"&&c!=="one")this.one(a,d,e);else for(var i=0,j=this.length;i<j;i++)f.event.add(this[i],a,g,d);return this}}),f.fn.extend({unbind:function(a,b){if(typeof a=="object
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 3d 62 5b 31 5d 2b 28 62 5b 32 5d 7c 7c 31 29 2d 30 2c 61 5b 33 5d 3d 62 5b 33 5d 2d 30 7d 65 6c 73 65 20 61 5b 32 5d 26 26 6b 2e 65 72 72 6f 72 28 61 5b 30 5d 29 3b 61 5b 30 5d 3d 64 2b 2b 3b 72 65 74 75 72 6e 20 61 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 61 5b 31 5d 3d 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 3b 21 66 26 26 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 26 26 28 61 5b 31 5d 3d 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 29 2c 61 5b 34 5d 3d 28 61 5b 34 5d 7c 7c 61 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2c 61 5b 32 5d 3d 3d 3d 22 7e 3d 22 26 26 28 61 5b 34 5d 3d 22 20 22 2b 61 5b 34 5d 2b 22 20 22 29 3b 72 65 74 75 72 6e 20 61 7d 2c 50 53 45 55 44 4f 3a Data Ascii: =b[1]+(b[2]\|\|1)-0,a[3]=b[3]-0}else a[2]&&k.error(a[0]);a[0]=d++;return a},ATTR:function(a,b,c,d,e,f){var g=a[1]=a[1].replace(i,"");!f&&l.attrMap[g]&&(a[1]=l.attrMap[g]),a[4]=(a[4]\|\|a[5]\|\|"").replace(i,""),a[2]==="~="&&(a[4]=" "+a[4]+" ");return a},PSEUDO:
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 30 29 7b 61 2e 6c 61 73 74 43 68 69 6c 64 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 65 22 3b 69 66 28 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 65 22 29 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 72 65 74 75 72 6e 3b 6c 2e 6f 72 64 65 72 2e 73 70 6c 69 63 65 28 31 2c 30 2c 22 43 4c 41 53 53 22 29 2c 6c 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 63 29 72 65 74 75 72 6e 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 5b 31 5d 29 7d 2c 61 3d 6e 75 6c 6c 7d 7d 28 29 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: 0){a.lastChild.className="e";if(a.getElementsByClassName("e").length===1)return;l.order.splice(1,0,"CLASS"),l.find.CLASS=function(a,b,c){if(typeof b.getElementsByClassName!="undefined"&&!c)return b.getElementsByClassName(a[1])},a=null}}(),c.documentElemen
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 64 3d 63 2e 68 74 6d 6c 28 29 3b 63 2e 72 65 70 6c 61 63 65 57 69 74 68 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 64 29 29 7d 29 3b 74 79 70 65 6f 66 20 61 21 3d 22 73 74 72 69 6e 67 22 26 26 28 61 3d 66 28 61 29 2e 64 65 74 61 63 68 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 63 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 66 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 28 29 2c 62 3f 66 28 62 29 2e 62 65 66 6f 72 65 28 61 29 3a 66 28 63 29 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 28 66 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3f Data Ascii: d=c.html();c.replaceWith(a.call(this,b,d))});typeof a!="string"&&(a=f(a).detach());return this.each(function(){var b=this.nextSibling,c=this.parentNode;f(this).remove(),b?f(b).before(a):f(c).append(a)})}return this.length?this.pushStack(f(f.isFunction(a)?
2024-10-24 22:45:15 UTC	8000	IN	Data Raw: 65 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3b 61 3d 61 2e 73 6c 69 63 65 28 30 2c 65 29 7d 76 61 72 20 68 3d 22 47 45 54 22 3b 63 26 26 28 66 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 3f 28 64 3d 63 2c 63 3d 62 29 3a 74 79 70 65 6f 66 20 63 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 63 3d 66 2e 70 61 72 61 6d 28 63 2c 66 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 2c 68 3d 22 50 4f 53 54 22 29 29 3b 76 61 72 20 69 3d 74 68 69 73 3b 66 2e 61 6a 61 78 28 7b 75 72 6c 3a 61 2c 74 79 70 65 3a 68 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 63 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 61 2e 69 73 52 65 73 6f 6c 76 65 64 28 29 26 Data Ascii: e(e,a.length);a=a.slice(0,e)}var h="GET";c&&(f.isFunction(c)?(d=c,c=b):typeof c=="object"&&(c=f.param(c,f.ajaxSettings.traditional),h="POST"));var i=this;f.ajax({url:a,type:h,dataType:"html",data:c,complete:function(a,b,c){c=a.responseText,a.isResolved()&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49739	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	402	OUT	GET /js/cufon-replace.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 841 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	841	IN	Data Raw: 2f 2f 43 75 66 6f 6e 20 52 65 70 6c 61 63 65 6d 65 6e 74 0d 0a 0d 0a 2f 2f 20 76 61 72 20 66 6f 6e 74 4e 61 6d 65 20 3d 20 27 54 69 74 69 6c 6c 69 75 6d 54 65 78 74 32 35 4c 27 3b 0d 0a 76 61 72 20 66 6f 6e 74 4e 61 6d 65 20 3d 20 27 59 61 6e 6f 6e 65 20 4b 61 66 66 65 65 73 61 74 7a 27 3b 0d 0a 0d 0a 43 75 66 6f 6e 28 27 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 31 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 33 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 34 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 35 2c 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 68 36 2c 2e 63 6f 6d 6d 65 6e 74 2d 68 65 61 64 69 6e 67 20 61 27 2c 20 7b 0d 0a 66 6f 6e 74 46 61 6d 69 6c 79 3a 20 66 6f 6e 74 4e 61 6d 65 2c Data Ascii: //Cufon Replacement// var fontName = 'TitilliumText25L';var fontName = 'Yanone Kaffeesatz';Cufon('#body-content h1,#body-content h2,#body-content h3,#body-content h4,#body-content h5,#body-content h6,.comment-heading a', {fontFamily: fontName,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49738	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	571	OUT	GET /js/init_js.php HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
2024-10-24 22:45:16 UTC	391	IN	Data Raw: 31 37 62 0d 0a 0d 0a 0d 0a 0d 0a 76 61 72 20 24 5f 5f 41 41 20 09 3d 20 27 2f 68 6f 6d 65 2f 77 77 77 2f 70 33 35 32 36 37 36 2f 68 74 6d 6c 2f 77 65 62 73 65 69 74 65 2f 2f 61 64 6d 69 6e 27 3b 0d 0a 76 61 72 20 24 5f 5f 41 52 20 09 3d 20 27 2f 61 64 6d 69 6e 27 3b 0d 0a 76 61 72 20 24 5f 5f 41 48 09 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 2f 61 64 6d 69 6e 27 3b 0d 0a 0d 0a 76 61 72 20 24 5f 5f 46 52 09 3d 20 27 2f 68 6f 6d 65 2f 77 77 77 2f 70 33 35 32 36 37 36 2f 68 74 6d 6c 2f 77 65 62 73 65 69 74 65 2f 27 3b 0d 0a 76 61 72 20 24 5f 5f 46 41 09 3d 20 27 27 3b 0d 0a 76 61 72 20 24 5f 5f 46 48 09 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 27 3b 0d 0a 0d 0a 76 61 72 20 24 5f 5f 55 41 20 09 3d Data Ascii: 17bvar $__AA = '/home/www/p352676/html/webseite//admin';var $__AR = '/admin';var $__AH= 'https://www.ritana.de/admin';var $__FR= '/home/www/p352676/html/webseite/';var $__FA= '';var $__FH= 'https://www.ritana.de';var $__UA =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	588	OUT	GET /js/autocomplete/autocomplete.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:22 GMT Accept-Ranges: bytes Content-Length: 1033 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	1033	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 2f 2a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 09 2a 2f 0d 0a 2f 2a 09 41 55 54 4f 43 4f 4d 50 4c 45 54 45 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 2a 2f 0d 0a 2f 2a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 09 2a 2f 0d 0a 09 0d 0a 0d 0a 09 76 61 72 20 73 74 64 5f 76 61 6c 20 3d 20 24 28 27 23 61 63 49 6e 70 75 74 27 29 2e 76 61 6c 28 29 3b 0d 0a 09 0d 0a 09 24 28 27 23 61 63 49 6e 70 75 74 27 29 Data Ascii: $(document).ready(function(){/*******************************************************//AUTOCOMPLETE//*******************************************************/var std_val = $('#acInput').val();$('#acInput')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49741	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	395	OUT	GET /js/custom.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:20 GMT Accept-Ranges: bytes Content-Length: 9585 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	7884	IN	Data Raw: 2f 2a 4d 75 6c 74 69 6c 65 76 65 6c 20 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 0d 0a 2f 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 24 28 22 75 6c 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 09 24 28 74 68 69 73 29 2e 68 6f 76 65 72 49 6e 74 65 6e 74 28 7b 0d 0a 09 09 09 74 69 6d 65 6f 75 74 3a 20 33 30 30 2c 0d 0a 09 09 09 6f 76 65 72 Data Ascii: /Multilevel dropdown menu/ ====================================================================================/$(document).ready(function(){$("ul.simple-drop-down-menu li").each(function () {$(this).hoverIntent({timeout: 300,over
2024-10-24 22:45:16 UTC	1701	IN	Data Raw: 53 74 61 72 74 20 6f 6e 20 61 20 72 61 6e 64 6f 6d 20 73 6c 69 64 65 0d 0a 20 20 20 20 20 20 20 20 62 65 66 6f 72 65 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 62 65 66 6f 72 65 20 61 20 73 6c 69 64 65 20 74 72 61 6e 73 69 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 61 66 74 65 72 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 61 66 74 65 72 20 61 20 73 6c 69 64 65 20 74 72 61 6e 73 69 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 68 6f 77 45 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 20 2f 2f 20 54 72 69 67 67 65 72 73 20 61 66 74 65 72 20 61 6c 6c 20 73 6c 69 64 65 73 20 68 61 76 65 20 62 65 65 6e 20 73 68 6f 77 6e 0d 0a Data Ascii: Start on a random slide beforeChange: function(){}, // Triggers before a slide transition afterChange: function(){}, // Triggers after a slide transition slideshowEnd: function(){}, // Triggers after all slides have been shown

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49743	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	399	OUT	GET /js/Kaffeesatz.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 65916 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	7883	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6d 6f 76 65 64 20 75 6e 64 65 72 20 61 6e 79 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 3a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2c 20 59 61 6e 6f 6e 65 20 28 68 74 74 70 3a 2f 2f 79 61 6e 6f 6e 65 2e 64 65 2f 74 79 70 65 64 65 73 69 67 6e 2f 29 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 54 68 69 73 20 46 6f 6e 74 20 53 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 53 49 4c 20 4f 70 65 6e 20 46 6f 6e 74 20 4c 69 63 65 6e 73 65 2c 20 Data Ascii: /! The following copyright notice may not be removed under any circumstances. * * Copyright: * Copyright (c) 2010, Yanone (http://yanone.de/typedesign/). All rights reserved. * This Font Software is licensed under the SIL Open Font License,
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 38 2c 2d 33 35 2c 34 38 2c 2d 35 35 76 30 2c 2d 33 33 2c 2d 35 37 2c 2d 32 34 2c 2d 37 35 2c 2d 31 30 76 2d 31 34 2c 2d 33 36 2c 36 2c 2d 34 31 2c 35 38 2c 2d 34 31 76 37 39 2c 30 2c 35 30 2c 38 38 2c 31 31 2c 31 30 38 22 2c 22 6b 22 3a 7b 22 5c 22 22 3a 31 30 2c 22 5f 22 3a 31 30 2c 22 5c 2f 22 3a 2d 32 2c 22 27 22 3a 31 30 7d 7d 2c 22 34 22 3a 7b 22 64 22 3a 22 31 30 2c 2d 37 33 76 35 2c 2d 32 30 2c 34 36 2c 2d 31 33 33 2c 38 38 2c 2d 31 34 35 76 37 2c 30 2c 31 33 2c 32 2c 31 37 2c 34 72 2d 31 2c 31 34 30 76 32 33 2c 33 2c 32 37 2c 2d 31 31 2c 32 38 2c 39 76 31 2c 31 38 2c 2d 31 31 2c 32 30 2c 2d 32 38 2c 31 38 76 2d 37 2c 32 37 2c 32 31 2c 35 34 2c 2d 32 39 2c 34 37 72 30 2c 2d 34 37 72 2d 36 36 2c 30 76 2d 38 2c 2d 37 2c 2d 39 2c 2d 31 38 2c 2d 39 2c Data Ascii: 8,-35,48,-55v0,-33,-57,-24,-75,-10v-14,-36,6,-41,58,-41v79,0,50,88,11,108","k":{"\"":10,"_":10,"\/":-2,"'":10}},"4":{"d":"10,-73v5,-20,46,-133,88,-145v7,0,13,2,17,4r-1,140v23,3,27,-11,28,9v1,18,-11,20,-28,18v-7,27,21,54,-29,47r0,-47r-66,0v-8,-7,-9,-18,-9,
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 2c 22 5c 22 22 3a 34 2c 22 5c 75 30 30 64 63 22 3a 33 2c 22 5c 75 30 30 64 36 22 3a 33 2c 22 5c 75 30 30 63 34 22 3a 33 2c 22 5f 22 3a 2d 39 2c 22 2c 22 3a 31 31 2c 22 27 22 3a 34 7d 7d 2c 22 52 22 3a 7b 22 64 22 3a 22 31 35 2c 30 72 30 2c 2d 32 34 36 76 33 2c 2d 31 30 2c 32 39 2c 2d 35 2c 34 32 2c 2d 36 76 34 35 2c 30 2c 36 36 2c 32 31 2c 36 36 2c 37 31 76 30 2c 33 39 2c 2d 31 32 2c 36 31 2c 2d 33 31 2c 37 31 76 31 31 2c 31 35 2c 33 30 2c 34 37 2c 33 34 2c 31 30 34 76 32 2c 31 30 2c 2d 32 31 2c 36 2c 2d 33 32 2c 36 76 2d 34 2c 2d 36 31 2c 2d 32 31 2c 2d 39 31 2c 2d 33 30 2c 2d 31 30 33 72 2d 31 39 2c 31 72 30 2c 39 36 76 30 2c 36 2c 2d 31 2c 36 2c 2d 33 30 2c 36 78 6d 39 31 2c 2d 31 38 32 76 31 2c 2d 33 35 2c 2d 31 32 2c 2d 34 38 2c 2d 34 36 2c 2d 34 34 Data Ascii: ,"\"":4,"\u00dc":3,"\u00d6":3,"\u00c4":3,"_":-9,",":11,"'":4}},"R":{"d":"15,0r0,-246v3,-10,29,-5,42,-6v45,0,66,21,66,71v0,39,-12,61,-31,71v11,15,30,47,34,104v2,10,-21,6,-32,6v-4,-61,-21,-91,-30,-103r-19,1r0,96v0,6,-1,6,-30,6xm91,-182v1,-35,-12,-48,-46,-44
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 36 2c 2d 32 39 2c 36 72 30 2c 2d 32 35 31 76 30 2c 2d 31 33 2c 36 2c 2d 31 34 2c 32 39 2c 2d 31 34 22 2c 22 77 22 3a 36 32 7d 2c 22 6d 22 3a 7b 22 64 22 3a 22 38 38 2c 30 72 30 2c 2d 31 34 30 76 33 2c 2d 32 34 2c 2d 32 37 2c 2d 32 30 2c 2d 34 32 2c 2d 31 32 72 30 2c 31 34 36 76 30 2c 36 2c 2d 31 2c 36 2c 2d 32 39 2c 36 72 30 2c 2d 31 37 32 76 32 34 2c 2d 31 31 2c 36 38 2c 2d 32 30 2c 38 36 2c 30 76 33 34 2c 2d 32 31 2c 39 37 2c 2d 31 37 2c 38 35 2c 33 39 72 30 2c 31 32 37 76 30 2c 36 2c 2d 31 2c 36 2c 2d 32 39 2c 36 72 30 2c 2d 31 33 33 76 33 2c 2d 33 30 2c 2d 32 34 2c 2d 32 39 2c 2d 34 32 2c 2d 31 38 72 30 2c 31 34 35 76 30 2c 36 2c 31 2c 36 2c 2d 32 39 2c 36 22 2c 22 77 22 3a 32 30 32 2c 22 6b 22 3a 7b 22 79 22 3a 32 2c 22 78 22 3a 31 2c 22 77 22 3a 31 Data Ascii: 6,-29,6r0,-251v0,-13,6,-14,29,-14","w":62},"m":{"d":"88,0r0,-140v3,-24,-27,-20,-42,-12r0,146v0,6,-1,6,-29,6r0,-172v24,-11,68,-20,86,0v34,-21,97,-17,85,39r0,127v0,6,-1,6,-29,6r0,-133v3,-30,-24,-29,-42,-18r0,145v0,6,1,6,-29,6","w":202,"k":{"y":2,"x":1,"w":1
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 75 30 30 66 36 22 3a 32 2c 22 5c 75 30 30 65 34 22 3a 32 2c 22 6b 22 3a 35 2c 22 5f 22 3a 31 36 2c 22 5c 2f 22 3a 2d 36 2c 22 2c 22 3a 37 2c 22 2a 22 3a 34 2c 22 27 22 3a 33 30 7d 7d 2c 22 5c 75 30 30 66 63 22 3a 7b 22 64 22 3a 22 31 32 33 2c 2d 31 38 30 72 30 2c 31 37 31 76 2d 31 34 2c 38 2c 2d 33 34 2c 31 33 2c 2d 35 33 2c 31 33 76 2d 38 35 2c 34 2c 2d 34 35 2c 2d 31 30 38 2c 2d 35 34 2c 2d 31 37 38 76 30 2c 2d 36 2c 30 2c 2d 36 2c 33 30 2c 2d 36 72 30 2c 31 32 36 76 2d 33 2c 33 35 2c 32 34 2c 33 38 2c 34 38 2c 32 36 72 30 2c 2d 31 34 36 76 30 2c 2d 36 2c 30 2c 2d 36 2c 32 39 2c 2d 36 78 6d 32 38 2c 2d 32 33 30 76 30 2c 2d 31 30 2c 37 2c 2d 31 38 2c 31 38 2c 2d 31 38 76 31 33 2c 30 2c 31 38 2c 37 2c 31 38 2c 31 38 76 30 2c 31 30 2c 2d 37 2c 31 38 2c 2d Data Ascii: u00f6":2,"\u00e4":2,"k":5,"_":16,"\/":-6,",":7,"*":4,"'":30}},"\u00fc":{"d":"123,-180r0,171v-14,8,-34,13,-53,13v-85,4,-45,-108,-54,-178v0,-6,0,-6,30,-6r0,126v-3,35,24,38,48,26r0,-146v0,-6,0,-6,29,-6xm28,-230v0,-10,7,-18,18,-18v13,0,18,7,18,18v0,10,-7,18,-
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 37 2c 22 57 22 3a 31 31 2c 22 59 22 3a 32 35 2c 22 64 22 3a 37 2c 22 66 22 3a 31 34 2c 22 74 22 3a 31 37 2c 22 75 22 3a 37 2c 22 76 22 3a 31 36 2c 22 77 22 3a 39 2c 22 79 22 3a 31 34 2c 22 65 22 3a 37 2c 22 6f 22 3a 37 2c 22 4f 22 3a 36 2c 22 55 22 3a 34 7d 7d 2c 22 5c 2f 22 3a 7b 22 64 22 3a 22 31 32 39 2c 2d 32 37 35 72 2d 38 31 2c 32 37 33 76 2d 33 2c 39 2c 2d 33 2c 39 2c 2d 34 34 2c 39 72 38 30 2c 2d 32 37 32 76 33 2c 2d 39 2c 34 2c 2d 31 30 2c 34 35 2c 2d 31 30 22 2c 22 77 22 3a 31 33 32 2c 22 6b 22 3a 7b 22 5c 75 30 30 64 66 22 3a 36 2c 22 5c 75 30 30 62 62 22 3a 31 34 2c 22 5c 75 30 30 61 62 22 3a 32 32 2c 22 7a 22 3a 31 31 2c 22 79 22 3a 39 2c 22 78 22 3a 31 37 2c 22 77 22 3a 38 2c 22 76 22 3a 38 2c 22 75 22 3a 31 34 2c 22 74 22 3a 36 2c 22 73 22 Data Ascii: 7,"W":11,"Y":25,"d":7,"f":14,"t":17,"u":7,"v":16,"w":9,"y":14,"e":7,"o":7,"O":6,"U":4}},"\/":{"d":"129,-275r-81,273v-3,9,-3,9,-44,9r80,-272v3,-9,4,-10,45,-10","w":132,"k":{"\u00df":6,"\u00bb":14,"\u00ab":22,"z":11,"y":9,"x":17,"w":8,"v":8,"u":14,"t":6,"s"
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 31 30 32 2c 2d 34 2c 2d 31 36 31 76 30 2c 2d 37 2c 30 2c 2d 37 2c 34 30 2c 2d 37 72 30 2c 32 34 35 76 2d 31 2c 31 33 2c 2d 32 36 2c 35 2c 2d 33 39 2c 37 22 2c 22 77 22 3a 31 35 34 7d 2c 22 4f 22 3a 7b 22 64 22 3a 22 37 2c 2d 31 32 37 76 30 2c 2d 39 38 2c 32 33 2c 2d 31 32 38 2c 36 39 2c 2d 31 32 38 76 34 37 2c 30 2c 36 34 2c 32 37 2c 36 34 2c 31 32 36 76 30 2c 31 30 31 2c 2d 32 31 2c 31 33 32 2c 2d 36 38 2c 31 33 32 76 2d 34 37 2c 30 2c 2d 36 35 2c 2d 32 33 2c 2d 36 35 2c 2d 31 33 30 78 6d 35 33 2c 2d 31 31 38 76 30 2c 35 36 2c 33 2c 37 39 2c 32 31 2c 37 39 76 31 38 2c 30 2c 32 32 2c 2d 32 34 2c 32 32 2c 2d 38 38 76 30 2c 2d 36 33 2c 2d 32 2c 2d 38 37 2c 2d 32 31 2c 2d 38 37 76 2d 31 37 2c 30 2c 2d 32 32 2c 32 35 2c 2d 32 32 2c 39 36 22 2c 22 77 22 3a 31 Data Ascii: 102,-4,-161v0,-7,0,-7,40,-7r0,245v-1,13,-26,5,-39,7","w":154},"O":{"d":"7,-127v0,-98,23,-128,69,-128v47,0,64,27,64,126v0,101,-21,132,-68,132v-47,0,-65,-23,-65,-130xm53,-118v0,56,3,79,21,79v18,0,22,-24,22,-88v0,-63,-2,-87,-21,-87v-17,0,-22,25,-22,96","w":1
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 72 30 2c 31 33 35 76 30 2c 37 2c 30 2c 37 2c 2d 34 30 2c 37 22 2c 22 77 22 3a 31 32 39 2c 22 6b 22 3a 7b 22 79 22 3a 34 2c 22 5c 22 22 3a 33 31 2c 22 5c 2f 22 3a 2d 38 2c 22 27 22 3a 33 31 2c 22 29 22 3a 37 2c 22 5d 22 3a 37 7d 7d 2c 22 69 22 3a 7b 22 64 22 3a 22 35 33 2c 2d 31 38 30 72 30 2c 31 37 33 76 30 2c 37 2c 30 2c 37 2c 2d 34 31 2c 37 72 30 2c 2d 31 36 32 76 30 2c 2d 31 38 2c 38 2c 2d 31 38 2c 34 31 2c 2d 31 38 78 6d 31 34 2c 2d 32 33 33 76 30 2c 2d 31 37 2c 37 2c 2d 32 38 2c 32 32 2c 2d 32 38 76 31 35 2c 30 2c 31 39 2c 38 2c 31 39 2c 32 37 76 30 2c 31 39 2c 2d 38 2c 33 31 2c 2d 32 32 2c 33 31 76 2d 31 32 2c 30 2c 2d 31 39 2c 2d 37 2c 2d 31 39 2c 2d 33 30 22 2c 22 77 22 3a 36 34 2c 22 6b 22 3a 7b 22 5c 2f 22 3a 2d 38 7d 7d 2c 22 6a 22 3a 7b 22 64 Data Ascii: r0,135v0,7,0,7,-40,7","w":129,"k":{"y":4,"\"":31,"\/":-8,"'":31,")":7,"]":7}},"i":{"d":"53,-180r0,173v0,7,0,7,-41,7r0,-162v0,-18,8,-18,41,-18xm14,-233v0,-17,7,-28,22,-28v15,0,19,8,19,27v0,19,-8,31,-22,31v-12,0,-19,-7,-19,-30","w":64,"k":{"\/":-8}},"j":{"d
2024-10-24 22:45:16 UTC	2033	IN	Data Raw: 2c 39 36 2c 2d 35 39 2c 39 36 76 2d 33 39 2c 30 2c 2d 35 37 2c 2d 31 33 2c 2d 35 37 2c 2d 39 34 78 6d 35 30 2c 2d 39 31 76 30 2c 35 36 2c 34 2c 36 31 2c 31 33 2c 36 31 76 37 2c 30 2c 31 34 2c 2d 36 2c 31 34 2c 2d 36 31 76 30 2c 2d 35 32 2c 2d 33 2c 2d 35 38 2c 2d 31 33 2c 2d 35 38 76 2d 38 2c 30 2c 2d 31 34 2c 37 2c 2d 31 34 2c 35 38 78 6d 31 37 2c 2d 32 32 36 76 30 2c 2d 31 32 2c 38 2c 2d 32 32 2c 32 32 2c 2d 32 32 76 31 37 2c 30 2c 32 32 2c 39 2c 32 32 2c 32 32 76 30 2c 31 32 2c 2d 38 2c 32 32 2c 2d 32 32 2c 32 32 76 2d 31 37 2c 30 2c 2d 32 32 2c 2d 38 2c 2d 32 32 2c 2d 32 32 78 6d 36 39 2c 2d 32 32 36 76 30 2c 2d 31 32 2c 38 2c 2d 32 32 2c 32 32 2c 2d 32 32 76 31 37 2c 30 2c 32 32 2c 39 2c 32 32 2c 32 32 76 30 2c 31 32 2c 2d 38 2c 32 32 2c 2d 32 32 2c Data Ascii: ,96,-59,96v-39,0,-57,-13,-57,-94xm50,-91v0,56,4,61,13,61v7,0,14,-6,14,-61v0,-52,-3,-58,-13,-58v-8,0,-14,7,-14,58xm17,-226v0,-12,8,-22,22,-22v17,0,22,9,22,22v0,12,-8,22,-22,22v-17,0,-22,-8,-22,-22xm69,-226v0,-12,8,-22,22,-22v17,0,22,9,22,22v0,12,-8,22,-22,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49742	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	567	OUT	GET /js/main.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 159 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	159	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 2f 2a 0d 0a 09 24 28 27 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 61 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 6e 65 78 74 28 29 2e 69 73 28 27 75 6c 27 29 29 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 7d 29 3b 0d 0a 09 2a 2f 0d 0a 7d 29 3b 0d 0a Data Ascii: $(document).ready(function () {/$('.simple-drop-down-menu a').click(function(){if($(this).next().is('ul')){return false;}});/});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49745	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	632	OUT	GET /images/logo.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 6144 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:16 UTC	6144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 00 4a 08 06 00 00 00 96 f6 ce 5c 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 06 3b 00 00 06 3b 01 df 37 47 7a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 17 7d 49 44 41 54 78 9c ed 9d 79 94 14 d5 f5 c7 3f b7 67 40 16 45 dc 88 c6 25 e2 f2 73 8b 06 05 35 51 93 1f 1a 37 a6 c6 29 40 87 1a d1 18 5c 4e 34 9a 9c 2c c6 e4 e7 31 8a 1c 93 88 e6 17 35 ee 46 13 13 37 a6 c1 85 1a a9 21 2a 88 18 97 18 15 02 2e 04 7f 82 b8 44 11 8d 8a 0a b2 cc f4 fd fd f1 aa a7 6b ba ab 67 61 7a 99 69 de e7 9c 3e 53 fd ea f5 ad 5b 5d d3 df 7a f5 de 7d f7 89 aa 62 29 2c 22 32 1a f8 3a 30 32 7c 6d 0d 2c 00 5e 0c ff fe Data Ascii: PNGIHDRhJ\sBIT\|dpHYs;;7GztEXtSoftwarewww.inkscape.org<}IDATxy?g@E%s5Q7)@\N4,15F7!*.Dkgazi>S[]z}b),"2:02\|m,^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49744	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	641	OUT	GET /uploads/slider_umzug.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	292	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Jan 2024 12:33:11 GMT Accept-Ranges: bytes Content-Length: 341389 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:16 UTC	7900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 27 9a 00 00 27 9a 01 ea 2e 16 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 67 d0 1c c7 7d e7 ff e9 30 69 d3 93 1f 00 0f 12 c1 2c 92 0a 54 a0 28 51 91 96 75 57 f6 d9 be 92 43 39 c9 7f f9 4e d6 c9 4a b6 ce 96 ce 65 c9 56 e9 ac 3b c9 77 96 eb ce e7 17 ae f2 95 1c ca 47 57 49 b2 65 05 4a b4 92 4d 51 22 48 2a 90 62 26 c4 00 10 19 78 f0 e4 4d 33 d3 dd ff 17 b3 bb cf ee 93 80 87 20 01 48 e8 4f 15 f0 ec ce f4 f4 74 cf ce ce f6 b7 7f a1 c5 df ff fd df 1f da b6 6d 5b 8e c7 e3 f1 78 3c 1e Data Ascii: PNGIHDRr:KsBIT\|dpHYs''.ftEXtSoftwarewww.inkscape.org< IDATxg}0i,T(QuWC9NJeV;wGWIeJMQ"H*b&xM3 HOtm[x<
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 3a c9 5a ec 12 68 29 d1 5a e1 1c 0c d5 46 09 c3 18 93 99 9e d0 b5 ce 62 8d 29 42 69 f2 ac d8 66 0c d6 66 c4 f1 c6 39 9c ce 27 e7 46 00 6f 66 c0 b6 56 f9 0d ca ae 12 cb 9b b4 6e b8 9b 6f 1e 10 c0 e2 3b df 81 2c 5b db f5 f0 9b df 5c b3 0e 79 c7 1d eb 8a 66 b9 77 ef e0 f9 5e f6 32 a8 56 8b 37 61 48 fe e9 4f 17 2e d5 cd 66 61 7d fe ed df de 54 fb cf 05 6e 62 82 fc 96 5b 90 9f fb 5c 91 98 ec da 6b 31 eb c4 64 7b 3c 9e 67 c0 26 3c 59 d6 f4 a8 59 a7 fc 2a 61 bd de f1 9e 0b 82 30 08 b8 eb ce 6f 72 d3 6b 7f 8c ea e4 08 79 5e 0c 32 84 e8 58 0a a4 c4 5a 8b 73 a6 e3 47 db 11 3c d6 91 e5 19 f3 73 73 44 3a a3 5a 4a 58 d0 8a 3d bb 76 b2 7f ff 01 76 ef da 4d 5c 2a 91 e7 39 fb f7 ef 67 72 72 3b 59 9a 11 e9 90 e1 a1 61 16 17 16 b0 56 a0 4b ba 70 d3 73 06 ad 02 4a 51 c2 25 Data Ascii: :Zh)ZFb)Biff9'FofVno;,[\yfw^2V7aHO.fa}Tnb[\k1d{<g&<YYa0orky^2XZsG<ssD:ZJX=vvM\9grr;YaVKpsJQ%
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: fe 7a fa f7 ed 46 06 ca 5a 6d ee 0b 5f 40 fe d5 5f 0d 1c b3 1f f8 c0 80 04 5a ac 06 7a 5b ad ff 55 af 1a 19 5c ca cf ce e2 5e f6 b2 81 20 5b 03 41 a5 86 c7 3f ea f7 de af 68 18 1a bf fc d2 97 06 db fb 99 9f 19 39 87 fe fa eb 07 3e 9f 6e fc 00 ee 97 7e 69 e3 46 c2 ae 5d e5 c6 5a 7f 2a b4 a1 fb 7d 0d 67 f3 cc 1b 0e 6c b5 15 09 f4 56 eb be 88 0b 02 71 18 e2 85 60 ef ec 2e 0e 1c 7a 84 db 3e fe 31 7e e3 b7 7f 1f 21 73 94 90 18 af 7a d1 39 4b 6b 6d 51 94 3e 74 49 92 60 b2 0e b5 66 9d d6 c4 04 cd f1 49 e2 28 62 c5 9c 22 4d 53 c6 9a 2d 96 97 56 98 98 9a e2 f8 e1 c3 1c 3b 7a 84 e3 27 8e b1 73 e7 a5 64 69 4a b3 d1 a0 28 2c 3a 88 40 0a 94 94 38 23 50 5e 50 a9 c5 b4 9a 4d be ff ad 3b b9 e2 aa 67 20 75 13 e1 7b 32 53 d1 93 3d 03 ab cc c2 8a 92 b4 89 33 e8 3f 57 89 b3 Data Ascii: zFZm_@_Zz[U\^ [A?h9>n~iF]Z*}glVq`.z>1~!sz9KkmQ>tI`fI(b"MS-V;z'sdiJ(,:@8#P^PM;g u{2S=3?W
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 24 49 42 9a a6 b8 4e 07 19 76 49 bc 65 72 72 92 53 f3 73 04 41 c0 ca a9 45 b4 b1 8c 37 9b 54 27 6a d8 0c 96 bb 1d c6 ea 63 44 52 32 3d 3e 51 6e b2 17 09 51 1c 62 8d c0 39 b0 c6 e0 f1 e8 04 1a 4a 62 95 c4 0a 81 b5 a6 7c 99 02 e7 0a 94 d0 78 eb 70 d6 62 6c 4e 92 a7 65 10 70 6f b1 2e 05 2f f0 b6 c0 e7 39 4a 4a a4 94 2c 75 53 96 5b d3 54 2b 35 da 9d 04 15 56 a8 79 cb 44 6d 0c d3 59 40 17 39 3b 5b 0d 32 ef e9 24 39 d2 96 f1 17 7c 14 62 6c 49 04 33 6b 89 ac 47 39 5f ca 9e 45 19 7a dc 19 8b 73 8e 22 cf f0 a9 c5 2b 89 d7 19 0e 38 79 fc 18 9d 2c c7 51 ca b6 af be e6 89 84 2e 43 a5 0e a7 25 51 25 a4 3e d1 24 eb 2c a3 94 44 fa 88 78 76 16 8f a6 9b 24 84 cd 06 81 56 54 bd 2b ad b2 dd 04 e3 34 91 ae e2 75 81 f4 06 e7 0a 9c 75 08 e7 f1 a6 fc c1 59 e3 21 33 64 cb 5d 56 Data Ascii: $IBNvIerrSsAE7T'jcDR2=>QnQb9Jb\|xpblNepo./9JJ,uS[T+5VyDmY@9;[2$9\|blI3kG9_Ezs"+8y,Q.C%Q%>$,Dxv$VT+4uuY!3d]V
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 89 84 7c 20 c4 eb 3e b9 3a 5b 57 3c b8 63 02 89 90 0f 91 ba df ef c3 7e 82 90 e2 8c 9f 66 bc 87 44 7e 9f 6e 45 3f 04 d2 7b 9e 7e 00 e2 d7 93 e0 f7 fb c9 1e 98 98 10 b0 aa 14 7e 54 15 f7 f7 d3 7f df ef fb 9d 7f 3d 91 55 73 99 40 e2 29 e4 8c ad 78 c0 e0 e8 0d be fa c9 ff 8b 5f bb 76 85 1b 1f be 81 b0 1a 1f 3d 77 e6 87 0c 07 03 86 9b 15 07 07 87 f8 98 a8 ea 92 d1 a0 66 31 9f e2 da 86 81 31 5c db d9 46 23 98 76 1d 21 c1 b5 eb d7 e9 e6 33 8e 6e 1f 30 d8 18 52 0e 2b 26 f3 09 27 fb fb 5c 28 2d 85 d2 94 d6 12 55 c1 c1 ed 7d ba e5 32 07 41 55 15 cb f9 31 69 d9 31 2a 0b c6 3b 17 59 2e e6 08 a9 18 5f dc 42 5c de c5 09 98 b7 9e 79 e7 88 66 80 1e 0b 64 e3 fb b6 40 20 6d 8d 77 91 e8 05 51 58 5c 12 b4 02 c6 17 b6 d8 55 29 f7 a7 45 51 14 65 76 11 10 e9 9c c3 75 1d b3 f9 Data Ascii: \| >:[W<c~fD~nE?{~~T=Us@)x_v=wf11\F#v!3n0R+&'\(-U}2AU1i1*;Y._B\yfd@ mwQX\U)EQevu
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 31 b2 5c 2c b0 e3 4d 96 cb 25 a7 fb f7 18 0e 6b a4 ae 98 a7 84 88 91 24 14 b6 aa b8 7d e7 2e de 07 0a 5b a0 8d c5 45 cf 72 3e a7 69 16 8c 37 c7 7c f6 5b af f0 cf ff e0 53 bc 79 bc 04 55 f0 cc b3 cf f1 f4 73 cf f2 f8 53 4f f3 f3 2f bd c8 f5 ad 4d 06 c2 d3 2e f6 b9 f5 f6 1b 7c e4 f1 c7 40 46 84 4c 74 6d 0b 29 d1 b6 53 b4 2d a8 07 35 c3 b6 23 04 89 d2 1a 53 15 a4 14 40 09 52 bb cc e9 5e 52 90 64 36 d0 ab 6c 5a 41 c5 ec 16 89 32 a1 ad a0 f5 81 d6 35 bd eb c3 67 87 86 d1 18 9b af 67 a9 34 31 04 48 d0 2c 97 7d 62 bd 3f 73 ca 28 99 7b fd a6 98 1d 1a ce 3b 42 00 25 15 5a 69 8c b1 8c 06 03 a2 52 38 1f 73 10 5f d3 f6 6d 82 72 69 89 d2 79 39 29 cd d9 6f 24 84 cc 59 04 3a b7 7c 53 fd 35 d8 b6 ab d9 20 81 36 06 a4 46 00 45 59 e0 3a 87 46 10 7c 47 5d 16 34 4d 43 f2 79 Data Ascii: 1\,M%k$}.[Er>i7\|[SyUsSO/M.\|@FLtm)S-5#S@R^Rd6lZA25gg41H,}b?s({;B%ZiR8s_mriy9)o$Y:\|S5 6FEY:F\|G]4MCy
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: ec 55 cf 72 e0 25 09 58 2e 97 08 a0 30 79 61 95 87 ca 21 a5 5e 48 28 e4 e0 d5 8f 44 3f bc 7f 64 f6 d0 07 91 ab d2 84 12 8c 47 35 a1 ef 91 29 e5 6b 52 8c b8 e8 d8 34 1b 7c ef 30 21 51 17 25 d7 f7 af f1 d6 6b af f2 f4 e1 27 d0 46 b4 92 b4 eb 35 52 49 aa fd eb 34 ed 86 a5 6f 21 05 aa ed 2d b6 27 33 64 e3 10 d2 92 74 49 1f 02 61 71 ce 74 e7 06 ae 6d f9 e1 7b ef b3 b5 b5 cd cf 7f fa 01 d7 76 a6 38 bf a2 28 e1 5b df fc 3a b3 e9 8c e9 64 ca 68 32 41 c9 82 08 ac 97 0b 96 f3 39 c6 47 fa de b1 ee 5a 14 01 93 02 3b 7b fb 9c 9f 2f 39 5d 6c f8 d9 27 8f 08 5a a3 a4 c4 1a 3d 2c 61 c5 f0 6b 73 99 bf 20 85 40 4b 8d d4 62 c8 a7 b8 62 80 af 70 85 2b 5c e1 0a 57 b8 c2 ff 07 b4 31 6c 5d df e3 e4 64 8e ef 1c 9f 3c 7c c8 9b 6f bc 0e 4a b3 ee 3a 4c 55 23 65 42 c9 44 90 e4 10 17 Data Ascii: Ur%X.0ya!^H(D?dG5)kR4\|0!Q%k'F5RI4o!-'3dtIaqtm{v8([:dh2A9GZ;{/9]l'Z=,aks @Kbbp+\W1l]d<\|oJ:LU#eBD
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 6e 08 64 72 f8 90 d5 20 ce 07 d6 9b 86 d7 df f2 f4 21 d1 34 0d 9b a6 a1 ed b3 55 43 22 59 ae 97 34 6d cb fa 60 cd 27 9f fc 2a 2b 38 86 b3 2e 00 99 3c 77 6f df e4 e6 f5 7d 8c 2e 2e ad 1d ab d5 8a 90 3c 65 55 31 99 4e d8 d9 d9 61 bc bb 93 1f df ff c3 de 9b 3d d9 76 9e e7 7d bf 6f 5c 6b ed 79 f7 ee 3e dd e7 f4 19 00 90 10 48 10 04 07 91 22 2d db aa b2 9d a4 52 56 c5 95 e4 22 ce 45 52 b9 ca 75 fe a3 5c 38 17 91 53 ce 55 ca 96 2b b1 a4 48 16 45 68 a0 44 90 20 38 00 c4 78 e6 9e 7b 0f 6b f8 a6 5c 7c 6b f7 01 e5 54 2a 95 48 2e 54 79 bf 55 c0 39 38 85 3e bd d6 da 6b ef 5e ef fb 3e cf ef f9 e2 cb 14 d5 9c a2 ac 32 bd 19 10 b1 3f b6 cd 8a 66 7d 9d a5 1e 75 c3 bd 7b 2f 31 ea d6 5c 5f 5d b3 57 16 b4 6d 83 e8 a9 e5 9d f7 d8 e0 28 46 23 ea d5 35 09 f0 29 a1 47 03 42 65 Data Ascii: ndr !4UC"Y4m`'+8.<wo}..<eU1Na=v}o\ky>H"-RV"ERu\8SU+HEhD 8x{k\\|kTH.TyU98>k^>2?f}u{/1\_]Wm(F#5)GBe
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 51 c5 90 eb b3 33 ae 8d c0 c7 48 13 23 e5 70 c8 a6 59 62 2d 08 2d 71 ba 22 e9 8a 26 09 e6 fb b7 98 cc f6 30 28 46 95 a5 9a 4c 31 83 02 55 5a aa 62 40 51 54 b8 ce 03 39 06 cc b9 8e f3 67 27 b4 f5 1a e7 5a e6 f3 3d 18 94 cc df f8 1a 4f 3e 7a 9f 8d d5 14 b7 6f 11 9e 9e 11 bd 27 06 88 49 10 94 c1 49 9d c1 52 31 dc 78 6c 45 af 4c c8 7c 84 ac 30 b9 5c 2f d9 74 0e df 2f 77 cb d9 98 87 8f 1f 13 42 8e a4 13 21 f2 da ab af 11 db 8e f3 f3 4b bc cf 8a 8e d9 74 ce 65 48 b4 4d 8b d2 92 c9 74 ce 64 b1 cf b2 6d c1 0e 38 1c 6b ae 4d c5 39 92 28 04 49 43 d4 a0 8d 45 a0 fa 34 80 44 59 94 18 63 71 c1 13 c8 c4 f8 cf 73 ed 1a e0 5d ed 6a 57 bb da d5 ae 3e 07 95 e3 37 24 10 b1 85 26 e2 48 b1 43 4b 41 ec 5c 1f 5b 24 6e 68 c4 49 69 5a e7 b8 7d e7 36 1f 7d f4 31 7f f0 27 ff 96 ff Data Ascii: Q3H#pYb--q"&0(FL1UZb@QT9g'Z=O>zo'IIR1xlEL\|0\/t/wB!KteHMtdm8kM9(ICE4DYcqs]jW>7$&HCKA\[$nhIiZ}6}1'
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 0c 11 7e 2d 3d d6 3a 9c b5 9c 1c 1f 93 65 86 bd bd 6b ac ae ad 32 9b a7 38 37 63 0c 9b 1b 1b 68 ad 29 8b fc 47 fb 97 e6 3f a1 2e 1a e0 8b ba a8 8b ba a8 8b ba a8 0f 41 69 ad d9 d9 da c6 48 c9 a5 ed 6d a6 c7 27 18 ad 18 8c 46 69 73 19 02 78 0f a1 27 9e c6 c8 62 b9 a0 28 0a d6 95 e4 74 3e a5 0e 8e 59 db 22 7c ca 92 dc d8 da e2 ef ff e1 1b ac 7d e6 97 d9 58 cf 13 b0 c9 99 5e a6 ec 3e a0 0f 07 d9 37 78 3d 0c 0b fa 09 be 20 78 4f a1 0d 37 af 5e e3 cd 77 ee 70 fb d6 33 2c a7 0b 14 69 5b db 34 0d b3 d9 bc f7 76 8a 7e a3 0c 52 49 8a bc 40 6b 83 75 33 ba ae 23 cb 72 a4 50 78 e7 cf b7 7c b9 d1 3c 7e f4 80 b6 59 52 0d 32 44 14 69 8b 17 62 9f 27 9b a2 56 5c 17 d0 c1 13 4d e8 fd b5 9e 20 d3 26 ec 2c 2e 48 92 56 29 c1 c3 f1 93 09 dd b2 e3 95 6f fd 03 ff fc b3 9f e5 ca Data Ascii: ~-=:ek287ch)G?.AiHm'Fisx'b(t>Y"\|}X^>7x= xO7^wp3,i[4v~RI@ku3#rPx\|<~YR2Dib'V\M &,.HV)o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49746	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	407	OUT	GET /js/TitilliumText.font.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 167674 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	7882	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 6d 61 79 20 6e 6f 74 20 62 65 20 72 65 6d 6f 76 65 64 20 75 6e 64 65 72 20 61 6e 79 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 3a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 31 30 20 62 79 20 41 63 63 61 64 65 6d 69 61 20 64 69 20 42 65 6c 6c 65 20 41 72 74 69 20 64 69 20 55 72 62 69 6e 6f 20 61 6e 64 20 6f 74 68 65 72 73 2e 20 41 6c 6c 0d 0a 20 2a 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 0d 0a 20 2a 20 46 75 6c 6c 20 6e 61 6d 65 3a 0d 0a 20 2a 20 54 69 74 69 6c 6c 69 75 6d 54 65 78 74 32 35 4c 2d 32 35 30 77 74 0d 0a 20 2a Data Ascii: /! The following copyright notice may not be removed under any circumstances. * * Copyright: * Copyright (c) 2008-2010 by Accademia di Belle Arti di Urbino and others. All * rights reserved. * * Full name: * TitilliumText25L-250wt *
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 31 33 35 2c 31 37 2c 32 30 36 2c 31 37 76 31 30 34 2c 30 2c 31 35 37 2c 2d 34 31 2c 31 35 37 2c 2d 31 34 38 76 30 2c 2d 38 37 2c 2d 34 35 2c 2d 31 30 38 2c 2d 31 36 31 2c 2d 31 33 30 76 2d 31 34 31 2c 2d 32 36 2c 2d 32 31 36 2c 2d 35 37 2c 2d 32 31 36 2c 2d 31 39 37 76 30 2c 2d 31 33 30 2c 38 36 2c 2d 31 38 33 2c 32 32 34 2c 2d 31 38 33 76 37 37 2c 30 2c 32 30 31 2c 31 39 2c 32 30 31 2c 31 39 22 2c 22 77 22 3a 35 33 34 7d 2c 22 54 22 3a 7b 22 64 22 3a 22 2d 33 2c 2d 36 33 39 72 30 2c 2d 35 38 72 35 30 30 2c 30 72 30 2c 35 38 72 2d 32 31 38 2c 30 72 30 2c 36 33 39 72 2d 36 31 2c 30 72 30 2c 2d 36 33 39 72 2d 32 32 31 2c 30 22 2c 22 77 22 3a 34 39 35 7d 2c 22 56 22 3a 7b 22 64 22 3a 22 34 39 33 2c 2d 36 39 37 72 36 33 2c 30 72 2d 31 38 35 2c 36 39 37 72 2d Data Ascii: 135,17,206,17v104,0,157,-41,157,-148v0,-87,-45,-108,-161,-130v-141,-26,-216,-57,-216,-197v0,-130,86,-183,224,-183v77,0,201,19,201,19","w":534},"T":{"d":"-3,-639r0,-58r500,0r0,58r-218,0r0,639r-61,0r0,-639r-221,0","w":495},"V":{"d":"493,-697r63,0r-185,697r-
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 33 76 30 2c 30 2c 31 31 37 2c 2d 31 39 2c 31 39 35 2c 2d 31 39 76 31 30 34 2c 30 2c 31 35 34 2c 35 30 2c 31 35 34 2c 31 36 30 78 6d 33 36 33 2c 2d 32 35 34 72 2d 31 36 32 2c 31 35 76 2d 36 38 2c 36 2c 2d 39 33 2c 34 32 2c 2d 39 33 2c 39 37 76 30 2c 36 34 2c 32 39 2c 39 39 2c 37 38 2c 39 39 76 38 35 2c 30 2c 31 37 37 2c 2d 33 34 2c 31 37 37 2c 2d 33 34 72 30 2c 2d 31 37 37 78 6d 31 32 35 2c 2d 36 33 30 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 78 6d 33 32 31 2c 2d 36 33 30 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 22 2c 22 77 22 3a 35 32 32 7d 2c 22 5c 75 30 30 65 33 22 3a 7b 22 64 22 3a 22 34 32 33 2c 2d 33 34 39 72 30 2c 32 36 31 76 32 2c 33 31 2c 33 31 2c 34 31 2c 36 34 2c 34 35 72 2d 33 2c 35 32 76 2d 35 Data Ascii: 3v0,0,117,-19,195,-19v104,0,154,50,154,160xm363,-254r-162,15v-68,6,-93,42,-93,97v0,64,29,99,78,99v85,0,177,-34,177,-34r0,-177xm125,-630r0,-79r58,0r0,79r-58,0xm321,-630r0,-79r58,0r0,79r-58,0","w":522},"\u00e3":{"d":"423,-349r0,261v2,31,31,41,64,45r-3,52v-5
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 2c 30 78 6d 31 39 33 2c 2d 38 32 37 72 30 2c 2d 37 39 72 35 38 2c 30 72 30 2c 37 39 72 2d 35 38 2c 30 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 63 65 22 3a 7b 22 64 22 3a 22 38 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 39 37 72 2d 36 31 2c 30 78 6d 2d 34 30 2c 2d 38 30 33 72 31 33 34 2c 2d 31 33 31 72 35 33 2c 30 72 31 33 33 2c 31 33 31 72 2d 37 31 2c 30 72 2d 38 38 2c 2d 38 33 72 2d 38 38 2c 38 33 72 2d 37 33 2c 30 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 63 64 22 3a 7b 22 64 22 3a 22 38 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 39 37 72 2d 36 31 2c 30 78 6d 31 34 2c 2d 38 33 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 32 33 39 7d 2c 22 5c 75 30 30 64 32 22 3a 7b 22 64 Data Ascii: ,0xm193,-827r0,-79r58,0r0,79r-58,0","w":239},"\u00ce":{"d":"89,0r0,-697r61,0r0,697r-61,0xm-40,-803r134,-131r53,0r133,131r-71,0r-88,-83r-88,83r-73,0","w":239},"\u00cd":{"d":"89,0r0,-697r61,0r0,697r-61,0xm14,-838r208,-95r23,55r-210,89","w":239},"\u00d2":{"d
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 72 2d 31 39 32 2c 30 72 30 2c 32 36 39 76 31 36 32 2c 2d 37 2c 33 35 30 2c 34 35 2c 33 35 30 2c 2d 31 34 31 76 30 2c 2d 31 32 31 2c 2d 31 30 36 2c 2d 31 32 38 2c 2d 31 35 38 2c 2d 31 32 38 78 6d 33 33 39 2c 2d 36 34 30 72 2d 31 38 33 2c 30 72 30 2c 32 35 38 72 31 39 32 2c 30 76 39 35 2c 30 2c 31 33 34 2c 2d 34 38 2c 31 33 34 2c 2d 31 33 38 76 30 2c 2d 38 36 2c 2d 34 36 2c 2d 31 32 30 2c 2d 31 34 33 2c 2d 31 32 30 22 2c 22 77 22 3a 36 32 31 7d 2c 22 44 22 3a 7b 22 64 22 3a 22 33 34 36 2c 30 72 2d 32 35 31 2c 30 72 30 2c 2d 36 39 37 72 32 35 31 2c 30 76 31 39 32 2c 30 2c 32 34 38 2c 31 34 39 2c 32 34 38 2c 33 33 38 76 30 2c 31 39 30 2c 2d 35 35 2c 33 35 39 2c 2d 32 34 38 2c 33 35 39 78 6d 35 33 30 2c 2d 33 35 39 76 30 2c 2d 31 34 38 2c 2d 33 38 2c 2d 32 38 Data Ascii: r-192,0r0,269v162,-7,350,45,350,-141v0,-121,-106,-128,-158,-128xm339,-640r-183,0r0,258r192,0v95,0,134,-48,134,-138v0,-86,-46,-120,-143,-120","w":621},"D":{"d":"346,0r-251,0r0,-697r251,0v192,0,248,149,248,338v0,190,-55,359,-248,359xm530,-359v0,-148,-38,-28
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 33 72 2d 31 37 35 2c 30 72 30 2c 33 30 36 72 31 36 32 2c 30 72 37 38 2c 2d 31 36 72 31 31 2c 35 32 72 2d 38 32 2c 31 38 72 2d 33 31 36 2c 30 72 30 2c 2d 35 34 72 38 38 2c 30 72 30 2c 2d 33 30 36 72 2d 36 38 2c 30 72 30 2c 2d 35 33 72 36 38 2c 30 72 30 2c 2d 36 34 76 30 2c 2d 31 36 36 2c 34 39 2c 2d 32 30 33 2c 31 34 38 2c 2d 32 30 33 76 34 33 2c 30 2c 31 32 33 2c 31 33 2c 31 32 33 2c 31 33 22 7d 2c 22 5c 75 30 30 62 36 22 3a 7b 22 64 22 3a 22 33 38 36 2c 30 72 30 2c 2d 36 34 39 72 2d 31 33 30 2c 30 72 30 2c 36 34 39 72 2d 35 35 2c 30 72 30 2c 2d 33 33 39 76 2d 31 31 32 2c 33 2c 2d 31 39 33 2c 2d 37 30 2c 2d 31 39 33 2c 2d 31 37 39 76 30 2c 2d 31 30 38 2c 38 31 2c 2d 31 38 32 2c 31 38 36 2c 2d 31 38 32 72 33 32 39 2c 30 72 30 2c 35 31 72 2d 38 32 2c 30 72 Data Ascii: 3r-175,0r0,306r162,0r78,-16r11,52r-82,18r-316,0r0,-54r88,0r0,-306r-68,0r0,-53r68,0r0,-64v0,-166,49,-203,148,-203v43,0,123,13,123,13"},"\u00b6":{"d":"386,0r0,-649r-130,0r0,649r-55,0r0,-339v-112,3,-193,-70,-193,-179v0,-108,81,-182,186,-182r329,0r0,51r-82,0r
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 32 2c 2d 31 37 30 72 2d 31 35 34 2c 33 37 37 76 31 37 2c 34 2c 33 37 2c 36 2c 36 30 2c 36 78 6d 31 34 38 2c 2d 36 34 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 35 32 37 7d 2c 22 5c 75 30 30 61 31 22 3a 7b 22 64 22 3a 22 33 30 34 2c 2d 34 39 39 72 30 2c 31 30 31 72 2d 36 36 2c 30 72 30 2c 2d 31 30 31 72 36 36 2c 30 78 6d 33 30 31 2c 2d 32 37 34 72 32 2c 34 37 34 72 2d 36 34 2c 30 72 32 2c 2d 34 37 34 72 36 30 2c 30 22 7d 2c 22 5c 75 32 30 31 61 22 3a 7b 22 64 22 3a 22 31 33 38 2c 2d 31 31 35 72 2d 34 32 2c 32 31 31 72 2d 36 33 2c 30 72 35 31 2c 2d 32 31 31 72 35 34 2c 30 22 2c 22 77 22 3a 31 38 33 7d 2c 22 5c 75 30 33 30 30 22 3a 7b 22 64 22 3a 22 33 38 2c 2d 37 34 33 72 32 30 38 2c 39 35 72 2d 32 30 2c 34 37 72 Data Ascii: 2,-170r-154,377v17,4,37,6,60,6xm148,-648r208,-95r23,55r-210,89","w":527},"\u00a1":{"d":"304,-499r0,101r-66,0r0,-101r66,0xm301,-274r2,474r-64,0r2,-474r60,0"},"\u201a":{"d":"138,-115r-42,211r-63,0r51,-211r54,0","w":183},"\u0300":{"d":"38,-743r208,95r-20,47r
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 30 72 2d 35 31 2c 30 22 2c 22 77 22 3a 35 39 36 7d 2c 22 5c 75 30 31 33 39 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 33 38 72 33 31 38 2c 30 72 30 2c 35 39 78 6d 31 34 35 2c 2d 38 33 38 72 32 30 38 2c 2d 39 35 72 32 33 2c 35 35 72 2d 32 31 30 2c 38 39 22 2c 22 77 22 3a 35 31 39 7d 2c 22 5c 75 30 31 33 64 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 2c 30 72 30 2c 36 33 38 72 33 31 38 2c 30 72 30 2c 35 39 78 6d 34 34 31 2c 2d 36 39 37 72 30 2c 32 32 37 72 2d 35 38 2c 30 72 30 2c 2d 32 32 37 72 35 38 2c 30 22 2c 22 77 22 3a 35 31 39 7d 2c 22 5c 75 30 31 33 62 22 3a 7b 22 64 22 3a 22 34 37 34 2c 30 72 2d 33 37 39 2c 30 72 30 2c 2d 36 39 37 72 36 31 Data Ascii: 0r-51,0","w":596},"\u0139":{"d":"474,0r-379,0r0,-697r61,0r0,638r318,0r0,59xm145,-838r208,-95r23,55r-210,89","w":519},"\u013d":{"d":"474,0r-379,0r0,-697r61,0r0,638r318,0r0,59xm441,-697r0,227r-58,0r0,-227r58,0","w":519},"\u013b":{"d":"474,0r-379,0r0,-697r61
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 2d 31 34 38 2c 2d 39 36 2c 2d 31 34 38 76 2d 37 33 2c 30 2c 2d 31 39 30 2c 31 35 2c 2d 31 39 30 2c 31 35 72 2d 34 2c 2d 35 33 76 30 2c 30 2c 31 31 38 2c 2d 31 39 2c 31 39 36 2c 2d 31 39 76 31 30 34 2c 30 2c 31 35 33 2c 35 30 2c 31 35 33 2c 31 36 30 78 6d 33 36 38 2c 2d 32 35 34 72 2d 31 36 33 2c 31 35 76 2d 36 37 2c 36 2c 2d 39 32 2c 34 32 2c 2d 39 32 2c 39 37 76 30 2c 36 34 2c 32 39 2c 39 39 2c 37 38 2c 39 39 76 38 35 2c 30 2c 31 37 37 2c 2d 33 34 2c 31 37 37 2c 2d 33 34 72 30 2c 2d 31 37 37 78 6d 31 31 36 2c 2d 36 33 37 72 30 2c 2d 35 33 72 32 38 32 2c 30 72 30 2c 35 33 72 2d 32 38 32 2c 30 22 2c 22 77 22 3a 35 32 30 7d 2c 22 5c 75 30 31 30 33 22 3a 7b 22 64 22 3a 22 34 32 37 2c 2d 33 34 39 72 30 2c 32 36 31 76 33 2c 33 31 2c 33 32 2c 34 31 2c 36 35 2c Data Ascii: -148,-96,-148v-73,0,-190,15,-190,15r-4,-53v0,0,118,-19,196,-19v104,0,153,50,153,160xm368,-254r-163,15v-67,6,-92,42,-92,97v0,64,29,99,78,99v85,0,177,-34,177,-34r0,-177xm116,-637r0,-53r282,0r0,53r-282,0","w":520},"\u0103":{"d":"427,-349r0,261v3,31,32,41,65,
2024-10-24 22:45:16 UTC	8000	IN	Data Raw: 39 35 76 2d 37 35 2c 30 2c 2d 31 35 35 2c 33 33 2c 2d 31 35 35 2c 33 33 72 30 2c 34 32 31 78 6d 31 33 34 2c 2d 37 38 30 72 31 32 34 2c 2d 31 34 32 72 34 38 2c 30 72 31 32 34 2c 31 34 32 72 2d 36 38 2c 30 72 2d 37 39 2c 2d 39 30 72 2d 38 31 2c 39 30 72 2d 36 38 2c 30 22 2c 22 77 22 3a 35 36 35 7d 2c 22 5c 75 30 31 32 37 22 3a 7b 22 64 22 3a 22 32 37 2c 2d 35 39 32 72 30 2c 2d 35 33 72 36 35 2c 30 72 30 2c 2d 37 37 72 36 30 2c 30 72 30 2c 37 37 72 31 35 37 2c 30 72 30 2c 35 33 72 2d 31 35 37 2c 30 72 30 2c 31 31 38 76 30 2c 30 2c 38 35 2c 2d 33 35 2c 31 36 32 2c 2d 33 35 76 31 33 37 2c 30 2c 31 36 37 2c 36 33 2c 31 36 37 2c 32 34 39 72 30 2c 32 36 30 72 2d 36 30 2c 30 72 30 2c 2d 32 35 39 76 30 2c 2d 31 34 36 2c 2d 31 36 2c 2d 31 39 35 2c 2d 31 31 34 2c 2d Data Ascii: 95v-75,0,-155,33,-155,33r0,421xm134,-780r124,-142r48,0r124,142r-68,0r-79,-90r-81,90r-68,0","w":565},"\u0127":{"d":"27,-592r0,-53r65,0r0,-77r60,0r0,77r157,0r0,53r-157,0r0,118v0,0,85,-35,162,-35v137,0,167,63,167,249r0,260r-60,0r0,-259v0,-146,-16,-195,-114,-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49747	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:16 UTC	398	OUT	GET /js/shortcode.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:16 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:16 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 8621 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:16 UTC	7884	IN	Data Raw: 2f 2a 4d 61 78 78 20 53 69 6d 70 6c 65 20 41 63 63 6f 72 64 69 6f 6e 3b 0d 0a 2f 2f 41 75 74 68 6f 72 20 4d 61 6e 68 0d 0a 2f 2f 45 6d 61 69 6c 3a 73 69 6e 63 65 2e 75 2e 6c 65 66 74 40 67 6d 61 69 6c 2e 63 6f 6d 0d 0a 2f 2f 44 61 74 65 20 43 72 65 61 74 65 64 3a 20 30 39 2f 31 31 2f 32 30 31 31 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 0d 0a 7b 0d 0a 20 20 20 20 24 2e 66 6e 2e 6d 53 69 6d 70 6c 65 54 6f 67 67 6c 65 41 63 63 6f 72 64 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0d 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 73 68 6f 77 46 69 72 73 74 3a 74 72 75 65 2c 20 2f 2a 73 68 6f 77 20 66 69 72 73 74 20 74 6f 67 67 6c 65 20 63 6f Data Ascii: /Maxx Simple Accordion;//Author Manh//Email:since.u.left@gmail.com//Date Created: 09/11/2011/(function($){ $.fn.mSimpleToggleAccordion = function(options){var defaults = { showFirst:true, /*show first toggle co
2024-10-24 22:45:16 UTC	737	IN	Data Raw: 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 7d 29 3b 0d 0a 09 0d 0a 09 24 28 22 2e 6d 61 78 78 2d 62 75 74 74 6f 6e 22 29 2e 6d 53 69 6d 70 6c 65 48 6f 76 65 72 46 61 64 65 28 29 3b 0d 0a 09 0d 0a 09 24 28 22 2e 69 63 6f 6e 2d 62 6f 78 65 73 2d 77 72 61 70 70 65 72 22 29 2e 6d 49 63 6f 6e 42 6f 78 57 72 61 70 28 29 3b 0d 0a 09 0d 0a 09 24 28 22 23 74 77 69 74 74 65 72 22 29 2e 6d 54 77 69 74 74 65 72 49 6e 74 65 72 67 72 61 74 6f 72 28 7b 0d 0a 09 09 75 73 65 72 4e 61 6d 65 3a 20 22 4d 61 78 78 78 44 69 6e 68 22 2c 0d 0a 09 09 6e 6f 4f 66 54 77 65 65 74 73 3a 20 33 2c 0d 0a 09 09 6c 6f 61 64 65 72 54 65 78 74 3a 20 22 4c 6f 61 64 69 6e 67 20 74 77 65 65 74 73 2e 2e 2e 22 0d 0a 09 7d 29 3b 0d 0a 0d 0a 7d 29 3b 0d 0a 0d 0a 0d 0a 24 28 64 6f 63 Data Ascii: return false;});$(".maxx-button").mSimpleHoverFade();$(".icon-boxes-wrapper").mIconBoxWrap();$("#twitter").mTwitterIntergrator({userName: "MaxxxDinh",noOfTweets: 3,loaderText: "Loading tweets..."});});$(doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49749	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	396	OUT	GET /js/scripts.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 103058 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:17 UTC	7882	IN	Data Raw: 2f 2a 2a 0d 0a 2a 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 72 36 20 2f 2f 20 32 30 31 31 2e 30 32 2e 32 36 20 2f 2f 20 6a 51 75 65 72 79 20 31 2e 35 2e 31 2b 0d 0a 2a 20 3c 68 74 74 70 3a 2f 2f 63 68 65 72 6e 65 2e 6e 65 74 2f 62 72 69 61 6e 2f 72 65 73 6f 75 72 63 65 73 2f 6a 71 75 65 72 79 2e 68 6f 76 65 72 49 6e 74 65 6e 74 2e 68 74 6d 6c 3e 0d 0a 2a 20 0d 0a 2a 20 40 70 61 72 61 6d 20 20 66 20 20 6f 6e 4d 6f 75 73 65 4f 76 65 72 20 66 75 6e 63 74 69 6f 6e 20 7c 7c 20 41 6e 20 6f 62 6a 65 63 74 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 0d 0a 2a 20 40 70 61 72 61 6d 20 20 67 20 20 6f 6e 4d 6f 75 73 65 4f 75 74 20 66 75 6e 63 74 69 6f 6e 20 20 7c 7c 20 4e 6f 74 68 69 6e 67 20 28 75 73 65 20 63 6f 6e 66 69 67 75 72 61 Data Ascii: /*** hoverIntent r6 // 2011.02.26 // jQuery 1.5.1+* <http://cherne.net/brian/resources/jquery.hoverIntent.html>* * @param f onMouseOver function \|\| An object with configuration options* @param g onMouseOut function \|\| Nothing (use configura
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 62 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 63 2a 28 37 2e 35 36 32 35 2a 28 74 2d 3d 28 32 2e 36 32 35 2f 32 2e 37 35 29 29 2a 74 20 2b 20 2e 39 38 34 33 37 35 29 20 2b 20 62 3b 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 09 65 61 73 65 49 6e 4f 75 74 42 6f 75 6e 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 78 2c 20 74 2c 20 62 2c 20 63 2c 20 64 29 20 7b 0d 0a 09 09 69 66 20 28 74 20 3c 20 64 2f 32 29 20 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 65 61 73 65 49 6e 42 6f 75 6e 63 65 20 28 78 2c 20 74 2a 32 2c 20 30 2c 20 63 2c 20 64 29 20 2a 20 2e 35 20 2b 20 62 3b 0d 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 65 61 73 65 4f 75 74 42 6f 75 6e 63 65 20 28 78 2c 20 74 2a 32 2d 64 2c 20 Data Ascii: b;} else {return c(7.5625(t-=(2.625/2.75))t + .984375) + b;}},easeInOutBounce: function (x, t, b, c, d) {if (t < d/2) return jQuery.easing.easeInBounce (x, t2, 0, c, d) * .5 + b;return jQuery.easing.easeOutBounce (x, t*2-d,
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 27 74 69 74 6c 65 27 29 29 3b 69 66 28 70 70 5f 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3e 33 30 29 73 65 74 74 69 6e 67 73 2e 6f 76 65 72 6c 61 79 5f 67 61 6c 6c 65 72 79 3d 66 61 6c 73 65 3b 73 65 74 5f 70 6f 73 69 74 69 6f 6e 3d 6a 51 75 65 72 79 2e 69 6e 41 72 72 61 79 28 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 68 72 65 66 27 29 2c 70 70 5f 69 6d 61 67 65 73 29 3b 72 65 6c 5f 69 6e 64 65 78 3d 28 69 73 53 65 74 29 3f 73 65 74 5f 70 6f 73 69 74 69 6f 6e 3a 24 28 22 61 5b 72 65 6c 5e 3d 27 22 2b 74 68 65 52 65 6c 2b 22 27 5d 22 29 2e 69 6e 64 65 78 28 24 28 74 68 69 73 29 29 3b 5f 62 75 69 6c 64 5f 6f 76 65 72 6c 61 79 28 74 68 69 73 29 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 61 6c 6c 6f 77 5f 72 65 73 69 7a 65 29 0d 0a 24 28 77 69 6e 64 6f 77 29 2e 62 Data Ascii: 'title'));if(pp_images.length>30)settings.overlay_gallery=false;set_position=jQuery.inArray($(this).attr('href'),pp_images);rel_index=(isSet)?set_position:$("a[rel^='"+theRel+"']").index($(this));_build_overlay(this);if(settings.allow_resize)$(window).b
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 65 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 70 70 5f 70 69 63 5f 68 6f 6c 64 65 72 2e 66 69 6e 64 28 27 2e 70 70 5f 70 61 75 73 65 27 29 2e 75 6e 62 69 6e 64 28 27 63 6c 69 63 6b 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 70 70 5f 70 61 75 73 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 70 70 5f 70 6c 61 79 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 73 74 61 72 74 53 6c 69 64 65 73 68 6f 77 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 29 3b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 70 70 5f 73 6c 69 64 65 73 68 6f 77 29 3b 70 70 5f 73 6c 69 64 65 73 68 6f 77 3d 75 6e 64 65 66 69 6e 65 64 3b 7d 0d 0a 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f Data Ascii: eshow=function(){$pp_pic_holder.find('.pp_pause').unbind('click').removeClass('pp_pause').addClass('pp_play').click(function(){$.prettyPhoto.startSlideshow();return false;});clearInterval(pp_slideshow);pp_slideshow=undefined;}$.prettyPhoto.close=functio
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 73 27 29 2e 61 66 74 65 72 28 74 6f 49 6e 6a 65 63 74 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 3d 24 28 27 2e 70 70 5f 70 69 63 5f 68 6f 6c 64 65 72 20 2e 70 70 5f 67 61 6c 6c 65 72 79 27 29 2c 24 70 70 5f 67 61 6c 6c 65 72 79 5f 6c 69 3d 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e 64 28 27 6c 69 27 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e 64 28 27 2e 70 70 5f 61 72 72 6f 77 5f 6e 65 78 74 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 63 68 61 6e 67 65 47 61 6c 6c 65 72 79 50 61 67 65 28 27 6e 65 78 74 27 29 3b 24 2e 70 72 65 74 74 79 50 68 6f 74 6f 2e 73 74 6f 70 53 6c 69 64 65 73 68 6f 77 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 29 3b 24 70 70 5f 67 61 6c 6c 65 72 79 2e 66 69 6e Data Ascii: s').after(toInject);$pp_gallery=$('.pp_pic_holder .pp_gallery'),$pp_gallery_li=$pp_gallery.find('li');$pp_gallery.find('.pp_arrow_next').click(function(){$.prettyPhoto.changeGalleryPage('next');$.prettyPhoto.stopSlideshow();return false;});$pp_gallery.fin
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 27 29 29 20 7c 7c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 4f 66 66 73 65 74 2e 74 6f 70 20 2d 3d 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 74 6f 70 27 29 29 20 7c 7c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 4f 66 66 73 65 74 2e 6c 65 66 74 20 2d 3d 20 28 70 61 72 73 65 46 6c 6f 61 74 28 24 63 6f 72 72 65 63 74 69 6f 6e 50 61 72 65 6e 74 2e 63 73 73 28 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 29 29 20 7c 7c Data Ascii: (parseFloat($correctionParent.css('border-left-width')) \|\| 0); correctionOffset.top -= (parseFloat($correctionParent.css('margin-top')) \|\| 0); correctionOffset.left -= (parseFloat($correctionParent.css('margin-left')) \|\|
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 28 27 5b 27 20 2b 20 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 20 2b 20 27 3d 27 20 2b 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 29 20 2b 20 27 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 73 74 45 6c 65 6d 65 6e 74 20 3d 20 24 63 6f 6c 6c 65 63 74 69 6f 6e 2e 66 69 6c 74 65 72 28 27 5b 27 20 2b 20 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 20 2b 20 27 3d 27 20 2b 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 6f 70 74 69 6f 6e 73 2e 61 74 74 72 69 62 75 74 65 29 20 2b 20 27 5d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 Data Ascii: ('[' + options.attribute + '=' + $(this).attr(options.attribute) + ']'); destElement = $collection.filter('[' + options.attribute + '=' + $(this).attr(options.attribute) + ']'); } va
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 09 09 09 09 0d 0a 09 09 09 09 09 69 6d 70 6f 72 74 65 64 53 72 63 2e 70 75 73 68 28 69 53 72 63 29 3b 0d 0a 09 09 09 09 09 69 6d 70 6f 72 74 65 64 2e 70 75 73 68 28 73 68 65 65 74 73 5b 73 68 65 65 74 49 6e 64 65 78 5d 2e 69 6d 70 6f 72 74 73 5b 69 49 6d 70 6f 72 74 5d 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 0d 0a 09 09 09 09 0d 0a 09 09 09 7d 0d 0a 09 09 7d 2f 2f 6c 6f 6f 70 0d 0a 09 09 69 66 28 69 6d 70 6f 72 74 65 64 2e 6c 65 6e 67 74 68 29 7b 0d 0a 09 09 09 70 61 72 73 65 43 53 53 28 69 6d 70 6f 72 74 65 64 2c 20 69 6d 70 6f 72 74 65 64 53 72 63 29 3b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 64 6f 77 6e 6c 6f 61 64 73 20 3d 20 73 65 74 74 69 6e 67 73 2e 73 69 6d 75 6c 74 61 6e 65 6f 75 73 43 61 Data Ascii: importedSrc.push(iSrc);imported.push(sheets[sheetIndex].imports[iImport]);}}}//loopif(imported.length){parseCSS(imported, importedSrc);return false;}var downloads = settings.simultaneousCa
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 63 74 65 72 73 2e 22 29 2c 0d 0a 09 09 72 61 6e 67 65 6c 65 6e 67 74 68 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 62 65 74 77 65 65 6e 20 7b 30 7d 20 61 6e 64 20 7b 31 7d 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2e 22 29 2c 0d 0a 09 09 72 61 6e 67 65 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 62 65 74 77 65 65 6e 20 7b 30 7d 20 61 6e 64 20 7b 31 7d 2e 22 29 2c 0d 0a 09 09 6d 61 78 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 6c 65 73 73 20 74 68 61 6e 20 6f 72 20 65 71 75 61 6c 20 74 6f 20 7b 30 7d 2e 22 29 2c 0d 0a 09 09 6d 69 6e 3a 20 24 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 Data Ascii: cters."),rangelength: $.format("Please enter a value between {0} and {1} characters long."),range: $.format("Please enter a value between {0} and {1}."),max: $.format("Please enter a value less than or equal to {0}."),min: $.format("Please
2024-10-24 22:45:17 UTC	8000	IN	Data Raw: 0a 09 09 2f 2f 20 72 65 74 75 72 6e 20 74 68 65 20 63 75 73 74 6f 6d 20 6d 65 73 73 61 67 65 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 65 6c 65 6d 65 6e 74 20 6e 61 6d 65 20 61 6e 64 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 65 74 68 6f 64 0d 0a 09 09 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6e 61 6d 65 2c 20 6d 65 74 68 6f 64 20 29 20 7b 0d 0a 09 09 09 76 61 72 20 6d 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 65 73 73 61 67 65 73 5b 6e 61 6d 65 5d 3b 0d 0a 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 28 6d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 20 53 74 72 69 6e 67 0d 0a 09 09 09 09 3f 20 6d 0d 0a 09 09 09 09 3a 20 6d 5b 6d 65 74 68 6f 64 5d 29 3b 0d 0a 09 09 7d 2c 0d 0a 09 09 0d 0a 09 09 2f 2f 20 72 65 Data Ascii: // return the custom message for the given element name and validation methodcustomMessage: function( name, method ) {var m = this.settings.messages[name];return m && (m.constructor == String? m: m[method]);},// re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49750	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	397	OUT	GET /js/init_js.php HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent,Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
2024-10-24 22:45:17 UTC	391	IN	Data Raw: 31 37 62 0d 0a 0d 0a 0d 0a 0d 0a 76 61 72 20 24 5f 5f 41 41 20 09 3d 20 27 2f 68 6f 6d 65 2f 77 77 77 2f 70 33 35 32 36 37 36 2f 68 74 6d 6c 2f 77 65 62 73 65 69 74 65 2f 2f 61 64 6d 69 6e 27 3b 0d 0a 76 61 72 20 24 5f 5f 41 52 20 09 3d 20 27 2f 61 64 6d 69 6e 27 3b 0d 0a 76 61 72 20 24 5f 5f 41 48 09 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 2f 61 64 6d 69 6e 27 3b 0d 0a 0d 0a 76 61 72 20 24 5f 5f 46 52 09 3d 20 27 2f 68 6f 6d 65 2f 77 77 77 2f 70 33 35 32 36 37 36 2f 68 74 6d 6c 2f 77 65 62 73 65 69 74 65 2f 27 3b 0d 0a 76 61 72 20 24 5f 5f 46 41 09 3d 20 27 27 3b 0d 0a 76 61 72 20 24 5f 5f 46 48 09 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 69 74 61 6e 61 2e 64 65 27 3b 0d 0a 0d 0a 76 61 72 20 24 5f 5f 55 41 20 09 3d Data Ascii: 17bvar $__AA = '/home/www/p352676/html/webseite//admin';var $__AR = '/admin';var $__AH= 'https://www.ritana.de/admin';var $__FR= '/home/www/p352676/html/webseite/';var $__FA= '';var $__FH= 'https://www.ritana.de';var $__UA =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49751	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	647	OUT	GET /uploads/teaser_fernwartung.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 3129 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:17 UTC	3129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b b6 49 44 41 54 78 9c ed da 4d 6c 1c e7 7d c7 f1 ef bc ec 2b 97 e4 2e b9 cb 25 65 4a 24 2d 4a 94 ac e8 c5 a0 e5 d8 89 6a 24 35 90 d8 35 ec 5c 0c 04 30 90 06 bd b8 45 12 e4 12 14 81 0f 06 52 a0 6d ea 4b 8e 0d d0 4b 2f 35 5c 34 a9 d1 1a 69 93 b4 b6 9b 17 49 b6 24 5b 56 2d 4a 34 45 4a 14 45 ae c8 e5 72 5f b9 2f dc b7 99 1e f6 d9 d1 52 4b 49 95 2d 99 ab e0 ff 39 91 f3 cc ce 3c cf ec fe e6 79 99 d1 5e f8 c5 1b 36 42 08 f4 ed ae 80 10 9d Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<IDATxMl}+.%eJ$-Jj$55\0ERmKK/5\4iI$[V-J4EJEr_/RKI-9<y^6B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49752	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	642	OUT	GET /images/teaser_shaddow.jpg HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 2233 Cache-Control: max-age=2592000, public Content-Type: image/jpeg
2024-10-24 22:45:17 UTC	2233	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 53 00 00 ff e1 03 29 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyS)http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49753	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	643	OUT	GET /uploads/teaser_partner.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:16 GMT Accept-Ranges: bytes Content-Length: 1972 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:17 UTC	1972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 07 31 49 44 41 54 78 9c ed da 5b 70 54 77 01 c7 f1 ef 7f 77 cf de b2 9b db e6 42 08 86 12 5b 86 12 ae 2d 1d 6b 99 aa a5 94 99 28 76 aa a3 9d ea 03 63 db 17 5f fa e4 f4 bd fa ec 8b 8f 8e 3e 68 1d c7 d6 3a 2a 9d b1 a5 e3 85 16 a7 f6 86 a5 31 68 a0 40 a1 21 10 12 72 cf de 77 cf 39 3e ec 3f 9b 84 04 9a 70 8b 98 df e7 69 39 39 e7 7f fe b3 9c 6f ce d9 ff c6 74 75 75 f9 88 08 81 95 9e 80 c8 ff 0a c5 20 62 29 06 11 4b 31 88 58 8a 41 c4 52 0c Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<1IDATx[pTwwB[-k(vc_>h:*1h@!rw9>?pi99otuu b)K1XAR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49754	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	648	OUT	GET /images/background.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 21745 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:17 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 17 00 00 02 29 08 02 00 00 00 07 29 eb c3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR))pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-24 22:45:18 UTC	8000	IN	Data Raw: 92 eb 4c 17 42 20 41 82 5c 27 f1 76 01 0f 72 ac 76 01 47 68 f6 59 c8 ec b8 cd 15 4e a1 e3 43 bb e0 40 14 44 08 91 a1 11 1a 63 26 68 bb 80 23 84 e4 ba 41 8f 1a 43 a8 33 25 24 c8 59 11 ea 21 c1 11 9a 6c 34 1a 8c 79 81 4c 09 66 33 96 64 e1 50 4c 80 90 d5 a3 b4 49 29 10 42 78 ae eb 36 5e 9d 5d e8 fa fa 7a 0c 21 8a 29 b9 21 74 3a 9d 70 84 9a a6 19 43 c8 cc 75 2c 84 f0 d1 08 9e 4e 60 21 d4 34 0d 0b 21 eb 2c 34 01 42 d4 76 61 50 d2 11 a2 9b 52 27 7b 48 ac 44 b1 10 c2 4d 09 42 62 e6 3a 58 6a 77 b2 47 c8 9a eb 90 5d 23 73 13 09 41 e8 78 3c 22 b9 ce 4a 14 6e 4a 10 a1 aa aa 20 33 9a a4 e4 3a 84 19 1c 21 cd 94 a0 cf 98 47 19 b8 c9 2d 10 42 bf db 85 5f bf 7e c1 af e2 32 5c ae 1b ac ef 88 08 6d 36 1b 3a 42 6f 6f 6f f0 bc 8f 16 e4 4c a9 31 83 48 4a ae eb 21 d1 82 9c d9 Data Ascii: LB A\'vrvGhYNC@Dc&h#AC3%$Y!l4yLf3dPLI)Bx6^]z!)!t:pCu,N`!4!,4BvaPR'{HDMBb:XjwG]#sAx<"JnJ 3:!G-B_~2\m6:BoooL1HJ!
2024-10-24 22:45:18 UTC	5844	IN	Data Raw: a1 23 f4 fa fa fa e9 d3 27 ba d4 20 c1 25 44 68 b3 d9 3c 3c 3c 40 89 bb 10 6c 17 3c 11 a2 e7 3a 6b 90 83 95 37 b7 a0 63 05 b9 f3 f9 8c 48 0d a1 e3 f1 48 24 aa ae 6b 78 b2 c1 44 08 36 e0 b8 6c db f6 ed ed 8d 2e 59 08 21 d2 4a c7 6f 8a 7c 10 7a 7d 7d fd fc f9 33 5d d2 11 da 6c 36 8f 8f 8f 3d 24 b8 7c 7b 7b 7b 78 78 80 f2 fe fe be 47 c8 94 1a 33 88 34 99 41 10 da ed 76 65 59 22 52 43 a8 28 8a 31 a2 4c 84 10 a2 8e c7 23 d2 d7 9d 4e a7 ba ae 45 88 32 11 42 64 5d d7 87 c3 61 4c 36 4d b3 db ed 7a c0 58 92 45 94 52 6a b3 d9 20 d2 07 a1 97 97 97 22 21 24 88 50 17 e4 12 42 44 84 a0 47 cd 88 10 6e 59 56 3a be 7e fd 9a 77 77 57 a4 63 e7 43 54 20 84 4c a2 e8 08 6d b7 db db db 5b 44 b2 10 c2 4d 29 12 84 10 a2 ac 08 9d 4e 27 a2 a4 20 e4 66 4a e2 08 f9 9b d2 87 76 e1 f5 Data Ascii: #' %Dh<<<@l<:k7cHH$kxD6l.Y!Jo\|z}}3]l6=$\|{{{xxG34AveY"RC(1L#NE2Bd]aL6MzXERj "!$PBDGnYV:~wwWcCT Lm[DM)N' fJv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49755	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:17 UTC	649	OUT	GET /images/slider-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:17 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:17 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 13267 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:17 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 3c 00 00 01 af 08 06 00 00 00 b7 a0 c5 a9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR<tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-10-24 22:45:18 UTC	5366	IN	Data Raw: 5b 84 0c bf 9b e4 d6 98 dc ad 2e 9b 2a 0c 67 d9 da e2 e3 9a d3 79 8d f1 ec 29 87 b3 e6 e5 ac f9 3e 73 5e 8f 98 e6 b5 73 ab 3d e3 28 e9 77 e6 79 33 87 4c cb ce db 31 aa ba 2b 1d 57 e9 78 fa e3 f5 52 cb 92 92 f5 69 7a bc 2f 69 a5 72 d2 3a bc f7 c4 fd e6 4e 5c ee 9b db d5 95 56 ee a7 e7 a9 0b c3 c9 5d 9d 4f 13 bd b5 e7 1d 64 bb 99 6c 3c 2f ba 1d 02 91 67 9f af 05 23 4b 27 de 33 e1 ca ea f4 0f d3 f7 6c be 87 0d ea d9 55 ed cc b3 45 8a 12 e6 c9 49 7b ba 0c 16 5b b4 24 f3 39 97 b4 2e b6 04 c9 a5 c5 b5 b7 a4 2c 84 2d ed 24 5c 99 4b 9b bb 49 19 3d eb 66 72 95 b8 59 b8 7a f8 f8 fd de 0a 76 49 0b 9a a5 f2 cb 5d 7d 59 bb 1a 9b 7e f6 50 46 cf ba 59 69 bd 32 5b 66 4d c1 95 8d 85 83 55 ae 35 ce 6c 0b 94 4c 3f fd 38 da cc 7e 69 b1 b5 d6 64 39 76 0b dd 3e 7d 5e 19 0c 95 Data Ascii: [.*gy)>s^s=(wy3L1+WxRiz/ir:N\V]Odl</g#K'3lUEI{[$9.,-$\KI=frYzvI]}Y~PFYi2[fMU5lL?8~id9v>}^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49757	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:18 UTC	414	OUT	GET /js/autocomplete/autocomplete.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:18 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:18 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:22 GMT Accept-Ranges: bytes Content-Length: 1033 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:18 UTC	1033	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 2f 2a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 09 2a 2f 0d 0a 2f 2a 09 41 55 54 4f 43 4f 4d 50 4c 45 54 45 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 2a 2f 0d 0a 2f 2a 09 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 09 2a 2f 0d 0a 09 0d 0a 0d 0a 09 76 61 72 20 73 74 64 5f 76 61 6c 20 3d 20 24 28 27 23 61 63 49 6e 70 75 74 27 29 2e 76 61 6c 28 29 3b 0d 0a 09 0d 0a 09 24 28 27 23 61 63 49 6e 70 75 74 27 29 Data Ascii: $(document).ready(function(){/*******************************************************//AUTOCOMPLETE//*******************************************************/var std_val = $('#acInput').val();$('#acInput')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49760	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:18 UTC	649	OUT	GET /images/loading.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/slider.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:18 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:18 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 1737 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:18 UTC	1737	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 f6 00 00 ff ff ff 00 00 00 d4 d4 d4 94 94 94 60 60 60 40 40 40 44 44 44 6e 6e 6e a2 a2 a2 dc dc dc a4 a4 a4 24 24 24 28 28 28 30 30 30 36 36 36 3e 3e 3e 6a 6a 6a ba ba ba 1c 1c 1c 72 72 72 ec ec ec ee ee ee c2 c2 c2 8a 8a 8a 50 50 50 5e 5e 5e be be be d0 d0 d0 3a 3a 3a 16 16 16 8c 8c 8c aa aa aa 5c 5c 5c 7c 7c 7c e2 e2 e2 86 86 86 0e 0e 0e 68 68 68 9c 9c 9c 66 66 66 b6 b6 b6 46 46 46 0a 0a 0a b0 b0 b0 96 96 96 18 18 18 06 06 06 e8 e8 e8 f4 f4 f4 78 78 78 84 84 84 f6 f6 f6 82 82 82 a8 a8 a8 fa fa fa fc fc fc c0 c0 c0 ca ca ca f8 f8 f8 d6 d6 d6 ae ae ae f0 f0 f0 d2 d2 d2 e4 e4 e4 de de de ce ce ce c6 c6 c6 bc bc bc e0 e0 e0 d8 d8 d8 f2 f2 f2 da da da 7a 7a 7a b4 b4 b4 b2 b2 b2 4c 4c 4c 52 52 52 5a 5a 5a 62 62 62 42 42 42 3c 3c Data Ascii: GIF89a```@@@DDDnnn$$$(((000666>>>jjjrrrPPP^^^:::\\\\|\|\|hhhfffFFFxxxzzzLLLRRRZZZbbbBBB<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49758	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:18 UTC	393	OUT	GET /js/main.js HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:18 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:18 GMT Server: Apache Vary: Accept-Encoding Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:21 GMT Accept-Ranges: bytes Content-Length: 159 Cache-Control: max-age=604800, private Content-Type: application/javascript
2024-10-24 22:45:18 UTC	159	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 2f 2a 0d 0a 09 24 28 27 2e 73 69 6d 70 6c 65 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6d 65 6e 75 20 61 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 6e 65 78 74 28 29 2e 69 73 28 27 75 6c 27 29 29 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 7d 0d 0a 09 7d 29 3b 0d 0a 09 2a 2f 0d 0a 7d 29 3b 0d 0a Data Ascii: $(document).ready(function () {/$('.simple-drop-down-menu a').click(function(){if($(this).next().is('ul')){return false;}});/});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49759	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:18 UTC	398	OUT	GET /images/logo.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:18 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:18 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 6144 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:18 UTC	6144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 68 00 00 00 4a 08 06 00 00 00 96 f6 ce 5c 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 06 3b 00 00 06 3b 01 df 37 47 7a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 17 7d 49 44 41 54 78 9c ed 9d 79 94 14 d5 f5 c7 3f b7 67 40 16 45 dc 88 c6 25 e2 f2 73 8b 06 05 35 51 93 1f 1a 37 a6 c6 29 40 87 1a d1 18 5c 4e 34 9a 9c 2c c6 e4 e7 31 8a 1c 93 88 e6 17 35 ee 46 13 13 37 a6 c1 85 1a a9 21 2a 88 18 97 18 15 02 2e 04 7f 82 b8 44 11 8d 8a 0a b2 cc f4 fd fd f1 aa a7 6b ba ab 67 61 7a 99 69 de e7 9c 3e 53 fd ea f5 ad 5b 5d d3 df 7a f5 de 7d f7 89 aa 62 29 2c 22 32 1a f8 3a 30 32 7c 6d 0d 2c 00 5e 0c ff fe Data Ascii: PNGIHDRhJ\sBIT\|dpHYs;;7GztEXtSoftwarewww.inkscape.org<}IDATxy?g@E%s5Q7)@\N4,15F7!*.Dkgazi>S[]z}b),"2:02\|m,^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49761	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:18 UTC	407	OUT	GET /uploads/slider_umzug.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:18 UTC	292	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:18 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 29 Jan 2024 12:33:11 GMT Accept-Ranges: bytes Content-Length: 341389 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:18 UTC	7900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 27 9a 00 00 27 9a 01 ea 2e 16 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 67 d0 1c c7 7d e7 ff e9 30 69 d3 93 1f 00 0f 12 c1 2c 92 0a 54 a0 28 51 91 96 75 57 f6 d9 be 92 43 39 c9 7f f9 4e d6 c9 4a b6 ce 96 ce 65 c9 56 e9 ac 3b c9 77 96 eb ce e7 17 ae f2 95 1c ca 47 57 49 b2 65 05 4a b4 92 4d 51 22 48 2a 90 62 26 c4 00 10 19 78 f0 e4 4d 33 d3 dd ff 17 b3 bb cf ee 93 80 87 20 01 48 e8 4f 15 f0 ec ce f4 f4 74 cf ce ce f6 b7 7f a1 c5 df ff fd df 1f da b6 6d 5b 8e c7 e3 f1 78 3c 1e Data Ascii: PNGIHDRr:KsBIT\|dpHYs''.ftEXtSoftwarewww.inkscape.org< IDATxg}0i,T(QuWC9NJeV;wGWIeJMQ"H*b&xM3 HOtm[x<
2024-10-24 22:45:18 UTC	8000	IN	Data Raw: 3a c9 5a ec 12 68 29 d1 5a e1 1c 0c d5 46 09 c3 18 93 99 9e d0 b5 ce 62 8d 29 42 69 f2 ac d8 66 0c d6 66 c4 f1 c6 39 9c ce 27 e7 46 00 6f 66 c0 b6 56 f9 0d ca ae 12 cb 9b b4 6e b8 9b 6f 1e 10 c0 e2 3b df 81 2c 5b db f5 f0 9b df 5c b3 0e 79 c7 1d eb 8a 66 b9 77 ef e0 f9 5e f6 32 a8 56 8b 37 61 48 fe e9 4f 17 2e d5 cd 66 61 7d fe ed df de 54 fb cf 05 6e 62 82 fc 96 5b 90 9f fb 5c 91 98 ec da 6b 31 eb c4 64 7b 3c 9e 67 c0 26 3c 59 d6 f4 a8 59 a7 fc 2a 61 bd de f1 9e 0b 82 30 08 b8 eb ce 6f 72 d3 6b 7f 8c ea e4 08 79 5e 0c 32 84 e8 58 0a a4 c4 5a 8b 73 a6 e3 47 db 11 3c d6 91 e5 19 f3 73 73 44 3a a3 5a 4a 58 d0 8a 3d bb 76 b2 7f ff 01 76 ef da 4d 5c 2a 91 e7 39 fb f7 ef 67 72 72 3b 59 9a 11 e9 90 e1 a1 61 16 17 16 b0 56 a0 4b ba 70 d3 73 06 ad 02 4a 51 c2 25 Data Ascii: :Zh)ZFb)Biff9'FofVno;,[\yfw^2V7aHO.fa}Tnb[\k1d{<g&<YYa0orky^2XZsG<ssD:ZJX=vvM\9grr;YaVKpsJQ%
2024-10-24 22:45:18 UTC	8000	IN	Data Raw: fe 7a fa f7 ed 46 06 ca 5a 6d ee 0b 5f 40 fe d5 5f 0d 1c b3 1f f8 c0 80 04 5a ac 06 7a 5b ad ff 55 af 1a 19 5c ca cf ce e2 5e f6 b2 81 20 5b 03 41 a5 86 c7 3f ea f7 de af 68 18 1a bf fc d2 97 06 db fb 99 9f 19 39 87 fe fa eb 07 3e 9f 6e fc 00 ee 97 7e 69 e3 46 c2 ae 5d e5 c6 5a 7f 2a b4 a1 fb 7d 0d 67 f3 cc 1b 0e 6c b5 15 09 f4 56 eb be 88 0b 02 71 18 e2 85 60 ef ec 2e 0e 1c 7a 84 db 3e fe 31 7e e3 b7 7f 1f 21 73 94 90 18 af 7a d1 39 4b 6b 6d 51 94 3e 74 49 92 60 b2 0e b5 66 9d d6 c4 04 cd f1 49 e2 28 62 c5 9c 22 4d 53 c6 9a 2d 96 97 56 98 98 9a e2 f8 e1 c3 1c 3b 7a 84 e3 27 8e b1 73 e7 a5 64 69 4a b3 d1 a0 28 2c 3a 88 40 0a 94 94 38 23 50 5e 50 a9 c5 b4 9a 4d be ff ad 3b b9 e2 aa 67 20 75 13 e1 7b 32 53 d1 93 3d 03 ab cc c2 8a 92 b4 89 33 e8 3f 57 89 b3 Data Ascii: zFZm_@_Zz[U\^ [A?h9>n~iF]Z*}glVq`.z>1~!sz9KkmQ>tI`fI(b"MS-V;z'sdiJ(,:@8#P^PM;g u{2S=3?W
2024-10-24 22:45:18 UTC	8000	IN	Data Raw: 24 49 42 9a a6 b8 4e 07 19 76 49 bc 65 72 72 92 53 f3 73 04 41 c0 ca a9 45 b4 b1 8c 37 9b 54 27 6a d8 0c 96 bb 1d c6 ea 63 44 52 32 3d 3e 51 6e b2 17 09 51 1c 62 8d c0 39 b0 c6 e0 f1 e8 04 1a 4a 62 95 c4 0a 81 b5 a6 7c 99 02 e7 0a 94 d0 78 eb 70 d6 62 6c 4e 92 a7 65 10 70 6f b1 2e 05 2f f0 b6 c0 e7 39 4a 4a a4 94 2c 75 53 96 5b d3 54 2b 35 da 9d 04 15 56 a8 79 cb 44 6d 0c d3 59 40 17 39 3b 5b 0d 32 ef e9 24 39 d2 96 f1 17 7c 14 62 6c 49 04 33 6b 89 ac 47 39 5f ca 9e 45 19 7a dc 19 8b 73 8e 22 cf f0 a9 c5 2b 89 d7 19 0e 38 79 fc 18 9d 2c c7 51 ca b6 af be e6 89 84 2e 43 a5 0e a7 25 51 25 a4 3e d1 24 eb 2c a3 94 44 fa 88 78 76 16 8f a6 9b 24 84 cd 06 81 56 54 bd 2b ad b2 dd 04 e3 34 91 ae e2 75 81 f4 06 e7 0a 9c 75 08 e7 f1 a6 fc c1 59 e3 21 33 64 cb 5d 56 Data Ascii: $IBNvIerrSsAE7T'jcDR2=>QnQb9Jb\|xpblNepo./9JJ,uS[T+5VyDmY@9;[2$9\|blI3kG9_Ezs"+8y,Q.C%Q%>$,Dxv$VT+4uuY!3d]V
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 89 84 7c 20 c4 eb 3e b9 3a 5b 57 3c b8 63 02 89 90 0f 91 ba df ef c3 7e 82 90 e2 8c 9f 66 bc 87 44 7e 9f 6e 45 3f 04 d2 7b 9e 7e 00 e2 d7 93 e0 f7 fb c9 1e 98 98 10 b0 aa 14 7e 54 15 f7 f7 d3 7f df ef fb 9d 7f 3d 91 55 73 99 40 e2 29 e4 8c ad 78 c0 e0 e8 0d be fa c9 ff 8b 5f bb 76 85 1b 1f be 81 b0 1a 1f 3d 77 e6 87 0c 07 03 86 9b 15 07 07 87 f8 98 a8 ea 92 d1 a0 66 31 9f e2 da 86 81 31 5c db d9 46 23 98 76 1d 21 c1 b5 eb d7 e9 e6 33 8e 6e 1f 30 d8 18 52 0e 2b 26 f3 09 27 fb fb 5c 28 2d 85 d2 94 d6 12 55 c1 c1 ed 7d ba e5 32 07 41 55 15 cb f9 31 69 d9 31 2a 0b c6 3b 17 59 2e e6 08 a9 18 5f dc 42 5c de c5 09 98 b7 9e 79 e7 88 66 80 1e 0b 64 e3 fb b6 40 20 6d 8d 77 91 e8 05 51 58 5c 12 b4 02 c6 17 b6 d8 55 29 f7 a7 45 51 14 65 76 11 10 e9 9c c3 75 1d b3 f9 Data Ascii: \| >:[W<c~fD~nE?{~~T=Us@)x_v=wf11\F#v!3n0R+&'\(-U}2AU1i1*;Y._B\yfd@ mwQX\U)EQevu
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 31 b2 5c 2c b0 e3 4d 96 cb 25 a7 fb f7 18 0e 6b a4 ae 98 a7 84 88 91 24 14 b6 aa b8 7d e7 2e de 07 0a 5b a0 8d c5 45 cf 72 3e a7 69 16 8c 37 c7 7c f6 5b af f0 cf ff e0 53 bc 79 bc 04 55 f0 cc b3 cf f1 f4 73 cf f2 f8 53 4f f3 f3 2f bd c8 f5 ad 4d 06 c2 d3 2e f6 b9 f5 f6 1b 7c e4 f1 c7 40 46 84 4c 74 6d 0b 29 d1 b6 53 b4 2d a8 07 35 c3 b6 23 04 89 d2 1a 53 15 a4 14 40 09 52 bb cc e9 5e 52 90 64 36 d0 ab 6c 5a 41 c5 ec 16 89 32 a1 ad a0 f5 81 d6 35 bd eb c3 67 87 86 d1 18 9b af 67 a9 34 31 04 48 d0 2c 97 7d 62 bd 3f 73 ca 28 99 7b fd a6 98 1d 1a ce 3b 42 00 25 15 5a 69 8c b1 8c 06 03 a2 52 38 1f 73 10 5f d3 f6 6d 82 72 69 89 d2 79 39 29 cd d9 6f 24 84 cc 59 04 3a b7 7c 53 fd 35 d8 b6 ab d9 20 81 36 06 a4 46 00 45 59 e0 3a 87 46 10 7c 47 5d 16 34 4d 43 f2 79 Data Ascii: 1\,M%k$}.[Er>i7\|[SyUsSO/M.\|@FLtm)S-5#S@R^Rd6lZA25gg41H,}b?s({;B%ZiR8s_mriy9)o$Y:\|S5 6FEY:F\|G]4MCy
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: ec 55 cf 72 e0 25 09 58 2e 97 08 a0 30 79 61 95 87 ca 21 a5 5e 48 28 e4 e0 d5 8f 44 3f bc 7f 64 f6 d0 07 91 ab d2 84 12 8c 47 35 a1 ef 91 29 e5 6b 52 8c b8 e8 d8 34 1b 7c ef 30 21 51 17 25 d7 f7 af f1 d6 6b af f2 f4 e1 27 d0 46 b4 92 b4 eb 35 52 49 aa fd eb 34 ed 86 a5 6f 21 05 aa ed 2d b6 27 33 64 e3 10 d2 92 74 49 1f 02 61 71 ce 74 e7 06 ae 6d f9 e1 7b ef b3 b5 b5 cd cf 7f fa 01 d7 76 a6 38 bf a2 28 e1 5b df fc 3a b3 e9 8c e9 64 ca 68 32 41 c9 82 08 ac 97 0b 96 f3 39 c6 47 fa de b1 ee 5a 14 01 93 02 3b 7b fb 9c 9f 2f 39 5d 6c f8 d9 27 8f 08 5a a3 a4 c4 1a 3d 2c 61 c5 f0 6b 73 99 bf 20 85 40 4b 8d d4 62 c8 a7 b8 62 80 af 70 85 2b 5c e1 0a 57 b8 c2 ff 07 b4 31 6c 5d df e3 e4 64 8e ef 1c 9f 3c 7c c8 9b 6f bc 0e 4a b3 ee 3a 4c 55 23 65 42 c9 44 90 e4 10 17 Data Ascii: Ur%X.0ya!^H(D?dG5)kR4\|0!Q%k'F5RI4o!-'3dtIaqtm{v8([:dh2A9GZ;{/9]l'Z=,aks @Kbbp+\W1l]d<\|oJ:LU#eBD
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 6e 08 64 72 f8 90 d5 20 ce 07 d6 9b 86 d7 df f2 f4 21 d1 34 0d 9b a6 a1 ed b3 55 43 22 59 ae 97 34 6d cb fa 60 cd 27 9f fc 2a 2b 38 86 b3 2e 00 99 3c 77 6f df e4 e6 f5 7d 8c 2e 2e ad 1d ab d5 8a 90 3c 65 55 31 99 4e d8 d9 d9 61 bc bb 93 1f df ff c3 de 9b 3d d9 76 9e e7 7d bf 6f 5c 6b ed 79 f7 ee 3e dd e7 f4 19 00 90 10 48 10 04 07 91 22 2d db aa b2 9d a4 52 56 c5 95 e4 22 ce 45 52 b9 ca 75 fe a3 5c 38 17 91 53 ce 55 ca 96 2b b1 a4 48 16 45 68 a0 44 90 20 38 00 c4 78 e6 9e 7b 0f 6b f8 a6 5c 7c 6b f7 01 e5 54 2a 95 48 2e 54 79 bf 55 c0 39 38 85 3e bd d6 da 6b ef 5e ef fb 3e cf ef f9 e2 cb 14 d5 9c a2 ac 32 bd 19 10 b1 3f b6 cd 8a 66 7d 9d a5 1e 75 c3 bd 7b 2f 31 ea d6 5c 5f 5d b3 57 16 b4 6d 83 e8 a9 e5 9d f7 d8 e0 28 46 23 ea d5 35 09 f0 29 a1 47 03 42 65 Data Ascii: ndr !4UC"Y4m`'+8.<wo}..<eU1Na=v}o\ky>H"-RV"ERu\8SU+HEhD 8x{k\\|kTH.TyU98>k^>2?f}u{/1\_]Wm(F#5)GBe
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 51 c5 90 eb b3 33 ae 8d c0 c7 48 13 23 e5 70 c8 a6 59 62 2d 08 2d 71 ba 22 e9 8a 26 09 e6 fb b7 98 cc f6 30 28 46 95 a5 9a 4c 31 83 02 55 5a aa 62 40 51 54 b8 ce 03 39 06 cc b9 8e f3 67 27 b4 f5 1a e7 5a e6 f3 3d 18 94 cc df f8 1a 4f 3e 7a 9f 8d d5 14 b7 6f 11 9e 9e 11 bd 27 06 88 49 10 94 c1 49 9d c1 52 31 dc 78 6c 45 af 4c c8 7c 84 ac 30 b9 5c 2f d9 74 0e df 2f 77 cb d9 98 87 8f 1f 13 42 8e a4 13 21 f2 da ab af 11 db 8e f3 f3 4b bc cf 8a 8e d9 74 ce 65 48 b4 4d 8b d2 92 c9 74 ce 64 b1 cf b2 6d c1 0e 38 1c 6b ae 4d c5 39 92 28 04 49 43 d4 a0 8d 45 a0 fa 34 80 44 59 94 18 63 71 c1 13 c8 c4 f8 cf 73 ed 1a e0 5d ed 6a 57 bb da d5 ae 3e 07 95 e3 37 24 10 b1 85 26 e2 48 b1 43 4b 41 ec 5c 1f 5b 24 6e 68 c4 49 69 5a e7 b8 7d e7 36 1f 7d f4 31 7f f0 27 ff 96 ff Data Ascii: Q3H#pYb--q"&0(FL1UZb@QT9g'Z=O>zo'IIR1xlEL\|0\/t/wB!KteHMtdm8kM9(ICE4DYcqs]jW>7$&HCKA\[$nhIiZ}6}1'
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 0c 11 7e 2d 3d d6 3a 9c b5 9c 1c 1f 93 65 86 bd bd 6b ac ae ad 32 9b a7 38 37 63 0c 9b 1b 1b 68 ad 29 8b fc 47 fb 97 e6 3f a1 2e 1a e0 8b ba a8 8b ba a8 8b ba a8 0f 41 69 ad d9 d9 da c6 48 c9 a5 ed 6d a6 c7 27 18 ad 18 8c 46 69 73 19 02 78 0f a1 27 9e c6 c8 62 b9 a0 28 0a d6 95 e4 74 3e a5 0e 8e 59 db 22 7c ca 92 dc d8 da e2 ef ff e1 1b ac 7d e6 97 d9 58 cf 13 b0 c9 99 5e a6 ec 3e a0 0f 07 d9 37 78 3d 0c 0b fa 09 be 20 78 4f a1 0d 37 af 5e e3 cd 77 ee 70 fb d6 33 2c a7 0b 14 69 5b db 34 0d b3 d9 bc f7 76 8a 7e a3 0c 52 49 8a bc 40 6b 83 75 33 ba ae 23 cb 72 a4 50 78 e7 cf b7 7c b9 d1 3c 7e f4 80 b6 59 52 0d 32 44 14 69 8b 17 62 9f 27 9b a2 56 5c 17 d0 c1 13 4d e8 fd b5 9e 20 d3 26 ec 2c 2e 48 92 56 29 c1 c3 f1 93 09 dd b2 e3 95 6f fd 03 ff fc b3 9f e5 ca Data Ascii: ~-=:ek287ch)G?.AiHm'Fisx'b(t>Y"\|}X^>7x= xO7^wp3,i[4v~RI@ku3#rPx\|<~YR2Dib'V\M &,.HV)o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49762	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	653	OUT	GET /images/seperator-980.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 4655 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	4655	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 1f 00 00 00 35 08 06 00 00 00 20 7b 56 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR5 {VhtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49763	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	657	OUT	GET /images/top-full-width-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1493 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	1493	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 89 08 06 00 00 00 18 08 d9 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49764	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	644	OUT	GET /images/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 30808 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 e8 08 06 00 00 00 4d a3 d4 e4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRMtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: 1a db 3e 62 40 6f e7 7f ac 03 7a bd 0e ed f3 67 ec a6 ce 6f 9f ae 3e 21 cb 5b cf af 5e 6f eb ed 73 c3 9f 79 67 b3 da 1c 09 ab f7 4d 4b 5e ee 4e e2 fa b1 3a bc 1f 54 57 a7 7e bd 6a a5 7a d2 6a 0d 69 a4 fa 90 35 53 95 0b c9 da f4 9c d7 68 cf d6 49 1c 00 a0 80 2d 98 5e 1b 6f de bc f9 27 53 a6 4c b9 52 b6 c1 5e a7 d3 1b e6 fb f4 c6 ff b4 65 cb 96 fd 49 3a 89 93 cb a9 d8 e4 28 b9 1c ed b5 cf 85 b2 2f c3 e2 1c 6e 77 6e 66 75 48 a2 6f ed 9a 5f 7b 3c 9b 3d cc cd 39 8e bb b7 51 f7 39 e4 f6 73 99 ce 3f 77 4f 9b 69 9e e5 ce e7 32 dd a6 be fe bc cf c1 95 e6 6f 9b fb fb d5 f4 c6 a6 b4 3b 4a 52 6a 12 a6 75 39 36 23 10 f0 f6 19 90 d6 1f 0f 3f d2 f3 b8 76 20 96 5b d9 09 76 3f 76 86 5e a7 2b af bc 72 d8 df 6b ba bf e1 74 c1 39 d7 3c ec d7 74 4e 9f 69 ba 4c c3 dd 4d dc 0b Data Ascii: >b@ozgo>![^osygMK^N:TW~jzji5ShI-^o'SLR^eI:(/nwnfuHo_{<=9Q9s?wOi2o;JRju96#?v [v?v^+rkt9<tNiLM
2024-10-24 22:45:19 UTC	8000	IN	Data Raw: d0 7c 93 6b d8 27 0b 09 e7 5e 0e 44 64 bb e4 ac 90 20 fe dd ef 7e d7 aa 49 97 8e fe 24 74 4b 53 76 39 30 fe ea ab af aa fb ee bb 4f 3d f5 d4 53 d6 e5 f6 e4 32 6b b3 66 cd 1a 9a 56 3a 98 fb ec 67 3f ab be fe f5 af ab b7 df 7e 7b e8 f5 f2 3d d5 20 c0 ef 08 00 2a 5f ba 4e e0 d2 75 1a 67 0f cf 67 63 e4 75 a3 66 bf 56 ba 0e 4f b2 75 82 92 ee 3d e6 73 c9 91 cc 61 fd 5b e3 ee 77 10 0c 06 e3 e1 70 f8 ac 9a 9a 9a 1b f5 b2 5b 58 6d 9f 6f cd 67 2f f4 3c ae 1d 88 e5 56 9a 0f ba 1f 3b 43 af d3 95 57 5e 39 74 df 6b 0d ba 97 79 d8 af e9 9c 3e d3 74 99 86 bb 9b b8 17 f2 59 ec 79 50 87 02 78 df be a1 68 3e e2 7a fc 96 4a 9e 8f 9e cd 02 d7 e3 37 55 f2 92 a1 05 b1 cf 2b cf c6 de 9f b2 6f 9d e7 a2 4b 93 77 e9 89 ff 95 57 5e 51 4f 3c f1 84 35 4c 9a b4 4b d3 73 69 e6 2e e7 a6 Data Ascii: \|k'^Dd ~I$tKSv90O=S2kfV:g?~{= *_NuggcufVOu=sa[wp[Xmog/<V;CW^9tky>tYyPxh>zJ7U+oKwW^QO<5LKsi.
2024-10-24 22:45:19 UTC	6907	IN	Data Raw: d6 c7 13 b2 1e 3b 4f a6 af e2 c5 b3 3e dd 40 9a b8 03 00 00 00 00 8a c6 d0 41 dc 2e dd 5f f8 d2 f5 91 58 ec 8a 35 d1 98 1a d0 25 11 8b 67 2c f2 bc 8c 27 e3 cb 74 f6 3c aa 8d 1c 44 cd 54 08 e8 00 00 00 00 80 52 f1 eb b0 fd bf 91 be fe 0b d7 c6 e3 6a 63 2c a6 fa f4 6d 34 75 de b9 dc f6 a5 86 cb f3 d1 48 e4 33 7a fc 45 e3 75 61 d1 c4 1d 00 00 a0 ca d4 d5 d5 b1 10 00 8c a6 a0 4a 5e 3e ac c5 2e 3d 97 7c 65 a5 f2 fb 3f 12 f9 d0 49 c7 f4 ec 31 fb 70 a3 b5 75 27 23 18 6c 30 a3 d1 7e 73 cb 96 35 b1 a5 cb 9e 1a bc eb 2f 0f e9 d4 be 45 8f 3f 47 97 75 2a 79 99 b5 5e 5d e2 e3 65 c1 19 9c a3 04 00 00 50 1d 96 2d 5b c6 8e 1d 80 92 e8 e8 e8 f0 dc d6 dc d5 2c dd 9f 2a 52 39 ec 4b 85 f7 90 4a 5e 66 4c 8a 9c 8c 1e d5 45 d6 5f 11 c7 e3 21 e3 29 b3 12 d0 01 00 00 aa 30 a8 eb Data Ascii: ;O>@A._X5%g,'t<DTRjc,m4uH3zEuaJ^>.=\|e?I1pu'#l0~s5/E?Guy^]eP-[,R9KJ^fLE_!)0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49765	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	653	OUT	GET /images/text-field-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1015 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	1015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1e 08 02 00 00 00 62 f7 e3 90 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRbtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49766	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	643	OUT	GET /uploads/teaser_bildung.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 4531 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	4531	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 11 30 49 44 41 54 78 9c ed dd 69 70 5d 67 7d c7 f1 ef 39 77 5f 74 ef d5 d5 72 b5 2f b6 64 4b 76 2c 29 f1 82 13 27 24 64 21 29 4b 3a c3 32 4d 69 21 e9 74 86 76 68 e9 74 28 9d e9 b4 4c a7 bc e8 9b d2 d2 19 4a 4b 29 30 5d a6 10 28 4b 79 01 a5 c0 14 42 08 ce 62 5b 5e 23 d9 b2 65 cb b2 a4 2b eb 4a ba fb be f5 c5 7d ee f1 bd 5a 62 d9 44 31 90 ff e7 95 75 74 ee 3d cb 73 7e cf f9 3f cf 39 4a b4 27 bf f3 6c 19 21 04 fa 9d de 01 21 7e 51 48 18 Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<0IDATxip]g}9w_tr/dKv,)'$d!)K:2Mi!tvht(LJK)0](KyBb[^#e+J}ZbD1ut=s~?9J'l!!~QH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49767	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:19 UTC	647	OUT	GET /uploads/teaser_business_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:19 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:19 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 2525 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:19 UTC	2525	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 09 5a 49 44 41 54 78 9c ed da e9 6f 1c e5 01 c7 f1 ef cc de 6b 7b ed f5 ed 38 b1 73 b6 a4 86 84 38 09 ce 01 4e d3 24 94 12 0a 14 5a 40 6d d4 43 55 51 d5 4a a8 52 d5 be e8 1f d0 17 ed 3b 54 40 aa 90 a2 a8 17 50 01 4d b9 54 8e 92 d0 84 70 34 24 04 9c 90 10 c8 e5 2b be 8f f5 da 7b 4e 5f cc e3 b1 0d 84 12 70 0e d8 df e7 d5 78 76 77 f6 f1 6a bf 3b f3 3c bb 56 53 53 93 83 88 60 5f ea 01 88 5c 2e 14 83 88 a1 18 44 0c c5 20 62 28 06 11 43 31 Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<ZIDATxok{8s8N$Z@mCUQJR;T@PMTp4$+{N_pxvwj;<VSS`_\.D b(C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49768	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	409	OUT	GET /uploads/teaser_partner.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:16 GMT Accept-Ranges: bytes Content-Length: 1972 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	1972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 07 31 49 44 41 54 78 9c ed da 5b 70 54 77 01 c7 f1 ef 7f 77 cf de b2 9b db e6 42 08 86 12 5b 86 12 ae 2d 1d 6b 99 aa a5 94 99 28 76 aa a3 9d ea 03 63 db 17 5f fa e4 f4 bd fa ec 8b 8f 8e 3e 68 1d c7 d6 3a 2a 9d b1 a5 e3 85 16 a7 f6 86 a5 31 68 a0 40 a1 21 10 12 72 cf de 77 cf 39 3e ec 3f 9b 84 04 9a 70 8b 98 df e7 69 39 39 e7 7f fe b3 9c 6f ce d9 ff c6 74 75 75 f9 88 08 81 95 9e 80 c8 ff 0a c5 20 62 29 06 11 4b 31 88 58 8a 41 c4 52 0c Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<1IDATx[pTwwB[-k(vc_>h:*1h@!rw9>?pi99otuu b)K1XAR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49769	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	408	OUT	GET /images/teaser_shaddow.jpg HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 2233 Cache-Control: max-age=2592000, public Content-Type: image/jpeg
2024-10-24 22:45:20 UTC	2233	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 53 00 00 ff e1 03 29 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyS)http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49770	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	413	OUT	GET /uploads/teaser_fernwartung.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 3129 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	3129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b b6 49 44 41 54 78 9c ed da 4d 6c 1c e7 7d c7 f1 ef bc ec 2b 97 e4 2e b9 cb 25 65 4a 24 2d 4a 94 ac e8 c5 a0 e5 d8 89 6a 24 35 90 d8 35 ec 5c 0c 04 30 90 06 bd b8 45 12 e4 12 14 81 0f 06 52 a0 6d ea 4b 8e 0d d0 4b 2f 35 5c 34 a9 d1 1a 69 93 b4 b6 9b 17 49 b6 24 5b 56 2d 4a 34 45 4a 14 45 ae c8 e5 72 5f b9 2f dc b7 99 1e f6 d9 d1 52 4b 49 95 2d 99 ab e0 ff 39 91 f3 cc ce 3c cf ec fe e6 79 99 d1 5e f8 c5 1b 36 42 08 f4 ed ae 80 10 9d Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<IDATxMl}+.%eJ$-Jj$55\0ERmKK/5\4iI$[V-J4EJEr_/RKI-9<y^6B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49772	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	401	OUT	GET /images/loading.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 1737 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:20 UTC	1737	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 f6 00 00 ff ff ff 00 00 00 d4 d4 d4 94 94 94 60 60 60 40 40 40 44 44 44 6e 6e 6e a2 a2 a2 dc dc dc a4 a4 a4 24 24 24 28 28 28 30 30 30 36 36 36 3e 3e 3e 6a 6a 6a ba ba ba 1c 1c 1c 72 72 72 ec ec ec ee ee ee c2 c2 c2 8a 8a 8a 50 50 50 5e 5e 5e be be be d0 d0 d0 3a 3a 3a 16 16 16 8c 8c 8c aa aa aa 5c 5c 5c 7c 7c 7c e2 e2 e2 86 86 86 0e 0e 0e 68 68 68 9c 9c 9c 66 66 66 b6 b6 b6 46 46 46 0a 0a 0a b0 b0 b0 96 96 96 18 18 18 06 06 06 e8 e8 e8 f4 f4 f4 78 78 78 84 84 84 f6 f6 f6 82 82 82 a8 a8 a8 fa fa fa fc fc fc c0 c0 c0 ca ca ca f8 f8 f8 d6 d6 d6 ae ae ae f0 f0 f0 d2 d2 d2 e4 e4 e4 de de de ce ce ce c6 c6 c6 bc bc bc e0 e0 e0 d8 d8 d8 f2 f2 f2 da da da 7a 7a 7a b4 b4 b4 b2 b2 b2 4c 4c 4c 52 52 52 5a 5a 5a 62 62 62 42 42 42 3c 3c Data Ascii: GIF89a```@@@DDDnnn$$$(((000666>>>jjjrrrPPP^^^:::\\\\|\|\|hhhfffFFFxxxzzzLLLRRRZZZbbbBBB<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49771	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	403	OUT	GET /images/slider-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 13267 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 3c 00 00 01 af 08 06 00 00 00 b7 a0 c5 a9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR<tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-10-24 22:45:20 UTC	5366	IN	Data Raw: 5b 84 0c bf 9b e4 d6 98 dc ad 2e 9b 2a 0c 67 d9 da e2 e3 9a d3 79 8d f1 ec 29 87 b3 e6 e5 ac f9 3e 73 5e 8f 98 e6 b5 73 ab 3d e3 28 e9 77 e6 79 33 87 4c cb ce db 31 aa ba 2b 1d 57 e9 78 fa e3 f5 52 cb 92 92 f5 69 7a bc 2f 69 a5 72 d2 3a bc f7 c4 fd e6 4e 5c ee 9b db d5 95 56 ee a7 e7 a9 0b c3 c9 5d 9d 4f 13 bd b5 e7 1d 64 bb 99 6c 3c 2f ba 1d 02 91 67 9f af 05 23 4b 27 de 33 e1 ca ea f4 0f d3 f7 6c be 87 0d ea d9 55 ed cc b3 45 8a 12 e6 c9 49 7b ba 0c 16 5b b4 24 f3 39 97 b4 2e b6 04 c9 a5 c5 b5 b7 a4 2c 84 2d ed 24 5c 99 4b 9b bb 49 19 3d eb 66 72 95 b8 59 b8 7a f8 f8 fd de 0a 76 49 0b 9a a5 f2 cb 5d 7d 59 bb 1a 9b 7e f6 50 46 cf ba 59 69 bd 32 5b 66 4d c1 95 8d 85 83 55 ae 35 ce 6c 0b 94 4c 3f fd 38 da cc 7e 69 b1 b5 d6 64 39 76 0b dd 3e 7d 5e 19 0c 95 Data Ascii: [.*gy)>s^s=(wy3L1+WxRiz/ir:N\V]Odl</g#K'3lUEI{[$9.,-$\KI=frYzvI]}Y~PFYi2[fMU5lL?8~id9v>}^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49773	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	404	OUT	GET /images/background.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:04 GMT Accept-Ranges: bytes Content-Length: 21745 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 17 00 00 02 29 08 02 00 00 00 07 29 eb c3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR))pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-24 22:45:20 UTC	8000	IN	Data Raw: 92 eb 4c 17 42 20 41 82 5c 27 f1 76 01 0f 72 ac 76 01 47 68 f6 59 c8 ec b8 cd 15 4e a1 e3 43 bb e0 40 14 44 08 91 a1 11 1a 63 26 68 bb 80 23 84 e4 ba 41 8f 1a 43 a8 33 25 24 c8 59 11 ea 21 c1 11 9a 6c 34 1a 8c 79 81 4c 09 66 33 96 64 e1 50 4c 80 90 d5 a3 b4 49 29 10 42 78 ae eb 36 5e 9d 5d e8 fa fa 7a 0c 21 8a 29 b9 21 74 3a 9d 70 84 9a a6 19 43 c8 cc 75 2c 84 f0 d1 08 9e 4e 60 21 d4 34 0d 0b 21 eb 2c 34 01 42 d4 76 61 50 d2 11 a2 9b 52 27 7b 48 ac 44 b1 10 c2 4d 09 42 62 e6 3a 58 6a 77 b2 47 c8 9a eb 90 5d 23 73 13 09 41 e8 78 3c 22 b9 ce 4a 14 6e 4a 10 a1 aa aa 20 33 9a a4 e4 3a 84 19 1c 21 cd 94 a0 cf 98 47 19 b8 c9 2d 10 42 bf db 85 5f bf 7e c1 af e2 32 5c ae 1b ac ef 88 08 6d 36 1b 3a 42 6f 6f 6f f0 bc 8f 16 e4 4c a9 31 83 48 4a ae eb 21 d1 82 9c d9 Data Ascii: LB A\'vrvGhYNC@Dc&h#AC3%$Y!l4yLf3dPLI)Bx6^]z!)!t:pCu,N`!4!,4BvaPR'{HDMBb:XjwG]#sAx<"JnJ 3:!G-B_~2\m6:BoooL1HJ!
2024-10-24 22:45:20 UTC	5844	IN	Data Raw: a1 23 f4 fa fa fa e9 d3 27 ba d4 20 c1 25 44 68 b3 d9 3c 3c 3c 40 89 bb 10 6c 17 3c 11 a2 e7 3a 6b 90 83 95 37 b7 a0 63 05 b9 f3 f9 8c 48 0d a1 e3 f1 48 24 aa ae 6b 78 b2 c1 44 08 36 e0 b8 6c db f6 ed ed 8d 2e 59 08 21 d2 4a c7 6f 8a 7c 10 7a 7d 7d fd fc f9 33 5d d2 11 da 6c 36 8f 8f 8f 3d 24 b8 7c 7b 7b 7b 78 78 80 f2 fe fe be 47 c8 94 1a 33 88 34 99 41 10 da ed 76 65 59 22 52 43 a8 28 8a 31 a2 4c 84 10 a2 8e c7 23 d2 d7 9d 4e a7 ba ae 45 88 32 11 42 64 5d d7 87 c3 61 4c 36 4d b3 db ed 7a c0 58 92 45 94 52 6a b3 d9 20 d2 07 a1 97 97 97 22 21 24 88 50 17 e4 12 42 44 84 a0 47 cd 88 10 6e 59 56 3a be 7e fd 9a 77 77 57 a4 63 e7 43 54 20 84 4c a2 e8 08 6d b7 db db db 5b 44 b2 10 c2 4d 29 12 84 10 a2 ac 08 9d 4e 27 a2 a4 20 e4 66 4a e2 08 f9 9b d2 87 76 e1 f5 Data Ascii: #' %Dh<<<@l<:k7cHH$kxD6l.Y!Jo\|z}}3]l6=$\|{{{xxG34AveY"RC(1L#NE2Bd]aL6MzXERj "!$PBDGnYV:~wwWcCT Lm[DM)N' fJv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49774	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	654	OUT	GET /images/preloader-dark.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 6816 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:20 UTC	6816	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 a5 00 00 14 12 14 8c 8a 8c 4c 4e 4c c4 c6 c4 34 32 34 e4 e6 e4 6c 6e 6c ac aa ac 24 22 24 5c 5e 5c d4 d6 d4 44 42 44 f4 f6 f4 bc ba bc 9c 9a 9c 7c 7e 7c 1c 1a 1c 54 56 54 cc ce cc 3c 3a 3c ec ee ec 74 76 74 b4 b2 b4 2c 2a 2c 64 66 64 dc de dc 94 96 94 4c 4a 4c fc fe fc c4 c2 c4 a4 a2 a4 14 16 14 8c 8e 8c 54 52 54 cc ca cc 34 36 34 ec ea ec 74 72 74 ac ae ac 24 26 24 64 62 64 dc da dc 44 46 44 fc fa fc bc be bc 84 86 84 1c 1e 1c 5c 5a 5c d4 d2 d4 3c 3e 3c f4 f2 f4 7c 7a 7c b4 b6 b4 2c 2e 2c 6c 6a 6c e4 e2 e4 a4 a6 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 04 00 1c 00 2c 00 00 00 00 10 00 10 00 00 06 a2 40 8e 90 13 73 28 56 80 cf 07 30 Data Ascii: GIF89aLNL424lnl$"$\^\DBD\|~\|TVT<:<tvt,*,dfdLJLTRT464trt$&$dbdDFD\Z\<><\|z\|,.,ljl!NETSCAPE2.0!,@s(V0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49775	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	653	OUT	GET /images/drop-down-arr.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 1088 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	1088	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 12 08 06 00 00 00 89 80 f4 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRHtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49776	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	653	OUT	GET /images/slide-overlay.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 2826 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	2826	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRr:KtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49778	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	651	OUT	GET /images/sprite-menu.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1365 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	1365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 50 08 02 00 00 00 d3 0f ad e7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRPtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49777	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:20 UTC	643	OUT	GET /uploads/slider_service.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:20 UTC	292	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:20 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:13 GMT Accept-Ranges: bytes Content-Length: 256436 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:20 UTC	7900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 25 21 00 00 25 21 01 09 09 47 e4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 79 bc 1c d7 59 26 fc d4 a9 aa 5e ef a6 7d df 2d d9 b2 65 5b 8e 63 c7 76 62 c7 4e 9c 8d 84 30 21 24 61 80 09 c3 b0 7d 03 f3 7d 03 03 c3 16 18 92 90 49 08 f9 31 7c ec 30 30 84 40 20 01 12 96 00 21 64 21 89 1d 6f f1 ee 58 b6 e2 45 96 25 6b 5f ae a4 db b7 bb ab 6b 39 f3 c7 a9 e7 d4 5b d5 7d 65 c9 eb 75 74 9e df 4f ba b7 bb ab ab ce 56 75 df e7 7d 9f f7 3d de 27 3e f1 89 dd 2b 56 ac 48 e0 e0 e0 e0 e0 e0 e0 e0 Data Ascii: PNGIHDRr:KsBIT\|dpHYs%!%!GtEXtSoftwarewww.inkscape.org< IDATxyY&^}-e[cvbN0!$a}}I1\|00@ !d!oXE%k_k9[}eutOVu}='>+VH
2024-10-24 22:45:20 UTC	8000	IN	Data Raw: 49 66 ad 56 43 94 47 a6 e9 50 e0 f5 58 5c 2a cb 32 2b 5d 27 a1 94 55 99 b9 3e 98 b3 1d 86 81 75 78 d8 7b 25 cd 6c 24 51 6b 53 1c 4e 46 68 59 d5 97 d2 6a 13 39 2e 8a 8e c9 6d 6d b8 87 70 bb dd b6 63 a5 94 2a c6 30 9f bb 46 a3 69 25 cc 74 82 48 52 b7 68 d1 22 eb 10 31 e3 51 cf a3 b1 5d bb f6 d8 37 00 68 b7 db 76 bc 95 32 d5 8f 7d 55 e4 9b f6 a3 08 7e 50 ec af cb b5 2d 9f 0d bc 36 0b 60 45 71 64 d7 14 af cb 7e 02 40 1c 9b fb b0 d5 32 11 e8 30 08 e0 2b 5f 44 e0 8b 3d c6 b9 e6 0b c7 8b 6f 8b 6d 55 8b b0 51 ee 2f b7 4a 22 f1 e3 38 c9 7c 60 a5 54 d1 ff bc 10 9e 7d e6 24 46 59 c0 31 23 59 67 6e b6 8c ee f3 1e 60 ff 78 1f 06 41 f1 ac 35 c7 34 86 2a 34 cb e7 2a 89 2a 25 e2 e6 7e 2b 9e 63 f5 7a 91 57 2e b7 49 2b 9c 49 e5 f4 0a fe 2d a8 92 59 f9 fc e7 b3 82 9f cf f5 Data Ascii: IfVCGPX\2+]'U>ux{%l$QkSNFhYj9.mmpc0Fi%tHRh"1Q]7hv2}U~P-6`Eqd~@20+_D=omUQ/J"8\|`T}$FY1#Ygn`xA544*%~+czW.I+I-Y
2024-10-24 22:45:20 UTC	8000	IN	Data Raw: b6 bd 88 10 16 12 5a ce 6b 96 95 8b 48 c9 5c 62 19 21 65 51 25 3a 20 c6 c7 c7 6d 45 67 b6 93 51 5b 46 04 01 a0 5e a7 84 5c db be 95 48 08 80 24 49 11 25 7d 4c 4c 4c 58 92 cc be b1 f0 58 9a 9a eb 98 fd 8f 19 55 35 d6 10 a3 fd 52 9d c1 fb c5 f3 cc 33 23 49 0a 75 02 fb 26 a5 de ec 6b 18 86 c8 92 62 1d 48 a7 8b 75 06 85 21 74 56 e4 b8 56 c9 27 b2 14 f0 14 b2 ac 28 80 a6 f2 eb c8 28 bb 8c a2 ca 7b 59 2a 44 e4 fd 2c 9d 88 1c 63 49 02 ab ca 15 29 8d 66 df 64 5a 44 49 a9 83 32 89 96 cf 1c 49 0c e5 58 49 f0 3a 3c a6 4a 3e 0b a7 9a 2e 3d 9f b8 3e a5 03 94 f7 14 7f f2 fc d2 31 23 3f ab 3e 5b f9 5e d5 b1 4a c8 f7 d9 0e 79 9e b9 a2 d8 f3 09 f3 b2 0a f4 82 7a 03 2b 5a e5 0a ae 7f 2d b6 33 19 05 8d b3 df 73 ea 48 bf 3b 52 76 d9 0c 42 5c 52 91 ba 06 95 ca bd 55 c9 e5 ae Data Ascii: ZkH\b!eQ%: mEgQ[F^\H$I%}LLLXXU5R3#Iu&kbHu!tVV'(({Y*D,cI)fdZDI2IXI:<J>.=>1#?>[^Jyz+Z-3sH;RvB\RU
2024-10-24 22:45:20 UTC	8000	IN	Data Raw: 40 d8 96 40 db 3f df 9a f0 38 e8 77 c8 92 7d c7 cd 1c 88 85 69 b0 df 43 40 ae 5d d9 17 76 4a 00 9a 98 ca 49 c2 66 33 0e 36 b3 6a a4 81 9e 36 f6 f2 7d dd 47 ba db 6e e3 98 3c 69 2f 1e 7b ec 51 12 15 41 fa 79 95 4a 85 5b 6e 99 cd b4 69 d3 58 b3 e6 43 6e ba f9 46 ca e5 a2 96 54 5a f2 c1 33 ce 38 83 53 4f 3d 0d c7 81 9f fe f4 2a 36 6c 5c d7 32 5a 48 8e cd 96 35 ff f1 8f 7f 64 e6 b9 e7 b1 fb ee bb b3 e3 8e 23 cc f5 b0 7b 82 7b 7a 7a 58 bd 7a 35 c3 87 ef 48 92 c4 2c 58 b0 80 45 8b 16 19 c3 9d 24 95 76 9a 5e 3f 14 1d 9d 1d 3c fc f0 c3 80 83 eb 29 7e fb db df 98 04 52 9b 35 69 86 ce 1e 7f 22 d7 5f ff 9d 18 f6 5a b3 dd 9e 61 f2 c4 09 da 96 58 0a 93 69 33 46 b6 b4 51 d6 85 cd 0e 02 54 ab d5 34 79 95 79 a7 7a 9d 88 ec b7 50 28 50 af d7 09 82 9c 49 a0 65 4d 49 02 6e Data Ascii: @@?8w}iC@]vJIf36j6}Gn<i/{QAyJ[niXCnFTZ38SO=*6l\2ZH5d#{{zzXz5H,XE$v^?<)~R5i"_ZaXi3FQT4yyzP(PIeMIn
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: 85 02 f5 f4 38 3a 3a 3a b4 c3 6f 9a 98 cb fa d0 d7 a0 94 f5 b0 26 b1 01 3b 46 4a 5a 2c a5 e3 6c 1c c2 a6 66 2b 3b 2a f9 94 f5 d6 60 d5 35 8c 92 8b eb 78 28 d7 81 24 21 51 da f8 27 9f cf 53 2c 16 e9 eb eb 23 f0 0b c4 51 9d b0 99 ca ab 1d 97 66 18 e3 fb f9 74 0d 54 c9 17 4a ba 08 e0 7b f4 f6 f6 e1 a7 20 1b 20 f0 73 e9 f8 a4 10 c7 f1 28 95 cb 84 51 88 1f 04 e4 0b 65 62 95 d0 0c 43 0d a4 63 05 5e 40 39 57 30 40 04 c0 75 02 7c cf c1 75 5c 7c 4f f7 a9 8a 79 95 3c 7b 36 e0 13 a9 bb 30 c7 72 9d ed 82 93 ac 6f 31 5e 6a 34 1a 66 46 b1 ef 6b 69 ae cc 12 d6 fd b8 18 a6 d7 2e 9e 44 51 44 a5 52 31 3f 1b 86 21 95 4a 85 77 df 7d 97 21 43 86 d2 68 34 d8 71 c7 1d f5 bc 5f e5 b0 e7 27 27 31 69 d2 24 92 24 e1 90 43 0e 61 c7 1d 77 34 fb 84 98 57 dd 71 c7 1d dc 7b af 00 36 bd Data Ascii: 8:::o&;FJZ,lf+;*`5x($!Q'S,#QftTJ{ s(QebCc^@9W0@u\|u\\|Oy<{60ro1^j4fFki.DQDR1?!Jw}!Ch4q_''1i$$Caw4Wq{6
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: 7a 3d 6d 07 28 d0 68 d4 71 d3 fd 50 c0 bb ec 95 f6 38 33 39 6f 79 8d fc 1f d0 52 60 d2 ce d3 01 51 1c d3 a8 37 b8 fb ee 3f 70 d2 49 27 01 30 78 f0 60 be f9 8d 6f f2 c5 53 be c4 65 ff 7a 19 4f 3f fd b4 b9 a7 8d 46 83 03 0e 38 80 9b 6f be 19 d7 92 58 3f fa e8 a3 d4 eb 75 c6 8f df 83 4f 7c e2 13 e9 5e af f7 fb f9 f3 e7 33 73 e6 4c ad 7c 48 4d d7 e4 1e cd 9e 3d db 00 f4 0b 2e b8 80 e3 8e 3b 8e 7f bb ea 2a b6 6e dd 6a d6 b3 3d 42 4b ce cb 76 93 96 af a5 18 24 ff 9f a9 59 b6 6f f9 33 b4 01 70 3b da d1 8e 76 b4 a3 1d db 5d 08 50 d4 c9 14 88 81 54 c1 0b 98 34 f1 93 dc 7d f7 dd 9a 09 48 5c 7c 5f 4b 3e 0f 3d f4 30 16 2f 5e 8a e7 b9 dc 78 e3 6f b9 fc f2 cb 75 12 83 4e 88 67 9e fb 35 1c 27 75 2c ae 0c 60 d0 e0 1d e8 ab f6 e0 28 70 71 70 14 c4 69 22 1c 45 31 41 e0 32 Data Ascii: z=m(hqP839oyR`Q7?pI'0x`oSezO?F8oX?uO\|^3sL\|HM=.;*nj=BKv$Yo3p;v]PT4}H\\|_K>=0/^xouNg5'u,`(pqpi"E1A2
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: 86 9b 38 fb ec af ba 42 c5 f7 bf ff 7d be f9 cd 6f b2 69 d3 26 ef ff 65 03 06 78 10 83 18 c4 20 06 31 88 41 fc 4f a2 4c 6e 24 c1 11 e0 93 65 19 bb ec b2 8b ed 1f d3 d6 e3 49 12 31 0b 22 c0 94 49 99 a1 94 bf 99 8c cb 2e fb 19 67 7f e5 6b 84 41 c0 c6 8d 1b c9 32 6b 48 b4 64 c9 12 1e 7b ec 31 e6 cf 9f cf c1 07 bf 9d 47 1e 79 d8 81 2a db 03 6c cd b0 e6 ef bf 3f 1b 37 6e 24 49 42 d7 67 a7 a7 00 06 9f e5 14 36 c7 77 b5 b5 ce a3 fd 3e 4f ff 77 44 86 a9 95 26 f0 fa 43 c5 30 4a 8e 29 40 78 74 74 14 c0 9d 83 30 23 ed 76 9b a4 64 18 fb e3 3c f2 f2 7c 8a 52 46 5c d0 eb f5 7b ec 04 8c 36 9b 4d 67 ec 24 0c 8b 63 ac 4b 1c 2f ac 4c 5c 49 4a 76 d9 4c ea 11 1c 1a 1a a2 5d 02 6f e8 4b c2 85 c5 f3 c7 c5 88 11 16 60 fb eb 8c 2d 06 08 c0 15 c6 57 00 a1 cf 62 fb fd 89 c2 48 f5 Data Ascii: 8B}oi&ex 1AOLn$eI1"I.gkA2kHd{1Gy*l?7n$IBg6w>OwD&C0J)@xtt0#vd<\|RF\{6Mg$cK/L\IJvL]oK`-WbH
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: d6 02 6f dc 33 90 67 2d df 37 c6 f0 a9 4f 7d 8a dd 76 db cd 1d 4b 7e b6 3f f6 c9 5e ab 14 7d 3e 72 c2 89 9c 7a ea a9 93 ee ed 67 3e fd e9 49 73 8a 7d 00 2e f7 c7 f7 94 d8 12 63 00 80 07 31 88 41 0c 62 10 83 d8 42 42 29 08 03 4d 14 85 28 28 a5 7e 60 dd 65 35 3f ff d9 65 fc f6 b7 b7 f1 d1 13 4f e4 88 23 8e 60 bf 79 f3 c0 14 ac 7e fe 79 ce 3b ef 3c ee bd f7 5e da ad 09 74 60 13 6f 85 9d 2d ec 9b 58 f9 49 8b 9f a8 f9 55 7f df b8 4a c0 a7 24 3c c2 3c f8 95 7f a5 cb 91 1c 85 c1 94 b3 8b 03 ad 31 85 ed b5 0d 74 40 9e 65 8e d9 4b 4b 80 19 04 76 1e b1 95 c6 1a 2b b1 33 a0 95 ed bb 55 da 9e 6f b7 d7 73 23 4c a4 77 d6 26 9e 21 f3 e7 bf 85 2b af b8 8a 63 8f 3d 96 95 ab 9e 23 8a 42 e2 b2 c7 d3 07 4f c2 cc 89 a3 b1 e4 90 be 69 8b dc 13 e9 73 93 84 dd 77 a2 15 26 c5 b2 Data Ascii: o3g-7O}vK~?^}>rzg>Is}.c1AbBB)M((~`e5?eO#`y~y;<^t`o-XIUJ$<<1t@eKKv+3Uos#Lw&!+c=#BOisw&
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: 3d 17 c0 6d 06 91 44 da 6d 4a 5b 65 7e c8 b8 44 f5 20 e7 28 63 17 f9 ae 5c 17 df f7 75 21 2d d5 a2 0a a2 48 01 11 cb b2 35 03 a8 02 26 b1 06 47 8e e3 e8 bc dd 56 4e 76 0e cf 2d 90 c4 0e 49 ec 50 af 05 e4 b2 25 ba 4a e3 d8 67 d2 1b 48 62 29 90 d7 2a 30 27 f7 4c ee af e4 c4 07 41 40 b9 5c d6 73 b9 5c 2e 6b 15 47 a3 d1 a0 56 ab 31 3c 3c ac 65 b6 72 1d 24 5d 42 f6 08 61 f6 65 0d e5 f3 79 0a 85 82 06 f2 8d 46 83 28 8a 74 df 6b 59 77 92 33 6c 59 16 b9 7c 81 30 80 38 b2 09 82 84 28 44 5f 4f 99 6b 12 c8 92 1c 60 b9 87 b2 df c8 3a ba f8 e2 8b 99 3a 6d 1a 49 1c f1 c4 13 7f e4 b3 9f fd 0c 5b b6 6c c2 f7 9b 5a b6 3d 63 c6 0c 7a 7a 7a b0 2c 8b 87 1e 7a 88 ed db b7 e3 ba 2e bf b8 e7 17 0c 0f 0f 13 86 21 1b 37 6e a4 50 28 30 3c 3c 4c bd 5e d7 79 e9 72 fe 61 18 12 34 7d Data Ascii: =mDmJ[e~D (c\u!-H5&GVNv-IP%JgHb)*0'LA@\s\.kGV1<<er$]BaeyF(tkYw3lY\|08(D_Ok`::mI[lZ=czzz,z.!7nP(0<<L^yra4}
2024-10-24 22:45:21 UTC	8000	IN	Data Raw: af e7 9b df fc 26 1f fb d8 c7 00 f8 d6 b7 be c5 27 3e f1 09 a6 4f 9f 0e c0 bd f7 de cb f2 e5 cb 35 2b 21 e7 26 f6 bb df fd 8e 1b 6e b8 81 7f ff f7 7f 6f cb ed fb e2 17 bf c8 51 47 1d c5 3b de f1 0e 40 05 00 ae be fa 6a 36 6c d8 a0 37 fa 93 4e 3a 89 d3 4f 3f 5d 6f f4 af 66 2b 56 ac e0 f6 db 6f d7 05 6f 26 4c 98 c0 79 e7 9d c7 01 07 1c 00 a8 f5 f3 83 1f fc 80 e7 9f 7f 5e ff 80 cf 9f 3f 9f 73 cf 3d 57 cf f3 dd d9 39 e7 9c c3 37 be f1 0d ae bb ee 3a 2e ba e8 a2 dd be 2f 49 12 1e 78 e0 01 ee b8 e3 0e ed 4c 4c 9a 34 89 a5 4b 97 32 6d da 34 9e 7a ea 29 2e bf fc 72 00 be ff fd ef 73 f0 c1 07 73 d8 61 87 f1 e3 1f ff 78 d4 e3 1d 76 d8 61 ec b3 cf 3e 2c 5f be 9c af 7f fd eb fa 5a 5c 75 d5 55 fc f1 8f 7f e4 0b 5f f8 82 56 48 dc 75 d7 5d 3c f2 c8 23 7c f1 8b 5f 24 49 Data Ascii: &'>O5+!&noQG;@j6l7N:O?]of+Voo&Ly^?s=W97:./IxLL4K2m4z).rssaxva>,_Z\uU_VHu]<#\|_$I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49779	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:21 UTC	665	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/img_7755_02.jpg HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:21 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:21 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:21 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:21 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/jpeg
2024-10-24 22:45:21 UTC	1802	IN	Data Raw: 36 66 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 30 0a ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 3c 00 3c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 Data Ascii: 6feJFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((<<"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49780	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	661	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_5_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:22 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:22 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:22 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:22 UTC	2745	IN	Data Raw: 61 61 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0a 74 49 44 41 54 68 de e5 9a cb 8f 1c 57 15 c6 7f f7 51 dd 5d d5 3d fd 9c e9 e9 f1 6b 1e 76 84 88 1d 82 1d 47 04 89 2c 30 04 a1 28 b0 41 e2 1f 60 cd 9a 15 ab ec 61 8f 10 2b b2 60 65 1b 09 12 92 38 24 12 96 05 36 b6 a3 04 10 89 f3 f2 33 b6 67 a6 df cf aa ba 97 45 bb 87 9e 9e 7e cd d8 ce 38 ce b7 a9 aa 5b f7 bb e7 9e fb 38 e7 dc 53 25 de f9 a0 66 19 81 eb 77 ab 48 d1 bd bf 56 51 7c 5a 8f 77 1f 2c 70 af 7c e3 be ef 2a 44 f7 71 cb fb 1e fa b9 fd 65 fd ed 4e e2 4e d1 8f 61 5c fd d4 de d8 28 7d 51 ad 35 da ad 3a ed 56 8b 8a 33 87 20 b1 b5 92 18 b8 0e 7f 1c 52 30 a4 6c 58 9d ed 96 4f 68 53 87 66 e4 04 13 8f 39 44 95 0b 71 17 d1 12 b8 71 9f 47 Data Ascii: aadPNGIHDR<<:rtIDAThWQ]=kvG,0(A`a+`e8$63gE~8[8S%fwHVQ\|Zw,p\|*DqeNNa\(}Q5:V3 R0lXOhSf9DqqG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49782	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	670	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/radiofx_front_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:22 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:22 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:22 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:22 UTC	4032	IN	Data Raw: 66 62 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0f 7b 49 44 41 54 68 de ed 9a 5b 8c 5d d7 59 80 bf 75 d9 d7 73 9b 73 66 ce 78 6c c7 1e 3b 37 c7 4d 13 0a 25 6d 13 aa 0a 51 2e 0f 15 02 1e 8a 90 40 aa e0 15 24 1e 41 e2 a1 41 42 42 c0 43 1f 10 52 91 78 e0 01 fa 40 a1 b4 14 d1 56 4d 28 51 48 da 3a 51 2e 4e 1c 27 69 62 c7 97 19 7b 3c d7 73 dd b7 75 e1 61 cf 8c 3d b5 dd d4 34 16 22 f1 92 96 f6 5e 7b af bd f7 fa d6 ff af 7f fd eb 5f 5b 00 9e 0f 50 92 ff d7 0d b8 03 7c 07 f8 0e f0 1d e0 3b c0 77 80 ef 00 7f 70 d2 1d e0 f7 7b ba 03 fc 7e 4f 1f 38 60 7d 2b 95 0f 1d 3a 44 1c c7 54 55 45 9e e7 08 21 76 33 70 cb 47 ef fd 4f 74 54 4a e1 9c 63 75 75 95 aa aa de 7b e0 f9 f9 7d 80 27 8a 22 ca b2 22 0c Data Ascii: fb4PNGIHDR<<:r{IDATh[]Yussfxl;7M%mQ.@$AABBCRx@VM(QH:Q.N'ib{<sua=4"^{_[P\|;wp{~O8`}+:DTUE!v3pGOtTJcuu{}'""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49781	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	668	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:22 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:22 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:22 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:22 UTC	2922	IN	Data Raw: 62 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0b 25 49 44 41 54 68 de dd 5b 4d 8f 1c c5 19 7e de fa e8 99 f5 2e b6 d6 0a c1 d6 72 00 a1 44 38 c0 81 dc 12 27 27 14 c9 87 5c 89 48 0e 28 e2 c2 1f 20 3f 21 1c a2 70 0b 52 e0 17 f0 03 22 e1 f8 12 99 08 e5 e0 4b 38 44 b6 48 2c e7 c3 c2 02 96 65 3f c4 ce ce 74 77 bd 39 54 57 f5 5b d5 d5 33 e3 c5 c6 51 4a 9e 99 ee fa ea 7a de e7 fd aa ea 35 9d 39 ff 14 03 00 98 00 ff 0f e1 7b ac 10 11 b8 d8 8b 30 3e 7c f9 9c be f0 48 15 17 ab 09 00 33 2f 9d 8f e3 42 7d 3f 43 50 e5 f5 10 40 79 25 91 68 ce c1 ad 03 68 55 a1 25 55 9c e0 a6 ae ce af 23 05 ed 65 e4 91 52 b6 3e e3 71 8c 01 93 a0 56 b3 fe 70 0b 81 07 4c 53 ba ac 8e 6d 02 7b 0c 82 fd 20 04 43 4a 65 Data Ascii: b5ePNGIHDR<<:r%IDATh[M~.rD8''\H( ?!pR"K8DH,e?tw9TW[3QJz59{0>\|H3/B}?CP@y%hhU%U#eR>qVpLSm{ CJe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49784	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	668	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/djukebox_front.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:22 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:22 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:23 UTC	2468	IN	Data Raw: 39 39 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 09 5f 49 44 41 54 68 de ad 9a 4d 8c 1c 47 15 c7 ff dd 5d dd 33 b3 5f 9e 75 e2 d5 c6 1f d8 24 12 89 6d a4 48 c6 42 16 07 42 e2 13 27 94 43 0e 48 9c 48 c4 05 8e 08 89 0b 07 24 ee 40 90 38 87 08 21 2e 01 13 4b 24 04 0b 81 00 05 64 62 b0 17 d8 8d 13 ad 97 ac ed 8d f7 73 66 76 7a fa ab ba 39 98 6a aa ab 5f 55 57 af b7 a4 56 f7 54 7f d5 af fe ef bd 7a 55 3d ce d4 d4 54 01 a9 38 8e 53 3b 76 5d 17 8e e3 54 f6 62 53 eb 1d c7 a9 1d 8b e7 50 bf d5 77 c9 75 36 a5 28 0a f2 b7 5c 2f d7 b1 c3 80 a5 80 75 1b 05 47 bd f7 b0 4a 51 14 95 67 32 d3 c5 6a 63 65 58 0a d8 04 2d 3f af 0d ac e3 38 65 a3 55 35 e5 f3 26 86 a2 28 ca 67 30 ea 65 6a e3 55 d0 47 55 b7 Data Ascii: 998PNGIHDR<<:r_IDAThMG]3_u$mHBB'CHH$@8!.K$dbsfvz9j_UWVTzU=T8S;v]TbSPwu6(\/uGJQg2jceX-?8eU5&(g0ejUGU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49783	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	662	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:22 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:22 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:23 UTC	4452	IN	Data Raw: 31 31 35 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 11 1e 49 44 41 54 68 de c5 9b c9 72 5c c9 75 86 bf cc 3b d7 8c 02 0a 33 09 92 42 b3 d9 24 c5 6e ca 54 5b 0e 87 c3 1b bf 80 23 bc f4 d6 5e 39 c2 6f 20 2f b4 73 38 bc d5 0b 78 27 af 1c 8a f0 d2 92 15 76 2b 34 b4 d4 23 9b ec 6e 12 24 9b 0d 10 05 d4 3c dc 29 33 bd b8 55 85 2a a0 40 80 53 fb 47 04 ee bd 39 ff 79 32 4f 9e 93 99 25 fe eb b3 43 83 61 16 42 00 06 01 64 ff 32 98 f1 c7 74 7a 31 0e 10 18 a3 b1 6d 1b 84 40 00 4a 6b 30 60 59 12 63 0c 5a eb 49 26 63 0c c6 68 84 90 18 a3 b1 6c 1b 95 2a a4 cc d2 82 c1 18 10 42 70 26 cc d9 49 26 0c 9a cd e6 b9 93 9f 85 fd fd 7d 06 83 01 83 c1 00 cb b2 58 5a 5a a2 d1 68 90 24 09 a5 52 89 b5 b5 35 76 76 Data Ascii: 1157PNGIHDR<<:rIDAThr\u;3B$nT[#^9o /s8x'v+4#n$<)3U@SG9y2O%CaBd2tz1m@Jk0`YcZI&chlBp&I&}XZZh$R5vv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49785	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:22 UTC	645	OUT	GET /images/icons/facebook_32.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:22 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:09 GMT Accept-Ranges: bytes Content-Length: 1111 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	1111	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 03 99 00 00 03 99 01 43 21 c4 b8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 03 d4 49 44 41 54 58 85 c5 57 cf 6f 1b 55 10 fe f6 87 e3 34 ad 4b 00 bb c1 0a 21 95 90 d2 08 22 90 40 02 71 48 1a 24 2a a1 8a 1c 38 21 38 54 1c 10 d7 4a 48 95 5a 89 5e ab 1e 11 e2 84 c4 15 fa 07 d0 02 12 88 10 50 28 a7 72 0a 21 a5 14 d7 24 2b 6c a7 76 6d d7 de 7d 6f e6 3d 0e de dd ec 3a eb c4 6e d2 66 2e bb ef d7 cc 37 df cc bc d1 33 b4 d6 00 80 6c 36 3b 6e d9 43 97 61 18 73 2c dd 09 00 06 f6 57 b4 95 1a 2e 42 eb 25 26 71 be 52 a9 ac Data Ascii: PNGIHDR szzsBIT\|dpHYsC!tEXtSoftwarewww.inkscape.org<IDATXWoU4K!"@qH$*8!8TJHZ^P(r!$+lvm}o=:nf.73l6;nCas,W.B%&qR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49786	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	407	OUT	GET /images/seperator-980.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 4655 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	4655	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 1f 00 00 00 35 08 06 00 00 00 20 7b 56 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR5 {VhtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49787	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	411	OUT	GET /images/top-full-width-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1493 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	1493	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 89 08 06 00 00 00 18 08 d9 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49791	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	400	OUT	GET /images/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	291	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 30808 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	7901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 e8 08 06 00 00 00 4d a3 d4 e4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRMtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-24 22:45:23 UTC	8000	IN	Data Raw: 1a db 3e 62 40 6f e7 7f ac 03 7a bd 0e ed f3 67 ec a6 ce 6f 9f ae 3e 21 cb 5b cf af 5e 6f eb ed 73 c3 9f 79 67 b3 da 1c 09 ab f7 4d 4b 5e ee 4e e2 fa b1 3a bc 1f 54 57 a7 7e bd 6a a5 7a d2 6a 0d 69 a4 fa 90 35 53 95 0b c9 da f4 9c d7 68 cf d6 49 1c 00 a0 80 2d 98 5e 1b 6f de bc f9 27 53 a6 4c b9 52 b6 c1 5e a7 d3 1b e6 fb f4 c6 ff b4 65 cb 96 fd 49 3a 89 93 cb a9 d8 e4 28 b9 1c ed b5 cf 85 b2 2f c3 e2 1c 6e 77 6e 66 75 48 a2 6f ed 9a 5f 7b 3c 9b 3d cc cd 39 8e bb b7 51 f7 39 e4 f6 73 99 ce 3f 77 4f 9b 69 9e e5 ce e7 32 dd a6 be fe bc cf c1 95 e6 6f 9b fb fb d5 f4 c6 a6 b4 3b 4a 52 6a 12 a6 75 39 36 23 10 f0 f6 19 90 d6 1f 0f 3f d2 f3 b8 76 20 96 5b d9 09 76 3f 76 86 5e a7 2b af bc 72 d8 df 6b ba bf e1 74 c1 39 d7 3c ec d7 74 4e 9f 69 ba 4c c3 dd 4d dc 0b Data Ascii: >b@ozgo>![^osygMK^N:TW~jzji5ShI-^o'SLR^eI:(/nwnfuHo_{<=9Q9s?wOi2o;JRju96#?v [v?v^+rkt9<tNiLM
2024-10-24 22:45:23 UTC	8000	IN	Data Raw: d0 7c 93 6b d8 27 0b 09 e7 5e 0e 44 64 bb e4 ac 90 20 fe dd ef 7e d7 aa 49 97 8e fe 24 74 4b 53 76 39 30 fe ea ab af aa fb ee bb 4f 3d f5 d4 53 d6 e5 f6 e4 32 6b b3 66 cd 1a 9a 56 3a 98 fb ec 67 3f ab be fe f5 af ab b7 df 7e 7b e8 f5 f2 3d d5 20 c0 ef 08 00 2a 5f ba 4e e0 d2 75 1a 67 0f cf 67 63 e4 75 a3 66 bf 56 ba 0e 4f b2 75 82 92 ee 3d e6 73 c9 91 cc 61 fd 5b e3 ee 77 10 0c 06 e3 e1 70 f8 ac 9a 9a 9a 1b f5 b2 5b 58 6d 9f 6f cd 67 2f f4 3c ae 1d 88 e5 56 9a 0f ba 1f 3b 43 af d3 95 57 5e 39 74 df 6b 0d ba 97 79 d8 af e9 9c 3e d3 74 99 86 bb 9b b8 17 f2 59 ec 79 50 87 02 78 df be a1 68 3e e2 7a fc 96 4a 9e 8f 9e cd 02 d7 e3 37 55 f2 92 a1 05 b1 cf 2b cf c6 de 9f b2 6f 9d e7 a2 4b 93 77 e9 89 ff 95 57 5e 51 4f 3c f1 84 35 4c 9a b4 4b d3 73 69 e6 2e e7 a6 Data Ascii: \|k'^Dd ~I$tKSv90O=S2kfV:g?~{= *_NuggcufVOu=sa[wp[Xmog/<V;CW^9tky>tYyPxh>zJ7U+oKwW^QO<5LKsi.
2024-10-24 22:45:23 UTC	6907	IN	Data Raw: d6 c7 13 b2 1e 3b 4f a6 af e2 c5 b3 3e dd 40 9a b8 03 00 00 00 00 8a c6 d0 41 dc 2e dd 5f f8 d2 f5 91 58 ec 8a 35 d1 98 1a d0 25 11 8b 67 2c f2 bc 8c 27 e3 cb 74 f6 3c aa 8d 1c 44 cd 54 08 e8 00 00 00 00 80 52 f1 eb b0 fd bf 91 be fe 0b d7 c6 e3 6a 63 2c a6 fa f4 6d 34 75 de b9 dc f6 a5 86 cb f3 d1 48 e4 33 7a fc 45 e3 75 61 d1 c4 1d 00 00 a0 ca d4 d5 d5 b1 10 00 8c a6 a0 4a 5e 3e ac c5 2e 3d 97 7c 65 a5 f2 fb 3f 12 f9 d0 49 c7 f4 ec 31 fb 70 a3 b5 75 27 23 18 6c 30 a3 d1 7e 73 cb 96 35 b1 a5 cb 9e 1a bc eb 2f 0f e9 d4 be 45 8f 3f 47 97 75 2a 79 99 b5 5e 5d e2 e3 65 c1 19 9c a3 04 00 00 50 1d 96 2d 5b c6 8e 1d 80 92 e8 e8 e8 f0 dc d6 dc d5 2c dd 9f 2a 52 39 ec 4b 85 f7 90 4a 5e 66 4c 8a 9c 8c 1e d5 45 d6 5f 11 c7 e3 21 e3 29 b3 12 d0 01 00 00 aa 30 a8 eb Data Ascii: ;O>@A._X5%g,'t<DTRjc,m4uH3zEuaJ^>.=\|e?I1pu'#l0~s5/E?Guy^]eP-[,R9KJ^fLE_!)0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49789	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	407	OUT	GET /images/text-field-bg.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1015 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	1015	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1e 08 02 00 00 00 62 f7 e3 90 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRbtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49790	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	409	OUT	GET /uploads/teaser_bildung.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 4531 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	4531	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 11 30 49 44 41 54 78 9c ed dd 69 70 5d 67 7d c7 f1 ef 39 77 5f 74 ef d5 d5 72 b5 2f b6 64 4b 76 2c 29 f1 82 13 27 24 64 21 29 4b 3a c3 32 4d 69 21 e9 74 86 76 68 e9 74 28 9d e9 b4 4c a7 bc e8 9b d2 d2 19 4a 4b 29 30 5d a6 10 28 4b 79 01 a5 c0 14 42 08 ce 62 5b 5e 23 d9 b2 65 cb b2 a4 2b eb 4a ba fb be f5 c5 7d ee f1 bd 5a 62 d9 44 31 90 ff e7 95 75 74 ee 3d cb 73 7e cf f9 3f cf 39 4a b4 27 bf f3 6c 19 21 04 fa 9d de 01 21 7e 51 48 18 Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<0IDATxip]g}9w_tr/dKv,)'$d!)K:2Mi!tvht(LJK)0](KyBb[^#e+J}ZbD1ut=s~?9J'l!!~QH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49788	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	413	OUT	GET /uploads/teaser_business_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:23 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:23 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:15 GMT Accept-Ranges: bytes Content-Length: 2525 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:23 UTC	2525	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 61 08 06 00 00 00 6b ab 15 4f 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 09 5a 49 44 41 54 78 9c ed da e9 6f 1c e5 01 c7 f1 ef cc de 6b 7b ed f5 ed 38 b1 73 b6 a4 86 84 38 09 ce 01 4e d3 24 94 12 0a 14 5a 40 6d d4 43 55 51 d5 4a a8 52 d5 be e8 1f d0 17 ed 3b 54 40 aa 90 a2 a8 17 50 01 4d b9 54 8e 92 d0 84 70 34 24 04 9c 90 10 c8 e5 2b be 8f f5 da 7b 4e 5f cc e3 b1 0d 84 12 70 0e d8 df e7 d5 78 76 77 f6 f1 6a bf 3b f3 3c bb 56 53 53 93 83 88 60 5f ea 01 88 5c 2e 14 83 88 a1 18 44 0c c5 20 62 28 06 11 43 31 Data Ascii: PNGIHDRakOsBIT\|dpHYsB(xtEXtSoftwarewww.inkscape.org<ZIDATxok{8s8N$Z@mCUQJR;T@PMTp4$+{N_pxvwj;<VSS`_\.D b(C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49800	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	648	OUT	GET /images/icons/app_32_twitter.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1405 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1405	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 05 ff 00 00 05 ff 01 c9 76 ad 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 04 fa 49 44 41 54 58 85 bd 97 5b 6c 54 45 1c c6 7f 73 2e 7b ba bd 6d a1 db c2 4a 44 04 8a b6 50 4b 10 82 09 06 45 8c 82 78 21 26 78 7b 52 d1 90 68 54 12 5f 4c d0 10 4d 78 c2 a0 46 7d 43 9f 04 1e e4 01 4c 8c 17 14 62 40 02 5a 48 5a 40 d2 0a 91 5b 4b a1 65 5b b6 5b f6 dc e6 8c 0f 7b d8 b6 db dd 6d 69 94 2f 39 99 fb 7c 33 df 7c f3 9f 1c a1 94 02 20 1e 8f cf 50 9a f6 21 66 d9 23 c2 cd cc 44 08 fe 5b 28 54 34 d6 13 58 91 a3 7a f2 ea db 7d Data Ascii: PNGIHDR szzsBIT\|dpHYsvVtEXtSoftwarewww.inkscape.org<IDATX[lTEs.{mJDPKEx!&x{RhT_LMxF}CLb@ZHZ@[Ke[[{mi/9\|3\| P!f#D[(T4Xz}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49799	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	640	OUT	GET /images/icons/app_32.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1067 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 03 a8 49 44 41 54 58 85 c5 57 4b 6f e4 44 10 fe da 6e 3b 1b cf 24 93 2c 4e c2 b0 09 e2 b6 5a 29 04 0e 30 20 60 09 08 71 e3 98 3d f0 13 f8 01 48 5c 17 69 85 f8 15 48 a0 8d 84 b4 da 0b 7b 03 09 c4 85 0b 48 08 38 2c 27 a2 cc 86 84 64 42 c6 f3 b0 db fd 2a 0e f3 20 ce d8 c9 84 4c 48 49 25 5b 5d ed fe aa 3e 57 95 ba 18 11 01 00 c2 30 bc c1 18 fb 84 31 ac 13 d1 0a e7 9c a1 2f 83 3d 79 52 64 3b b9 4e 44 c4 18 ab 13 e1 7b 22 fa a8 d1 68 ec 00 Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<IDATXWKoDn;$,NZ)0 `q=H\iH{H8,'dB* LHI%[]>W01/=yRd;ND{"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49801	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	646	OUT	GET /images/icons/app_32_xmood.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1807 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1807	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 06 8c 49 44 41 54 58 85 bd 97 7f 6c 55 e5 19 c7 3f e7 f6 f6 de b6 b7 bf 7b fb 83 62 29 22 83 41 67 a1 b3 2c 64 c5 21 6e 38 35 74 19 5b 74 6e 99 7f 60 dc 64 9b 1b 51 dc 16 86 4b 96 25 1a 37 f7 47 c3 66 c8 40 a7 44 33 0d cc 19 71 88 65 e8 30 1b 73 89 fc 28 b4 29 0e b4 20 ec 02 fd fd fb f6 bc 3f ce 79 f7 c7 b9 3d ed e9 bd 6d 20 31 be c9 c9 7b de f7 7d de ef f3 3c df e7 79 9f 73 5e cb 18 03 40 3c 1e 9f 4f 76 b4 05 c3 5a cb 11 f1 70 38 6c Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<IDATXlU?{b)"Ag,d!n85t[tn`dQK%7Gf@D3qe0s() ?y=m 1{}<ys^@<OvZp8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49802	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	650	OUT	GET /images/icons/app_32_winschool.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1519 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1519	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 6c 49 44 41 54 58 85 bd 57 cb 6f 1b 45 18 ff cd 7a d7 79 34 8f 26 71 1e 4e 9c 57 63 35 29 34 4d 90 4a 11 52 a1 ad 10 12 42 48 3d 00 e5 21 71 a0 52 25 fe 03 90 7a e1 86 38 21 55 e2 ca b1 bd 72 a8 90 2a 21 51 81 a0 b4 a8 a5 a4 79 39 71 12 27 b1 93 a6 71 1e 76 12 db 3b 33 3b c3 c1 f6 ec ae 77 e3 96 0a f8 a4 4f f2 cc 7c 33 f3 fb 7e df 63 3d 44 4a 09 00 08 85 42 3d 3a 31 be 22 04 e7 b8 64 bd ba ae 13 94 a4 6c e3 27 87 ad 55 ce 4b 29 a5 Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<lIDATXWoEzy4&qNWc5)4MJRBH=!qR%z8!Ur*!Qy9q'qv;3;wO\|3~c=DJB=:1"dl'UK)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49803	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	648	OUT	GET /images/icons/app_32_xschool.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1700 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1700	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d8 00 00 01 d8 01 fa 5c a6 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 06 21 49 44 41 54 58 85 b5 57 6b 6c 54 45 18 3d f7 d1 ed 2e a5 ed b2 6c bb 7d 4a 29 e5 0d e5 ad 3c 54 1e 2a 04 24 42 05 29 02 02 89 62 34 12 41 24 28 01 f9 81 21 60 21 51 91 68 14 04 83 84 48 81 22 41 20 80 45 50 40 10 a5 80 45 b0 14 ca b3 b4 74 5b fa dc bd 3b 73 e7 8e 3f 76 3b db cb ee 52 48 70 92 9b 3b 77 be 33 e7 3b 33 f3 cd 37 73 25 ce 39 00 c0 e9 74 a6 46 19 f2 4a 59 c2 70 2a 1b e9 8a aa 4a 08 94 66 4c b8 12 c9 16 d2 ce 39 8f 32 Data Ascii: PNGIHDR szzsBIT\|dpHYs\rtEXtSoftwarewww.inkscape.org<!IDATXWklTE=.l}J)<T$B)b4A$(!`!QhH"A EP@Et[;s?v;RHp;w3;37s%9tFJYpJfL92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49804	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:23 UTC	648	OUT	GET /images/icons/app_32_hdguard.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:24 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1582 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:24 UTC	1582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d9 00 00 01 d9 01 28 1b 44 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 ab 49 44 41 54 58 85 c5 97 59 68 5c 55 18 c7 7f f7 ce 9d c9 d6 8c c9 64 c6 49 6c d2 a6 36 26 4d 37 4d 5a 41 1f 24 56 1f b4 e0 52 11 84 4a df 04 45 05 1f 44 d4 da 17 41 44 11 1f dc c5 05 45 04 15 14 f1 41 50 14 97 56 11 2d b1 a9 5b f7 74 d1 2e 69 32 9d 36 cb 64 e6 9e e5 1e 1f ee cc 9d b9 33 13 45 50 fb bd 9c 7b cf f9 ee b7 fc bf ff 77 ce 3d 96 31 06 80 64 32 b9 d8 b3 62 4f d8 36 23 96 27 7b 1c 27 62 51 94 92 4e 3d 59 68 ad 7a de 18 Data Ascii: PNGIHDR szzsBIT\|dpHYs(DtEXtSoftwarewww.inkscape.org<IDATXYh\UdIl6&M7MZA$VRJEDADEAPV-[t.i26d3EP{w=1d2bO6#'{'bQN=Yhz

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:24 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:24 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224524Z-16849878b788tnsxzb2smucwdc00000008ag00000000he5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:24 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 22:45:24 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49807	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	405	OUT	GET /images/sprite-menu.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:07 GMT Accept-Ranges: bytes Content-Length: 1365 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	1365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 50 08 02 00 00 00 d3 0f ad e7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRPtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49805	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	407	OUT	GET /images/slide-overlay.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 2826 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	2826	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRr:KtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49809	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	407	OUT	GET /images/drop-down-arr.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 1088 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	1088	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 12 08 06 00 00 00 89 80 f4 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRHtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49806	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	408	OUT	GET /images/preloader-dark.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 6816 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:25 UTC	6816	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 a5 00 00 14 12 14 8c 8a 8c 4c 4e 4c c4 c6 c4 34 32 34 e4 e6 e4 6c 6e 6c ac aa ac 24 22 24 5c 5e 5c d4 d6 d4 44 42 44 f4 f6 f4 bc ba bc 9c 9a 9c 7c 7e 7c 1c 1a 1c 54 56 54 cc ce cc 3c 3a 3c ec ee ec 74 76 74 b4 b2 b4 2c 2a 2c 64 66 64 dc de dc 94 96 94 4c 4a 4c fc fe fc c4 c2 c4 a4 a2 a4 14 16 14 8c 8e 8c 54 52 54 cc ca cc 34 36 34 ec ea ec 74 72 74 ac ae ac 24 26 24 64 62 64 dc da dc 44 46 44 fc fa fc bc be bc 84 86 84 1c 1e 1c 5c 5a 5c d4 d2 d4 3c 3e 3c f4 f2 f4 7c 7a 7c b4 b6 b4 2c 2e 2c 6c 6a 6c e4 e2 e4 a4 a6 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 04 00 1c 00 2c 00 00 00 00 10 00 10 00 00 06 a2 40 8e 90 13 73 28 56 80 cf 07 30 Data Ascii: GIF89aLNL424lnl$"$\^\DBD\|~\|TVT<:<tvt,*,dfdLJLTRT464trt$&$dbdDFD\Z\<><\|z\|,.,ljl!NETSCAPE2.0!,@s(V0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49810	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	431	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/img_7755_02.jpg HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:25 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:25 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/jpeg
2024-10-24 22:45:25 UTC	1802	IN	Data Raw: 36 66 65 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 30 0a ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 3c 00 3c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 Data Ascii: 6feJFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80C%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((<<"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49808	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:24 UTC	409	OUT	GET /uploads/slider_service.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	292	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 19 Apr 2016 10:52:13 GMT Accept-Ranges: bytes Content-Length: 256436 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	7900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 01 72 08 06 00 00 00 3a 4b b3 cc 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 25 21 00 00 25 21 01 09 09 47 e4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec bd 79 bc 1c d7 59 26 fc d4 a9 aa 5e ef a6 7d df 2d d9 b2 65 5b 8e 63 c7 76 62 c7 4e 9c 8d 84 30 21 24 61 80 09 c3 b0 7d 03 f3 7d 03 03 c3 16 18 92 90 49 08 f9 31 7c ec 30 30 84 40 20 01 12 96 00 21 64 21 89 1d 6f f1 ee 58 b6 e2 45 96 25 6b 5f ae a4 db b7 bb ab 6b 39 f3 c7 a9 e7 d4 5b d5 7d 65 c9 eb 75 74 9e df 4f ba b7 bb ab ab ce 56 75 df e7 7d 9f f7 3d de 27 3e f1 89 dd 2b 56 ac 48 e0 e0 e0 e0 e0 e0 e0 e0 Data Ascii: PNGIHDRr:KsBIT\|dpHYs%!%!GtEXtSoftwarewww.inkscape.org< IDATxyY&^}-e[cvbN0!$a}}I1\|00@ !d!oXE%k_k9[}eutOVu}='>+VH
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 49 66 ad 56 43 94 47 a6 e9 50 e0 f5 58 5c 2a cb 32 2b 5d 27 a1 94 55 99 b9 3e 98 b3 1d 86 81 75 78 d8 7b 25 cd 6c 24 51 6b 53 1c 4e 46 68 59 d5 97 d2 6a 13 39 2e 8a 8e c9 6d 6d b8 87 70 bb dd b6 63 a5 94 2a c6 30 9f bb 46 a3 69 25 cc 74 82 48 52 b7 68 d1 22 eb 10 31 e3 51 cf a3 b1 5d bb f6 d8 37 00 68 b7 db 76 bc 95 32 d5 8f 7d 55 e4 9b f6 a3 08 7e 50 ec af cb b5 2d 9f 0d bc 36 0b 60 45 71 64 d7 14 af cb 7e 02 40 1c 9b fb b0 d5 32 11 e8 30 08 e0 2b 5f 44 e0 8b 3d c6 b9 e6 0b c7 8b 6f 8b 6d 55 8b b0 51 ee 2f b7 4a 22 f1 e3 38 c9 7c 60 a5 54 d1 ff bc 10 9e 7d e6 24 46 59 c0 31 23 59 67 6e b6 8c ee f3 1e 60 ff 78 1f 06 41 f1 ac 35 c7 34 86 2a 34 cb e7 2a 89 2a 25 e2 e6 7e 2b 9e 63 f5 7a 91 57 2e b7 49 2b 9c 49 e5 f4 0a fe 2d a8 92 59 f9 fc e7 b3 82 9f cf f5 Data Ascii: IfVCGPX\2+]'U>ux{%l$QkSNFhYj9.mmpc0Fi%tHRh"1Q]7hv2}U~P-6`Eqd~@20+_D=omUQ/J"8\|`T}$FY1#Ygn`xA544*%~+czW.I+I-Y
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: b6 bd 88 10 16 12 5a ce 6b 96 95 8b 48 c9 5c 62 19 21 65 51 25 3a 20 c6 c7 c7 6d 45 67 b6 93 51 5b 46 04 01 a0 5e a7 84 5c db be 95 48 08 80 24 49 11 25 7d 4c 4c 4c 58 92 cc be b1 f0 58 9a 9a eb 98 fd 8f 19 55 35 d6 10 a3 fd 52 9d c1 fb c5 f3 cc 33 23 49 0a 75 02 fb 26 a5 de ec 6b 18 86 c8 92 62 1d 48 a7 8b 75 06 85 21 74 56 e4 b8 56 c9 27 b2 14 f0 14 b2 ac 28 80 a6 f2 eb c8 28 bb 8c a2 ca 7b 59 2a 44 e4 fd 2c 9d 88 1c 63 49 02 ab ca 15 29 8d 66 df 64 5a 44 49 a9 83 32 89 96 cf 1c 49 0c e5 58 49 f0 3a 3c a6 4a 3e 0b a7 9a 2e 3d 9f b8 3e a5 03 94 f7 14 7f f2 fc d2 31 23 3f ab 3e 5b f9 5e d5 b1 4a c8 f7 d9 0e 79 9e b9 a2 d8 f3 09 f3 b2 0a f4 82 7a 03 2b 5a e5 0a ae 7f 2d b6 33 19 05 8d b3 df 73 ea 48 bf 3b 52 76 d9 0c 42 5c 52 91 ba 06 95 ca bd 55 c9 e5 ae Data Ascii: ZkH\b!eQ%: mEgQ[F^\H$I%}LLLXXU5R3#Iu&kbHu!tVV'(({Y*D,cI)fdZDI2IXI:<J>.=>1#?>[^Jyz+Z-3sH;RvB\RU
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 40 d8 96 40 db 3f df 9a f0 38 e8 77 c8 92 7d c7 cd 1c 88 85 69 b0 df 43 40 ae 5d d9 17 76 4a 00 9a 98 ca 49 c2 66 33 0e 36 b3 6a a4 81 9e 36 f6 f2 7d dd 47 ba db 6e e3 98 3c 69 2f 1e 7b ec 51 12 15 41 fa 79 95 4a 85 5b 6e 99 cd b4 69 d3 58 b3 e6 43 6e ba f9 46 ca e5 a2 96 54 5a f2 c1 33 ce 38 83 53 4f 3d 0d c7 81 9f fe f4 2a 36 6c 5c d7 32 5a 48 8e cd 96 35 ff f1 8f 7f 64 e6 b9 e7 b1 fb ee bb b3 e3 8e 23 cc f5 b0 7b 82 7b 7a 7a 58 bd 7a 35 c3 87 ef 48 92 c4 2c 58 b0 80 45 8b 16 19 c3 9d 24 95 76 9a 5e 3f 14 1d 9d 1d 3c fc f0 c3 80 83 eb 29 7e fb db df 98 04 52 9b 35 69 86 ce 1e 7f 22 d7 5f ff 9d 18 f6 5a b3 dd 9e 61 f2 c4 09 da 96 58 0a 93 69 33 46 b6 b4 51 d6 85 cd 0e 02 54 ab d5 34 79 95 79 a7 7a 9d 88 ec b7 50 28 50 af d7 09 82 9c 49 a0 65 4d 49 02 6e Data Ascii: @@?8w}iC@]vJIf36j6}Gn<i/{QAyJ[niXCnFTZ38SO=*6l\2ZH5d#{{zzXz5H,XE$v^?<)~R5i"_ZaXi3FQT4yyzP(PIeMIn
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 85 02 f5 f4 38 3a 3a 3a b4 c3 6f 9a 98 cb fa d0 d7 a0 94 f5 b0 26 b1 01 3b 46 4a 5a 2c a5 e3 6c 1c c2 a6 66 2b 3b 2a f9 94 f5 d6 60 d5 35 8c 92 8b eb 78 28 d7 81 24 21 51 da f8 27 9f cf 53 2c 16 e9 eb eb 23 f0 0b c4 51 9d b0 99 ca ab 1d 97 66 18 e3 fb f9 74 0d 54 c9 17 4a ba 08 e0 7b f4 f6 f6 e1 a7 20 1b 20 f0 73 e9 f8 a4 10 c7 f1 28 95 cb 84 51 88 1f 04 e4 0b 65 62 95 d0 0c 43 0d a4 63 05 5e 40 39 57 30 40 04 c0 75 02 7c cf c1 75 5c 7c 4f f7 a9 8a 79 95 3c 7b 36 e0 13 a9 bb 30 c7 72 9d ed 82 93 ac 6f 31 5e 6a 34 1a 66 46 b1 ef 6b 69 ae cc 12 d6 fd b8 18 a6 d7 2e 9e 44 51 44 a5 52 31 3f 1b 86 21 95 4a 85 77 df 7d 97 21 43 86 d2 68 34 d8 71 c7 1d f5 bc 5f e5 b0 e7 27 27 31 69 d2 24 92 24 e1 90 43 0e 61 c7 1d 77 34 fb 84 98 57 dd 71 c7 1d dc 7b af 00 36 bd Data Ascii: 8:::o&;FJZ,lf+;*`5x($!Q'S,#QftTJ{ s(QebCc^@9W0@u\|u\\|Oy<{60ro1^j4fFki.DQDR1?!Jw}!Ch4q_''1i$$Caw4Wq{6
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 7a 3d 6d 07 28 d0 68 d4 71 d3 fd 50 c0 bb ec 95 f6 38 33 39 6f 79 8d fc 1f d0 52 60 d2 ce d3 01 51 1c d3 a8 37 b8 fb ee 3f 70 d2 49 27 01 30 78 f0 60 be f9 8d 6f f2 c5 53 be c4 65 ff 7a 19 4f 3f fd b4 b9 a7 8d 46 83 03 0e 38 80 9b 6f be 19 d7 92 58 3f fa e8 a3 d4 eb 75 c6 8f df 83 4f 7c e2 13 e9 5e af f7 fb f9 f3 e7 33 73 e6 4c ad 7c 48 4d d7 e4 1e cd 9e 3d db 00 f4 0b 2e b8 80 e3 8e 3b 8e 7f bb ea 2a b6 6e dd 6a d6 b3 3d 42 4b ce cb 76 93 96 af a5 18 24 ff 9f a9 59 b6 6f f9 33 b4 01 70 3b da d1 8e 76 b4 a3 1d db 5d 08 50 d4 c9 14 88 81 54 c1 0b 98 34 f1 93 dc 7d f7 dd 9a 09 48 5c 7c 5f 4b 3e 0f 3d f4 30 16 2f 5e 8a e7 b9 dc 78 e3 6f b9 fc f2 cb 75 12 83 4e 88 67 9e fb 35 1c 27 75 2c ae 0c 60 d0 e0 1d e8 ab f6 e0 28 70 71 70 14 c4 69 22 1c 45 31 41 e0 32 Data Ascii: z=m(hqP839oyR`Q7?pI'0x`oSezO?F8oX?uO\|^3sL\|HM=.;*nj=BKv$Yo3p;v]PT4}H\\|_K>=0/^xouNg5'u,`(pqpi"E1A2
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 86 9b 38 fb ec af ba 42 c5 f7 bf ff 7d be f9 cd 6f b2 69 d3 26 ef ff 65 03 06 78 10 83 18 c4 20 06 31 88 41 fc 4f a2 4c 6e 24 c1 11 e0 93 65 19 bb ec b2 8b ed 1f d3 d6 e3 49 12 31 0b 22 c0 94 49 99 a1 94 bf 99 8c cb 2e fb 19 67 7f e5 6b 84 41 c0 c6 8d 1b c9 32 6b 48 b4 64 c9 12 1e 7b ec 31 e6 cf 9f cf c1 07 bf 9d 47 1e 79 d8 81 2a db 03 6c cd b0 e6 ef bf 3f 1b 37 6e 24 49 42 d7 67 a7 a7 00 06 9f e5 14 36 c7 77 b5 b5 ce a3 fd 3e 4f ff 77 44 86 a9 95 26 f0 fa 43 c5 30 4a 8e 29 40 78 74 74 14 c0 9d 83 30 23 ed 76 9b a4 64 18 fb e3 3c f2 f2 7c 8a 52 46 5c d0 eb f5 7b ec 04 8c 36 9b 4d 67 ec 24 0c 8b 63 ac 4b 1c 2f ac 4c 5c 49 4a 76 d9 4c ea 11 1c 1a 1a a2 5d 02 6f e8 4b c2 85 c5 f3 c7 c5 88 11 16 60 fb eb 8c 2d 06 08 c0 15 c6 57 00 a1 cf 62 fb fd 89 c2 48 f5 Data Ascii: 8B}oi&ex 1AOLn$eI1"I.gkA2kHd{1Gy*l?7n$IBg6w>OwD&C0J)@xtt0#vd<\|RF\{6Mg$cK/L\IJvL]oK`-WbH
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: d6 02 6f dc 33 90 67 2d df 37 c6 f0 a9 4f 7d 8a dd 76 db cd 1d 4b 7e b6 3f f6 c9 5e ab 14 7d 3e 72 c2 89 9c 7a ea a9 93 ee ed 67 3e fd e9 49 73 8a 7d 00 2e f7 c7 f7 94 d8 12 63 00 80 07 31 88 41 0c 62 10 83 d8 42 42 29 08 03 4d 14 85 28 28 a5 7e 60 dd 65 35 3f ff d9 65 fc f6 b7 b7 f1 d1 13 4f e4 88 23 8e 60 bf 79 f3 c0 14 ac 7e fe 79 ce 3b ef 3c ee bd f7 5e da ad 09 74 60 13 6f 85 9d 2d ec 9b 58 f9 49 8b 9f a8 f9 55 7f df b8 4a c0 a7 24 3c c2 3c f8 95 7f a5 cb 91 1c 85 c1 94 b3 8b 03 ad 31 85 ed b5 0d 74 40 9e 65 8e d9 4b 4b 80 19 04 76 1e b1 95 c6 1a 2b b1 33 a0 95 ed bb 55 da 9e 6f b7 d7 73 23 4c a4 77 d6 26 9e 21 f3 e7 bf 85 2b af b8 8a 63 8f 3d 96 95 ab 9e 23 8a 42 e2 b2 c7 d3 07 4f c2 cc 89 a3 b1 e4 90 be 69 8b dc 13 e9 73 93 84 dd 77 a2 15 26 c5 b2 Data Ascii: o3g-7O}vK~?^}>rzg>Is}.c1AbBB)M((~`e5?eO#`y~y;<^t`o-XIUJ$<<1t@eKKv+3Uos#Lw&!+c=#BOisw&
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: 3d 17 c0 6d 06 91 44 da 6d 4a 5b 65 7e c8 b8 44 f5 20 e7 28 63 17 f9 ae 5c 17 df f7 75 21 2d d5 a2 0a a2 48 01 11 cb b2 35 03 a8 02 26 b1 06 47 8e e3 e8 bc dd 56 4e 76 0e cf 2d 90 c4 0e 49 ec 50 af 05 e4 b2 25 ba 4a e3 d8 67 d2 1b 48 62 29 90 d7 2a 30 27 f7 4c ee af e4 c4 07 41 40 b9 5c d6 73 b9 5c 2e 6b 15 47 a3 d1 a0 56 ab 31 3c 3c ac 65 b6 72 1d 24 5d 42 f6 08 61 f6 65 0d e5 f3 79 0a 85 82 06 f2 8d 46 83 28 8a 74 df 6b 59 77 92 33 6c 59 16 b9 7c 81 30 80 38 b2 09 82 84 28 44 5f 4f 99 6b 12 c8 92 1c 60 b9 87 b2 df c8 3a ba f8 e2 8b 99 3a 6d 1a 49 1c f1 c4 13 7f e4 b3 9f fd 0c 5b b6 6c c2 f7 9b 5a b6 3d 63 c6 0c 7a 7a 7a b0 2c 8b 87 1e 7a 88 ed db b7 e3 ba 2e bf b8 e7 17 0c 0f 0f 13 86 21 1b 37 6e a4 50 28 30 3c 3c 4c bd 5e d7 79 e9 72 fe 61 18 12 34 7d Data Ascii: =mDmJ[e~D (c\u!-H5&GVNv-IP%JgHb)*0'LA@\s\.kGV1<<er$]BaeyF(tkYw3lY\|08(D_Ok`::mI[lZ=czzz,z.!7nP(0<<L^yra4}
2024-10-24 22:45:25 UTC	8000	IN	Data Raw: af e7 9b df fc 26 1f fb d8 c7 00 f8 d6 b7 be c5 27 3e f1 09 a6 4f 9f 0e c0 bd f7 de cb f2 e5 cb 35 2b 21 e7 26 f6 bb df fd 8e 1b 6e b8 81 7f ff f7 7f 6f cb ed fb e2 17 bf c8 51 47 1d c5 3b de f1 0e 40 05 00 ae be fa 6a 36 6c d8 a0 37 fa 93 4e 3a 89 d3 4f 3f 5d 6f f4 af 66 2b 56 ac e0 f6 db 6f d7 05 6f 26 4c 98 c0 79 e7 9d c7 01 07 1c 00 a8 f5 f3 83 1f fc 80 e7 9f 7f 5e ff 80 cf 9f 3f 9f 73 cf 3d 57 cf f3 dd d9 39 e7 9c c3 37 be f1 0d ae bb ee 3a 2e ba e8 a2 dd be 2f 49 12 1e 78 e0 01 ee b8 e3 0e ed 4c 4c 9a 34 89 a5 4b 97 32 6d da 34 9e 7a ea 29 2e bf fc 72 00 be ff fd ef 73 f0 c1 07 73 d8 61 87 f1 e3 1f ff 78 d4 e3 1d 76 d8 61 ec b3 cf 3e 2c 5f be 9c af 7f fd eb fa 5a 5c 75 d5 55 fc f1 8f 7f e4 0b 5f f8 82 56 48 dc 75 d7 5d 3c f2 c8 23 7c f1 8b 5f 24 49 Data Ascii: &'>O5+!&noQG;@j6l7N:O?]of+Voo&Ly^?s=W97:./IxLL4K2m4z).rssaxva>,_Z\uU_VHu]<#\|_$I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49812	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	645	OUT	GET /images/icons/app_32_inis.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1648 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	1648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 05 ff 00 00 05 ff 01 c9 76 ad 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 ed 49 44 41 54 58 85 c5 97 6d 6c 94 55 16 c7 7f f7 99 67 a6 53 4a 3b 43 e7 99 16 16 d3 4e df 69 2d 62 a8 bc 64 89 84 a5 2a 04 16 14 17 f1 05 8d c1 c6 ac 7e d1 a8 d9 b8 59 13 13 34 fb 61 fd 40 dc ac f1 6d 6b b4 18 89 46 30 e0 06 31 fa 61 b3 ac ab 5b a4 40 95 17 8b 85 6e 37 0b 42 3b 33 6d a7 2d f3 bc df fd 30 d3 4e a7 33 a5 31 51 38 c9 64 72 e7 9e e7 fc ff e7 ff 9c 73 cf 5c 21 a5 04 40 d3 b4 85 8a 94 3b 55 58 6b 2b 22 e2 51 55 41 da Data Ascii: PNGIHDR szzsBIT\|dpHYsvVtEXtSoftwarewww.inkscape.org<IDATXmlUgSJ;CNi-bd*~Y4a@mkF01a[@n7B;3m-0N31Q8drs\!@;UXk+"QUA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49815	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	639	OUT	GET /images/logo-footer.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 2802 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	2802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 21 08 06 00 00 00 5e 23 a0 50 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 02 c5 00 00 02 c5 01 89 d6 7f ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0a 6f 49 44 41 54 78 9c ed 9b 7b 70 54 d5 19 c0 7f df dd 0d 21 e1 29 c8 23 40 51 14 90 12 51 e4 55 54 6c c9 a0 c1 64 c3 6e a2 64 17 41 34 b5 0e d4 32 56 6d b5 b5 af e9 f4 e1 1f da d6 8e 63 19 8b 53 1f 6d 1d 92 cd 2a c9 86 dd 20 d6 42 a0 3e 40 0a 28 2a 8a 8f 11 04 81 90 96 47 20 24 cb 66 ef d7 3f 6e 36 09 31 24 81 dd 2c 29 ee 6f e6 ce dd bd e7 9e ef fb ce dd ef 9e 73 be ef 9c 15 55 a5 07 72 37 f0 1d 20 13 f8 1c 08 02 bf 02 4e 9e 4f a3 Data Ascii: PNGIHDR!^#PsBIT\|dpHYstEXtSoftwarewww.inkscape.org<oIDATx{pT!)#@QQUTldndA42VmcSm* B>@(*G $f?n61$,)osUr7 NO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49816	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	660	OUT	GET /images/seperator-980-50-opa.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/css/base.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 3514 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	3514	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 1f 00 00 00 35 08 06 00 00 00 20 7b 56 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR5 {VhtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49813	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	654	OUT	GET /images/prettyPhoto/default/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 6682 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	6682	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 93 08 06 00 00 00 42 89 c1 c3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49817	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	656	OUT	GET /images/prettyPhoto/default/sprite_x.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:17 GMT Accept-Ranges: bytes Content-Length: 1097 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	1097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 2f 08 06 00 00 00 2f 81 12 cd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR//tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49814	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	656	OUT	GET /images/prettyPhoto/default/sprite_y.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:25 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:17 GMT Accept-Ranges: bytes Content-Length: 1162 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:25 UTC	1162	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 82 08 06 00 00 00 f5 fe c0 49 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR=ItEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:25 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224525Z-16849878b78j7llf5vkyvvcehs00000000v0000000002r1p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:25 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224525Z-16849878b78gvgmlcfru6nuc54000000085g00000000whns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 106bf0d0-c01e-0066-1446-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224525Z-17c5cb586f6q4vmqk5qfzgptrg00000001y0000000008cdf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224525Z-r197bdfb6b4kzncf21qcaynxz800000002kg00000000drpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:45:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224525Z-16849878b78k46f8kzwxznephs000000083g00000000ystv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49833	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	659	OUT	GET /images/prettyPhoto/default/sprite_next.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 1358 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:26 UTC	1358	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1e 08 06 00 00 00 3f c5 7e 9f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR?~tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49836	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	659	OUT	GET /images/prettyPhoto/default/sprite_prev.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:17 GMT Accept-Ranges: bytes Content-Length: 1376 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:26 UTC	1376	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 1e 08 06 00 00 00 dd 19 65 e6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRetEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49832	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	661	OUT	GET /images/prettyPhoto/default/default_thumb.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 1537 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:26 UTC	1537	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 21 08 02 00 00 00 14 1f 6f d3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR2!otEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49834	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	654	OUT	GET /images/prettyPhoto/default/loader.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 6331 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:26 UTC	6331	IN	Data Raw: 47 49 46 38 39 61 14 00 14 00 a5 00 00 64 66 64 b4 b6 b4 8c 8e 8c dc de dc 7c 7a 7c cc ca cc a4 a2 a4 f4 f2 f4 74 72 74 c4 c2 c4 9c 9a 9c ec ea ec 84 86 84 d4 d6 d4 ac ae ac 6c 6e 6c bc be bc 94 96 94 e4 e6 e4 84 82 84 d4 d2 d4 ac aa ac fc fe fc 6c 6a 6c bc ba bc 94 92 94 e4 e2 e4 7c 7e 7c cc ce cc a4 a6 a4 f4 f6 f4 74 76 74 c4 c6 c4 9c 9e 9c ec ee ec 8c 8a 8c dc da dc b4 b2 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 16 00 2c 00 00 00 00 14 00 14 00 00 06 f3 40 8f c7 22 3c 80 14 84 8b 70 c9 Data Ascii: GIF89adfd\|z\|trtlnlljl\|~\|tvt!NETSCAPE2.0!,@"<p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49826	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	427	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_5_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:26 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:26 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:26 UTC	2745	IN	Data Raw: 61 61 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0a 74 49 44 41 54 68 de e5 9a cb 8f 1c 57 15 c6 7f f7 51 dd 5d d5 3d fd 9c e9 e9 f1 6b 1e 76 84 88 1d 82 1d 47 04 89 2c 30 04 a1 28 b0 41 e2 1f 60 cd 9a 15 ab ec 61 8f 10 2b b2 60 65 1b 09 12 92 38 24 12 96 05 36 b6 a3 04 10 89 f3 f2 33 b6 67 a6 df cf aa ba 97 45 bb 87 9e 9e 7e cd d8 ce 38 ce b7 a9 aa 5b f7 bb e7 9e fb 38 e7 dc 53 25 de f9 a0 66 19 81 eb 77 ab 48 d1 bd bf 56 51 7c 5a 8f 77 1f 2c 70 af 7c e3 be ef 2a 44 f7 71 cb fb 1e fa b9 fd 65 fd ed 4e e2 4e d1 8f 61 5c fd d4 de d8 28 7d 51 ad 35 da ad 3a ed 56 8b 8a 33 87 20 b1 b5 92 18 b8 0e 7f 1c 52 30 a4 6c 58 9d ed 96 4f 68 53 87 66 e4 04 13 8f 39 44 95 0b 71 17 d1 12 b8 71 9f 47 Data Ascii: aadPNGIHDR<<:rtIDAThWQ]=kvG,0(A`a+`e8$63gE~8[8S%fwHVQ\|Zw,p\|*DqeNNa\(}Q5:V3 R0lXOhSf9DqqG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49829	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	434	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/david_front_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:26 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:26 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:26 UTC	2922	IN	Data Raw: 62 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0b 25 49 44 41 54 68 de dd 5b 4d 8f 1c c5 19 7e de fa e8 99 f5 2e b6 d6 0a c1 d6 72 00 a1 44 38 c0 81 dc 12 27 27 14 c9 87 5c 89 48 0e 28 e2 c2 1f 20 3f 21 1c a2 70 0b 52 e0 17 f0 03 22 e1 f8 12 99 08 e5 e0 4b 38 44 b6 48 2c e7 c3 c2 02 96 65 3f c4 ce ce 74 77 bd 39 54 57 f5 5b d5 d5 33 e3 c5 c6 51 4a 9e 99 ee fa ea 7a de e7 fd aa ea 35 9d 39 ff 14 03 00 98 00 ff 0f e1 7b ac 10 11 b8 d8 8b 30 3e 7c f9 9c be f0 48 15 17 ab 09 00 33 2f 9d 8f e3 42 7d 3f 43 50 e5 f5 10 40 79 25 91 68 ce c1 ad 03 68 55 a1 25 55 9c e0 a6 ae ce af 23 05 ed 65 e4 91 52 b6 3e e3 71 8c 01 93 a0 56 b3 fe 70 0b 81 07 4c 53 ba ac 8e 6d 02 7b 0c 82 fd 20 04 43 4a 65 Data Ascii: b5ePNGIHDR<<:r%IDATh[M~.rD8''\H( ?!pR"K8DH,e?tw9TW[3QJz59{0>\|H3/B}?CP@y%hhU%U#eR>qVpLSm{ CJe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49828	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	434	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/djukebox_front.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:26 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:26 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:26 UTC	2468	IN	Data Raw: 39 39 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 09 5f 49 44 41 54 68 de ad 9a 4d 8c 1c 47 15 c7 ff dd 5d dd 33 b3 5f 9e 75 e2 d5 c6 1f d8 24 12 89 6d a4 48 c6 42 16 07 42 e2 13 27 94 43 0e 48 9c 48 c4 05 8e 08 89 0b 07 24 ee 40 90 38 87 08 21 2e 01 13 4b 24 04 0b 81 00 05 64 62 b0 17 d8 8d 13 ad 97 ac ed 8d f7 73 66 76 7a fa ab ba 39 98 6a aa ab 5f 55 57 af b7 a4 56 f7 54 7f d5 af fe ef bd 7a 55 3d ce d4 d4 54 01 a9 38 8e 53 3b 76 5d 17 8e e3 54 f6 62 53 eb 1d c7 a9 1d 8b e7 50 bf d5 77 c9 75 36 a5 28 0a f2 b7 5c 2f d7 b1 c3 80 a5 80 75 1b 05 47 bd f7 b0 4a 51 14 95 67 32 d3 c5 6a 63 65 58 0a d8 04 2d 3f af 0d ac e3 38 65 a3 55 35 e5 f3 26 86 a2 28 ca 67 30 ea 65 6a e3 55 d0 47 55 b7 Data Ascii: 998PNGIHDR<<:r_IDAThMG]3_u$mHBB'CHH$@8!.K$dbsfvz9j_UWVTzU=T8S;v]TbSPwu6(\/uGJQg2jceX-?8eU5&(g0ejUGU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49827	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	436	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/radiofx_front_01.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:26 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:26 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:26 UTC	4032	IN	Data Raw: 66 62 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 0f 7b 49 44 41 54 68 de ed 9a 5b 8c 5d d7 59 80 bf 75 d9 d7 73 9b 73 66 ce 78 6c c7 1e 3b 37 c7 4d 13 0a 25 6d 13 aa 0a 51 2e 0f 15 02 1e 8a 90 40 aa e0 15 24 1e 41 e2 a1 41 42 42 c0 43 1f 10 52 91 78 e0 01 fa 40 a1 b4 14 d1 56 4d 28 51 48 da 3a 51 2e 4e 1c 27 69 62 c7 97 19 7b 3c d7 73 dd b7 75 e1 61 cf 8c 3d b5 dd d4 34 16 22 f1 92 96 f6 5e 7b af bd f7 fa d6 ff af 7f fd eb 5f 5b 00 9e 0f 50 92 ff d7 0d b8 03 7c 07 f8 0e f0 1d e0 3b c0 77 80 ef 00 7f 70 d2 1d e0 f7 7b ba 03 fc 7e 4f 1f 38 60 7d 2b 95 0f 1d 3a 44 1c c7 54 55 45 9e e7 08 21 76 33 70 cb 47 ef fd 4f 74 54 4a e1 9c 63 75 75 95 aa aa de 7b e0 f9 f9 7d 80 27 8a 22 ca b2 22 0c Data Ascii: fb4PNGIHDR<<:r{IDATh[]Yussfxl;7M%mQ.@$AABBCRx@VM(QH:Q.N'ib{<sua=4"^{_[P\|;wp{~O8`}+:DTUE!v3pGOtTJcuu{}'""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49831	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	428	OUT	GET /thumbs/w60-h60-z1-ac-q80/uploads/ws_10_03.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Accept-Ranges: bytes Cache-Control: max-age=864000, must-revalidate Expires: Sun, 03 Nov 2024 23:45:26 GMT Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 24 Oct 2024 22:45:26 GMT Cache-Control: max-age=1, private, must-revalidate Transfer-Encoding: chunked Content-Type: image/png
2024-10-24 22:45:26 UTC	4452	IN	Data Raw: 31 31 35 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 11 1e 49 44 41 54 68 de c5 9b c9 72 5c c9 75 86 bf cc 3b d7 8c 02 0a 33 09 92 42 b3 d9 24 c5 6e ca 54 5b 0e 87 c3 1b bf 80 23 bc f4 d6 5e 39 c2 6f 20 2f b4 73 38 bc d5 0b 78 27 af 1c 8a f0 d2 92 15 76 2b 34 b4 d4 23 9b ec 6e 12 24 9b 0d 10 05 d4 3c dc 29 33 bd b8 55 85 2a a0 40 80 53 fb 47 04 ee bd 39 ff 79 32 4f 9e 93 99 25 fe eb b3 43 83 61 16 42 00 06 01 64 ff 32 98 f1 c7 74 7a 31 0e 10 18 a3 b1 6d 1b 84 40 00 4a 6b 30 60 59 12 63 0c 5a eb 49 26 63 0c c6 68 84 90 18 a3 b1 6c 1b 95 2a a4 cc d2 82 c1 18 10 42 70 26 cc d9 49 26 0c 9a cd e6 b9 93 9f 85 fd fd 7d 06 83 01 83 c1 00 cb b2 58 5a 5a a2 d1 68 90 24 09 a5 52 89 b5 b5 35 76 76 Data Ascii: 1157PNGIHDR<<:rIDAThr\u;3B$nT[#^9o /s8x'v+4#n$<)3U@SG9y2O%CaBd2tz1m@Jk0`YcZI&chlBp&I&}XZZh$R5vv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49837	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	660	OUT	GET /images/prettyPhoto/light_rounded/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:18 GMT Accept-Ranges: bytes Content-Length: 4099 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:26 UTC	4099	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 77 08 06 00 00 00 cf 5c 98 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f a5 49 44 41 54 78 da ec 5d 7b 8c 15 d5 19 3f 7b 77 45 5e 2e 0f 79 ba ac 0b 14 ab 0b 28 8f 15 2d 2f b9 96 57 69 41 31 be b0 81 b0 a6 04 13 d3 26 4d 49 34 95 5a 16 34 6d 49 94 98 b4 ff d0 90 b0 36 d2 20 d6 3f 4c a0 29 95 c0 ae 11 57 41 6b b5 ca f2 58 5e ab 9b 15 08 e0 b2 bc e5 d1 ef 77 f6 9c eb d9 c3 99 7b 67 e6 ce dc 7b e7 de f3 25 5f 66 76 e6 cc 77 1e df ef 7c e7 fb be 39 77 b6 e8 fa f5 eb cc 92 a5 92 95 2b 57 3a de bc e3 8e 3b 46 d1 61 3a f1 44 e2 7b 88 2b 02 aa b7 87 38 9e cb 44 27 01 76 f0 b5 6b d7 d8 e5 cb 97 63 df 7d f7 5d 31 f8 ea d5 Data Ascii: PNGIHDRw\WtEXtSoftwareAdobe ImageReadyqe<IDATx]{?{wE^.y(-/WiA1&MI4Z4mI6 ?L)WAkX^w{g{%_fvw\|9w+W:;Fa:D{+8D'vkc}]1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49835	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	661	OUT	GET /images/prettyPhoto/light_rounded/btnNext.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:26 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:18 GMT Accept-Ranges: bytes Content-Length: 1411 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:26 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da cc 98 c9 4b 64 49 10 c6 a3 b4 dc 57 14 14 0f 83 0b 2a 68 a9 07 11 9a 56 5c 70 03 51 51 3c 38 a0 87 e9 83 77 2f e3 65 18 11 3d d8 82 d0 47 cf f3 07 88 0a 73 70 5c 66 c4 83 20 3a 17 bd 28 6e 87 1e 70 57 c4 7d ab aa 89 2f a8 28 b2 5f 57 95 65 5f aa 12 92 f7 2a 5f 66 be fc 45 7c 11 99 af 6c 6e b7 9b 6c 36 1b 8d 8f 8f 93 8f e2 e0 e7 8d 7c fd c8 7d 4a f9 9a 8d 46 6e fb 1a 17 17 57 10 15 15 e5 8a 8d 8d 75 da ed 76 17 e6 08 41 49 f0 5c ef de 33 c8 ae 37 0f 0f 0f de 46 06 ca e1 cb 27 97 cb f5 0b d7 1c 18 86 af 52 51 22 22 22 8a Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<%IDATxKdIWhV\pQQ<8w/e=Gsp\f :(npW}/(_We__fE\|lnl6\|}JFnWuvAI\37F'RQ"""

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224526Z-16849878b78c2tmb7nhatnd68s00000008a000000000hta1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224526Z-16849878b786lft2mu9uftf3y400000000zg000000005zvv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:26 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: d919e2dc-e01e-001f-153d-261633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224526Z-r197bdfb6b4bq7nf8mnywhn9e000000000p000000000mbdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:45:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224526Z-15b8d89586fxdh48qknu9dqk2g00000003g000000000m0q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:26 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224526Z-16849878b78jfqwd1dsrhqg3aw00000008c000000000nv3b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:26 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224527Z-16849878b78k46f8kzwxznephs000000088g00000000ap2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224527Z-16849878b786vsxz21496wc2qn00000008dg00000000e3cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:45:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3892a0ce-b01e-003d-5f3a-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224527Z-r197bdfb6b4tq6ldv3s2dcykm8000000029g000000006pep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224527Z-16849878b78c5zx4gw8tcga1b4000000088000000000autz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 802631a9-901e-002a-57ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224527Z-15b8d89586fzhrwgk23ex2bvhw00000002d0000000008s2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49845	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	411	OUT	GET /images/icons/facebook_32.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:27 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:09 GMT Accept-Ranges: bytes Content-Length: 1111 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:27 UTC	1111	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 03 99 00 00 03 99 01 43 21 c4 b8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 03 d4 49 44 41 54 58 85 c5 57 cf 6f 1b 55 10 fe f6 87 e3 34 ad 4b 00 bb c1 0a 21 95 90 d2 08 22 90 40 02 71 48 1a 24 2a a1 8a 1c 38 21 38 54 1c 10 d7 4a 48 95 5a 89 5e ab 1e 11 e2 84 c4 15 fa 07 d0 02 12 88 10 50 28 a7 72 0a 21 a5 14 d7 24 2b 6c a7 76 6d d7 de 7d 6f e6 3d 0e de dd ec 3a eb c4 6e d2 66 2e bb ef d7 cc 37 df cc bc d1 33 b4 d6 00 80 6c 36 3b 6e d9 43 97 61 18 73 2c dd 09 00 06 f6 57 b4 95 1a 2e 42 eb 25 26 71 be 52 a9 ac Data Ascii: PNGIHDR szzsBIT\|dpHYsC!tEXtSoftwarewww.inkscape.org<IDATXWoU4K!"@qH$*8!8TJHZ^P(r!$+lvm}o=:nf.73l6;nCas,W.B%&qR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49844	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	414	OUT	GET /images/icons/app_32_twitter.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:27 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1405 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:27 UTC	1405	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 05 ff 00 00 05 ff 01 c9 76 ad 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 04 fa 49 44 41 54 58 85 bd 97 5b 6c 54 45 1c c6 7f 73 2e 7b ba bd 6d a1 db c2 4a 44 04 8a b6 50 4b 10 82 09 06 45 8c 82 78 21 26 78 7b 52 d1 90 68 54 12 5f 4c d0 10 4d 78 c2 a0 46 7d 43 9f 04 1e e4 01 4c 8c 17 14 62 40 02 5a 48 5a 40 d2 0a 91 5b 4b a1 65 5b b6 5b f6 dc e6 8c 0f 7b d8 b6 db dd 6d 69 94 2f 39 99 fb 7c 33 df 7c f3 9f 1c a1 94 02 20 1e 8f cf 50 9a f6 21 66 d9 23 c2 cd cc 44 08 fe 5b 28 54 34 d6 13 58 91 a3 7a f2 ea db 7d Data Ascii: PNGIHDR szzsBIT\|dpHYsvVtEXtSoftwarewww.inkscape.org<IDATX[lTEs.{mJDPKEx!&x{RhT_LMxF}CLb@ZHZ@[Ke[[{mi/9\|3\| P!f#D[(T4Xz}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49843	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	416	OUT	GET /images/icons/app_32_winschool.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:27 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1519 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:27 UTC	1519	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 6c 49 44 41 54 58 85 bd 57 cb 6f 1b 45 18 ff cd 7a d7 79 34 8f 26 71 1e 4e 9c 57 63 35 29 34 4d 90 4a 11 52 a1 ad 10 12 42 48 3d 00 e5 21 71 a0 52 25 fe 03 90 7a e1 86 38 21 55 e2 ca b1 bd 72 a8 90 2a 21 51 81 a0 b4 a8 a5 a4 79 39 71 12 27 b1 93 a6 71 1e 76 12 db 3b 33 3b c3 c1 f6 ec ae 77 e3 96 0a f8 a4 4f f2 cc 7c 33 f3 fb 7e df 63 3d 44 4a 09 00 08 85 42 3d 3a 31 be 22 04 e7 b8 64 bd ba ae 13 94 a4 6c e3 27 87 ad 55 ce 4b 29 a5 Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<lIDATXWoEzy4&qNWc5)4MJRBH=!qR%z8!Ur*!Qy9q'qv;3;wO\|3~c=DJB=:1"dl'UK)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49849	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	665	OUT	GET /images/prettyPhoto/light_rounded/btnPrevious.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:18 GMT Accept-Ranges: bytes Content-Length: 1442 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 44 49 44 41 54 78 da d4 58 49 4b 2c 57 14 3e 3d 38 8f 88 13 88 8a a2 a0 b8 10 44 08 4e 28 4e 18 b7 0a 59 64 93 7f 20 04 5c 89 0b 57 82 ca c3 45 50 14 c5 48 70 d8 04 dc 05 22 09 71 24 28 01 4d 8c 51 d4 38 34 2a 4e 38 cf 43 e7 7e 27 7d 9a 6b e7 f6 6b 93 c0 a3 df 81 4b dd aa ba 75 ea 7c e7 3b c3 ad b2 0f 0d 0d 5d d1 7f 97 30 d7 f1 9a 3e 90 3c 3e 3e 5a ef ef ef 6d 0f 0f 0f d6 a7 a7 27 eb f3 f3 b3 15 d7 5f 5e 5e fe 50 87 5f d5 f1 67 75 ed 87 a6 a6 a6 25 75 ee 34 e9 b0 f4 f5 f5 39 e9 23 10 05 86 14 58 ba bb bb 23 05 96 9c 4e 27 5f c3 80 58 ad 56 Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<DIDATxXIK,W>=8DN(NYd \WEPHp"q$(MQ84*N8C~'}kkKu\|;]0><>>Zm'_^^P_gu%u49#X#N'_XV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49848	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	414	OUT	GET /images/icons/app_32_xschool.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1700 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1700	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d8 00 00 01 d8 01 fa 5c a6 72 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 06 21 49 44 41 54 58 85 b5 57 6b 6c 54 45 18 3d f7 d1 ed 2e a5 ed b2 6c bb 7d 4a 29 e5 0d e5 ad 3c 54 1e 2a 04 24 42 05 29 02 02 89 62 34 12 41 24 28 01 f9 81 21 60 21 51 91 68 14 04 83 84 48 81 22 41 20 80 45 50 40 10 a5 80 45 b0 14 ca b3 b4 74 5b fa dc bd 3b 73 e7 8e 3f 76 3b db cb ee 52 48 70 92 9b 3b 77 be 33 e7 3b 33 f3 cd 37 73 25 ce 39 00 c0 e9 74 a6 46 19 f2 4a 59 c2 70 2a 1b e9 8a aa 4a 08 94 66 4c b8 12 c9 16 d2 ce 39 8f 32 Data Ascii: PNGIHDR szzsBIT\|dpHYs\rtEXtSoftwarewww.inkscape.org<!IDATXWklTE=.l}J)<T$B)b4A$(!`!QhH"A EP@Et[;s?v;RHp;w3;37s%9tFJYpJfL92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49852	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	659	OUT	GET /images/prettyPhoto/dark_rounded/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:15 GMT Accept-Ranges: bytes Content-Length: 4076 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	4076	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 77 08 06 00 00 00 cf 5c 98 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f 8e 49 44 41 54 78 da ec 5d 6d 6c 14 c7 19 1e 9b c3 40 20 e6 d3 7c 19 82 21 26 89 c3 77 80 46 7c c6 7c 18 97 16 08 28 81 1f 95 92 20 05 f1 03 a9 4a a5 54 25 15 aa 62 aa fe 48 a4 24 6a 7f 52 11 61 21 d1 1f a4 f9 91 2a b4 45 20 63 50 88 49 00 b5 a2 80 09 18 30 4e 1c 07 ac 18 30 10 0c 21 a6 ef 33 9e b9 8c 27 b3 77 bb 7b bb 77 b7 77 f3 4a a3 db db 9d 7d 67 76 de 67 de af 9d 9b 2b 78 f8 f0 21 b3 64 29 b6 7d fb 76 c7 8b 93 27 4f 9e 42 1f cb a8 cc a3 32 9d ca 84 80 da 1d 28 3e ef a4 e3 21 01 76 94 ee ee 6e 76 ff fe fd c2 ef bf ff be 0f ca 0f 3f fc Data Ascii: PNGIHDRw\WtEXtSoftwareAdobe ImageReadyqe<IDATx]ml@ \|!&wF\|\|( JT%bH$jRa!*E cPI0N0!3'w{wwJ}gvg+x!d)}v'OB2(>!vnv?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49850	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	667	OUT	GET /images/prettyPhoto/dark_rounded/contentPattern.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	289	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:15 GMT Accept-Ranges: bytes Content-Length: 130 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	130	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 24 49 44 41 54 78 da 62 64 60 60 d8 cf 40 45 c0 c4 40 65 30 6a e0 a8 81 a3 06 8e 1a 38 6a e0 50 31 10 20 c0 00 3a df 00 e7 88 6f c1 32 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<$IDATxbd``@E@e0j8jP1 :o2IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49851	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	660	OUT	GET /images/prettyPhoto/dark_rounded/btnNext.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:15 GMT Accept-Ranges: bytes Content-Length: 1411 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da cc 98 c9 4b 64 49 10 c6 a3 b4 dc 57 14 14 0f 83 0b 2a 68 a9 07 11 9a 56 5c 70 03 51 51 3c 38 a0 87 e9 83 77 2f e3 65 18 11 3d d8 82 d0 47 cf f3 07 88 0a 73 70 5c 66 c4 83 20 3a 17 bd 28 6e 87 1e 70 57 c4 7d ab aa 89 2f a8 28 b2 5f 57 95 65 5f aa 12 92 f7 2a 5f 66 be fc 45 7c 11 99 af 6c 6e b7 9b 6c 36 1b 8d 8f 8f 93 8f e2 e0 e7 8d 7c fd c8 7d 4a f9 9a 8d 46 6e fb 1a 17 17 57 10 15 15 e5 8a 8d 8d 75 da ed 76 17 e6 08 41 49 f0 5c ef de 33 c8 ae 37 0f 0f 0f de 46 06 ca e1 cb 27 97 cb f5 0b d7 1c 18 86 af 52 51 22 22 22 8a Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<%IDATxKdIWhV\pQQ<8w/e=Gsp\f :(npW}/(_We__fE\|lnl6\|}JFnWuvAI\37F'RQ"""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49856	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	664	OUT	GET /images/prettyPhoto/dark_rounded/btnPrevious.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:15 GMT Accept-Ranges: bytes Content-Length: 1442 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 44 49 44 41 54 78 da d4 58 49 4b 2c 57 14 3e 3d 38 8f 88 13 88 8a a2 a0 b8 10 44 08 4e 28 4e 18 b7 0a 59 64 93 7f 20 04 5c 89 0b 57 82 ca c3 45 50 14 c5 48 70 d8 04 dc 05 22 09 71 24 28 01 4d 8c 51 d4 38 34 2a 4e 38 cf 43 e7 7e 27 7d 9a 6b e7 f6 6b 93 c0 a3 df 81 4b dd aa ba 75 ea 7c e7 3b c3 ad b2 0f 0d 0d 5d d1 7f 97 30 d7 f1 9a 3e 90 3c 3e 3e 5a ef ef ef 6d 0f 0f 0f d6 a7 a7 27 eb f3 f3 b3 15 d7 5f 5e 5e fe 50 87 5f d5 f1 67 75 ed 87 a6 a6 a6 25 75 ee 34 e9 b0 f4 f5 f5 39 e9 23 10 05 86 14 58 ba bb bb 23 05 96 9c 4e 27 5f c3 80 58 ad 56 Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<DIDATxXIK,W>=8DN(NYd \WEPHp"q$(MQ84*N8C~'}kkKu\|;]0><>>Zm'_^^P_gu%u49#X#N'_XV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49847	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	406	OUT	GET /images/icons/app_32.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1067 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1067	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 03 a8 49 44 41 54 58 85 c5 57 4b 6f e4 44 10 fe da 6e 3b 1b cf 24 93 2c 4e c2 b0 09 e2 b6 5a 29 04 0e 30 20 60 09 08 71 e3 98 3d f0 13 f8 01 48 5c 17 69 85 f8 15 48 a0 8d 84 b4 da 0b 7b 03 09 c4 85 0b 48 08 38 2c 27 a2 cc 86 84 64 42 c6 f3 b0 db fd 2a 0e f3 20 ce d8 c9 84 4c 48 49 25 5b 5d ed fe aa 3e 57 95 ba 18 11 01 00 c2 30 bc c1 18 fb 84 31 ac 13 d1 0a e7 9c a1 2f 83 3d 79 52 64 3b b9 4e 44 c4 18 ab 13 e1 7b 22 fa a8 d1 68 ec 00 Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<IDATXWKoDn;$,NZ)0 `q=H\iH{H8,'dB* LHI%[]>W01/=yRd;ND{"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49860	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	414	OUT	GET /images/icons/app_32_hdguard.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1582 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:28 UTC	1582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d9 00 00 01 d9 01 28 1b 44 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 ab 49 44 41 54 58 85 c5 97 59 68 5c 55 18 c7 7f f7 ce 9d c9 d6 8c c9 64 c6 49 6c d2 a6 36 26 4d 37 4d 5a 41 1f 24 56 1f b4 e0 52 11 84 4a df 04 45 05 1f 44 d4 da 17 41 44 11 1f dc c5 05 45 04 15 14 f1 41 50 14 97 56 11 2d b1 a9 5b f7 74 d1 2e 69 32 9d 36 cb 64 e6 9e e5 1e 1f ee cc 9d b9 33 13 45 50 fb bd 9c 7b cf f9 ee b7 fc bf ff 77 ce 3d 96 31 06 80 64 32 b9 d8 b3 62 4f d8 36 23 96 27 7b 1c 27 62 51 94 92 4e 3d 59 68 ad 7a de 18 Data Ascii: PNGIHDR szzsBIT\|dpHYs(DtEXtSoftwarewww.inkscape.org<IDATXYh\UdIl6&M7MZA$VRJEDADEAPV-[t.i26d3EP{w=1d2bO6#'{'bQN=Yhz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49853	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:27 UTC	659	OUT	GET /images/prettyPhoto/dark_rounded/loader.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:28 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:27 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:15 GMT Accept-Ranges: bytes Content-Length: 2545 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:28 UTC	2545	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 32 32 32 ff ff ff 58 58 58 35 35 35 4a 4a 4a 70 70 70 43 43 43 8b 8b 8b 5d 5d 5d 80 80 80 50 50 50 77 77 77 63 63 63 3b 3b 3b 9f 9f 9f 92 92 92 6a 6a 6a aa aa aa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a Data Ascii: GIF89a222XXX555JJJpppCCC]]]PPPwwwccc;;;jjj!NETSCAPE2.0!Created with ajaxload.info!, $AeZ<Q46<AHa:ID0Fa\xG3!O:-Rj

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 389dace0-b01e-003d-533d-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224528Z-17c5cb586f65j4snyp1hqk5z2s00000000yg000000009rux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:28 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224528Z-16849878b786lft2mu9uftf3y400000000u000000000t6ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224528Z-r197bdfb6b4ld6jc5asqwvvz0w00000002e00000000068rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: adf44397-501e-00a3-4c15-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224528Z-r197bdfb6b4kkrkjudg185sarw00000002fg00000000926b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:45:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T224528Z-r197bdfb6b4kzncf21qcaynxz800000002p0000000005ze6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:45:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49867	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	412	OUT	GET /images/icons/app_32_xmood.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1807 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1807	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 01 d6 00 00 01 d6 01 5e d5 ea 8c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 06 8c 49 44 41 54 58 85 bd 97 7f 6c 55 e5 19 c7 3f e7 f6 f6 de b6 b7 bf 7b fb 83 62 29 22 83 41 67 a1 b3 2c 64 c5 21 6e 38 35 74 19 5b 74 6e 99 7f 60 dc 64 9b 1b 51 dc 16 86 4b 96 25 1a 37 f7 47 c3 66 c8 40 a7 44 33 0d cc 19 71 88 65 e8 30 1b 73 89 fc 28 b4 29 0e b4 20 ec 02 fd fd fb f6 bc 3f ce 79 f7 c7 b9 3d ed e9 bd 6d 20 31 be c9 c9 7b de f7 7d de ef f3 3c df e7 79 9f 73 5e cb 18 03 40 3c 1e 9f 4f 76 b4 05 c3 5a cb 11 f1 70 38 6c Data Ascii: PNGIHDR szzsBIT\|dpHYs^tEXtSoftwarewww.inkscape.org<IDATXlU?{b)"Ag,d!n85t[tn`dQK%7Gf@D3qe0s() ?y=m 1{}<ys^@<OvZp8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49866	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	411	OUT	GET /images/icons/app_32_inis.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:08 GMT Accept-Ranges: bytes Content-Length: 1648 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 05 ff 00 00 05 ff 01 c9 76 ad 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 05 ed 49 44 41 54 58 85 c5 97 6d 6c 94 55 16 c7 7f f7 99 67 a6 53 4a 3b 43 e7 99 16 16 d3 4e df 69 2d 62 a8 bc 64 89 84 a5 2a 04 16 14 17 f1 05 8d c1 c6 ac 7e d1 a8 d9 b8 59 13 13 34 fb 61 fd 40 dc ac f1 6d 6b b4 18 89 46 30 e0 06 31 fa 61 b3 ac ab 5b a4 40 95 17 8b 85 6e 37 0b 42 3b 33 6d a7 2d f3 bc df fd 30 d3 4e a7 33 a5 31 51 38 c9 64 72 e7 9e e7 fc ff e7 ff 9c 73 cf 5c 21 a5 04 40 d3 b4 85 8a 94 3b 55 58 6b 2b 22 e2 51 55 41 da Data Ascii: PNGIHDR szzsBIT\|dpHYsvVtEXtSoftwarewww.inkscape.org<IDATXmlUgSJ;CNi-bd*~Y4a@mkF01a[@n7B;3m-0N31Q8drs\!@;UXk+"QUA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49868	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	405	OUT	GET /images/logo-footer.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:28 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:05 GMT Accept-Ranges: bytes Content-Length: 2802 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	2802	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 21 08 06 00 00 00 5e 23 a0 50 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 02 c5 00 00 02 c5 01 89 d6 7f ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0a 6f 49 44 41 54 78 9c ed 9b 7b 70 54 d5 19 c0 7f df dd 0d 21 e1 29 c8 23 40 51 14 90 12 51 e4 55 54 6c c9 a0 c1 64 c3 6e a2 64 17 41 34 b5 0e d4 32 56 6d b5 b5 af e9 f4 e1 1f da d6 8e 63 19 8b 53 1f 6d 1d 92 cd 2a c9 86 dd 20 d6 42 a0 3e 40 0a 28 2a 8a 8f 11 04 81 90 96 47 20 24 cb 66 ef d7 3f 6e 36 09 31 24 81 dd 2c 29 ee 6f e6 ce dd bd e7 9e ef fb ce dd ef 9e 73 be ef 9c 15 55 a5 07 72 37 f0 1d 20 13 f8 1c 08 02 bf 02 4e 9e 4f a3 Data Ascii: PNGIHDR!^#PsBIT\|dpHYstEXtSoftwarewww.inkscape.org<oIDATx{pT!)#@QQUTldndA42VmcSm* B>@(*G $f?n61$,)osUr7 NO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49869	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	658	OUT	GET /images/prettyPhoto/dark_square/loader.gif HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 2545 Cache-Control: max-age=2592000, public Content-Type: image/gif
2024-10-24 22:45:29 UTC	2545	IN	Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 32 32 32 ff ff ff 58 58 58 35 35 35 4a 4a 4a 70 70 70 43 43 43 8b 8b 8b 5d 5d 5d 80 80 80 50 50 50 77 77 77 63 63 63 3b 3b 3b 9f 9f 9f 92 92 92 6a 6a 6a aa aa aa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a Data Ascii: GIF89a222XXX555JJJpppCCC]]]PPPwwwccc;;;jjj!NETSCAPE2.0!Created with ajaxload.info!, $AeZ<Q46<AHa:ID0Fa\xG3!O:-Rj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49870	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	414	OUT	GET /images/seperator-980-50-opa.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:06 GMT Accept-Ranges: bytes Content-Length: 3514 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	3514	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 1f 00 00 00 35 08 06 00 00 00 20 7b 56 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR5 {VhtEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49873	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	658	OUT	GET /images/prettyPhoto/dark_square/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 3507 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	3507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4c 00 00 00 77 08 06 00 00 00 a9 2a a6 45 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0d 55 49 44 41 54 78 da ec 5d 69 6c 14 c9 15 2e 1f dc 60 ee c3 0c 60 40 46 ac cd 7d 45 32 a7 c1 80 d7 09 b0 20 8e 1f 91 d0 22 05 f8 81 84 94 68 23 08 42 08 a3 e4 07 96 76 49 a4 fd 45 58 09 6f 24 f2 83 15 3f 22 2d 21 88 cb 20 ae e5 50 56 64 c1 1c e6 f2 32 32 60 71 d8 60 6e 70 de 57 54 4d 8a a6 ba a7 ab a7 67 7a 46 e9 92 4a d3 5d fd ea bd 7a 5f bd f7 ea 75 d5 78 9c d5 da da ca c2 e2 be e4 6e d9 b2 85 0d 1b 36 cc ee f9 08 aa 65 54 4b a8 8e a6 5a e0 93 dc 4e e2 b3 25 15 4a c2 28 50 df bd 7b c7 5e bd 7a 95 fd fa f5 eb 1c d4 b7 6f df 66 bd 79 f3 e6 Data Ascii: PNGIHDRLw*EtEXtSoftwareAdobe ImageReadyqe<UIDATx]il.``@F}E2 "h#BvIEXo$?"-! PVd22`q`npWTMgzFJ]z_uxn6eTKZN%J(P{^zofy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49871	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	659	OUT	GET /images/prettyPhoto/dark_square/btnNext.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 1411 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da cc 98 c9 4b 64 49 10 c6 a3 b4 dc 57 14 14 0f 83 0b 2a 68 a9 07 11 9a 56 5c 70 03 51 51 3c 38 a0 87 e9 83 77 2f e3 65 18 11 3d d8 82 d0 47 cf f3 07 88 0a 73 70 5c 66 c4 83 20 3a 17 bd 28 6e 87 1e 70 57 c4 7d ab aa 89 2f a8 28 b2 5f 57 95 65 5f aa 12 92 f7 2a 5f 66 be fc 45 7c 11 99 af 6c 6e b7 9b 6c 36 1b 8d 8f 8f 93 8f e2 e0 e7 8d 7c fd c8 7d 4a f9 9a 8d 46 6e fb 1a 17 17 57 10 15 15 e5 8a 8d 8d 75 da ed 76 17 e6 08 41 49 f0 5c ef de 33 c8 ae 37 0f 0f 0f de 46 06 ca e1 cb 27 97 cb f5 0b d7 1c 18 86 af 52 51 22 22 22 8a Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<%IDATxKdIWhV\pQQ<8w/e=Gsp\f :(npW}/(_We__fE\|lnl6\|}JFnWuvAI\37F'RQ"""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49872	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	663	OUT	GET /images/prettyPhoto/dark_square/btnPrevious.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 1442 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1442	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 44 49 44 41 54 78 da d4 58 49 4b 2c 57 14 3e 3d 38 8f 88 13 88 8a a2 a0 b8 10 44 08 4e 28 4e 18 b7 0a 59 64 93 7f 20 04 5c 89 0b 57 82 ca c3 45 50 14 c5 48 70 d8 04 dc 05 22 09 71 24 28 01 4d 8c 51 d4 38 34 2a 4e 38 cf 43 e7 7e 27 7d 9a 6b e7 f6 6b 93 c0 a3 df 81 4b dd aa ba 75 ea 7c e7 3b c3 ad b2 0f 0d 0d 5d d1 7f 97 30 d7 f1 9a 3e 90 3c 3e 3e 5a ef ef ef 6d 0f 0f 0f d6 a7 a7 27 eb f3 f3 b3 15 d7 5f 5e 5e fe 50 87 5f d5 f1 67 75 ed 87 a6 a6 a6 25 75 ee 34 e9 b0 f4 f5 f5 39 e9 23 10 05 86 14 58 ba bb bb 23 05 96 9c 4e 27 5f c3 80 58 ad 56 Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<DIDATxXIK,W>=8DN(NYd \WEPHp"q$(MQ84*N8C~'}kkKu\|;]0><>>Zm'_^^P_gu%u49#X#N'_XV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49874	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	659	OUT	GET /images/prettyPhoto/light_square/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:18 GMT Accept-Ranges: bytes Content-Length: 3507 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	3507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4c 00 00 00 77 08 06 00 00 00 a9 2a a6 45 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0d 55 49 44 41 54 78 da ec 5d 69 6c 14 c9 15 2e 1f dc 60 ee c3 0c 60 40 46 ac cd 7d 45 32 a7 c1 80 d7 09 b0 20 8e 1f 91 d0 22 05 f8 81 84 94 68 23 08 42 08 a3 e4 07 96 76 49 a4 fd 45 58 09 6f 24 f2 83 15 3f 22 2d 21 88 cb 20 ae e5 50 56 64 c1 1c e6 f2 32 32 60 71 d8 60 6e 70 de 57 54 4d 8a a6 ba a7 ab a7 67 7a 46 e9 92 4a d3 5d fd ea bd 7a 5f bd f7 ea 75 d5 78 9c d5 da da ca c2 e2 be e4 6e d9 b2 85 0d 1b 36 cc ee f9 08 aa 65 54 4b a8 8e a6 5a e0 93 dc 4e e2 b3 25 15 4a c2 28 50 df bd 7b c7 5e bd 7a 95 fd fa f5 eb 1c d4 b7 6f df 66 bd 79 f3 e6 Data Ascii: PNGIHDRLw*EtEXtSoftwareAdobe ImageReadyqe<UIDATx]il.``@F}E2 "h#BvIEXo$?"-! PVd22`q`npWTMgzFJ]z_uxn6eTKZN%J(P{^zofy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49876	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	420	OUT	GET /images/prettyPhoto/default/sprite.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:16 GMT Accept-Ranges: bytes Content-Length: 6682 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	6682	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 93 08 06 00 00 00 42 89 c1 c3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRBtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49877	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	660	OUT	GET /images/prettyPhoto/light_square/btnNext.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ritana.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:18 GMT Accept-Ranges: bytes Content-Length: 1411 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 16 08 06 00 00 00 73 09 94 1c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da cc 98 c9 4b 64 49 10 c6 a3 b4 dc 57 14 14 0f 83 0b 2a 68 a9 07 11 9a 56 5c 70 03 51 51 3c 38 a0 87 e9 83 77 2f e3 65 18 11 3d d8 82 d0 47 cf f3 07 88 0a 73 70 5c 66 c4 83 20 3a 17 bd 28 6e 87 1e 70 57 c4 7d ab aa 89 2f a8 28 b2 5f 57 95 65 5f aa 12 92 f7 2a 5f 66 be fc 45 7c 11 99 af 6c 6e b7 9b 6c 36 1b 8d 8f 8f 93 8f e2 e0 e7 8d 7c fd c8 7d 4a f9 9a 8d 46 6e fb 1a 17 17 57 10 15 15 e5 8a 8d 8d 75 da ed 76 17 e6 08 41 49 f0 5c ef de 33 c8 ae 37 0f 0f 0f de 46 06 ca e1 cb 27 97 cb f5 0b d7 1c 18 86 af 52 51 22 22 22 8a Data Ascii: PNGIHDR=stEXtSoftwareAdobe ImageReadyqe<%IDATxKdIWhV\pQQ<8w/e=Gsp\f :(npW}/(_We__fE\|lnl6\|}JFnWuvAI\37F'RQ"""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49875	156.67.232.199	443	3856	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:45:28 UTC	422	OUT	GET /images/prettyPhoto/default/sprite_x.png HTTP/1.1 Host: www.ritana.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=92tj4g3ck6gec62ef3aqc219r5
2024-10-24 22:45:29 UTC	290	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:45:29 GMT Server: Apache Vary: User-Agent Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 14 Apr 2016 13:26:17 GMT Accept-Ranges: bytes Content-Length: 1097 Cache-Control: max-age=2592000, public Content-Type: image/png
2024-10-24 22:45:29 UTC	1097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 2f 08 06 00 00 00 2f 81 12 cd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR//tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6692, Parent PID: 5420

General

Target ID:	0
Start time:	18:45:03
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3856, Parent PID: 6692

General

Target ID:	2
Start time:	18:45:06
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,10452880359700180572,15123100688171886197,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3656, Parent PID: 5420

General

Target ID:	3
Start time:	18:45:08
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.ritana.de/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.ritana.de/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
http://www.ritana.de/